EarlyMoments

EarlyMoments Privacy Policy

Effective Date: March 4, 2026

At EarlyMoments, we believe that transparency is the foundation of trust, especially when it comes to early education. This Privacy Policy details how Jatin Jagia, a sole proprietorship operating as EarlyMoments ("Data Fiduciary", "we", "us", "our"), collects, processes, and protects your digital personal data across our childcare management ERP, staff applications, and parent applications (collectively, the "Platform").

We are fully committed to protecting your privacy in strict compliance with India's Digital Personal Data Protection (DPDP) Act, 2023, and the DPDP Rules, 2025.

1. Information We Collect

We practice strict data minimisation, processing only the data necessary to deliver our services. We collect data through direct user input and automated platform interactions.

A. Information Provided by Schools and Staff

Account Details: Names, professional email addresses, phone numbers, and job designations.

Operational Data: School operational records necessary to configure the ERP portal.

B. Information Provided by Parents and Guardians

Identity & Contact Data: Names, email addresses, verified mobile numbers, and relationship to the enrolled child.

User-Generated Content: Messages or feedback submitted through the parent app.

C. Information Regarding Children (Data Principals under 18)

Profile Data: Names, dates of birth, and assigned classes.

Activity & Progress Data: Daily attendance, meal tracking, nap times, and developmental milestones.

Media: Photographs and videos documenting classroom activities.

Important Note: EarlyMoments never collects data directly from children. All child-related data is provisioned by partner schools with verifiable consent from parents/guardians.

D. Automated Technical Data

When you interact with our Platform, we automatically collect specific technical data to ensure system stability and security:

Device Information: Operating system, device model, and universally unique identifiers (UUID).

Network Data: IP addresses and browser types.

Usage Analytics: Interaction logs, crash reports, and access timestamps.

2. Purpose of Processing

We utilize your personal data exclusively for the following legitimate purposes:

Service Delivery: To create and authenticate your account securely using OTP verification.

Communication: To facilitate seamless updates between educators and parents regarding a child's daily activities.

Platform Improvement: To analyze crash reports and usage metrics to optimize the UI/UX of our Kotlin Multiplatform applications.

Security: To monitor for fraudulent activity, unauthorized access, and ensure overall platform integrity.

3. Children's Privacy & Verifiable Parental Consent

Operating in the EdTech sector makes the protection of children's data our highest legal and ethical mandate.

Verifiable Consent (DPDP Rule 10): We mandate verifiable parental consent before processing any data relating to a child. Parental identity is verified by cross-referencing contact details with the official admission records provided by our partner educational institutions.

Strict Prohibitions: We categorically prohibit the use of children's data for behavioral monitoring, profiling, or targeted advertising.

4. Cookies and Tracking Technologies

The EarlyMoments ERP web portal utilizes cookies (small text files stored on your device) to enhance your browsing experience.

Essential Cookies: Required for core functionalities, such as maintaining a secure login session.

Analytics Cookies: Used anonymously to understand how users navigate the portal, allowing us to improve layout and performance.

You may configure your browser to decline non-essential cookies, though this may impact certain platform functionalities.

5. Third-Party Sharing and Sub-Processors

We do not sell, rent, or trade your digital personal data. Data is only shared under these specific conditions:

Infrastructure Partners: We utilize industry-leading, secure cloud hosting providers (Data Processors) to store your data. They are legally bound by strict confidentiality agreements and process data solely on our instructions.

User-Initiated External Sharing: The Platform allows users to share specific updates externally via standard communication apps installed on their devices (e.g., initiating a standard WhatsApp message intent). Once a user exports data via these intents, it leaves the EarlyMoments ecosystem and is governed by the privacy policy of the respective third-party application.

Legal Obligations: We will disclose data if mandated by an Indian court order, law enforcement agency, or statutory body.

6. Data Security, Retention, and Breach Protocol

Security Standards: All data transmitted between your device and our servers is encrypted in transit (HTTPS/SSL) and secured at rest.

Retention and Erasure: Personal data is retained only until the purpose for its collection is fulfilled (e.g., when a student graduates or a school ends its subscription). In accordance with the DPDP Rules 2025, if your data is scheduled for routine erasure, we will notify you at least 48 hours prior to the deletion.

System Logs: For auditing and breach detection, system processing logs are securely retained for a mandatory minimum period of one (1) year.

Breach Notification: In the highly unlikely event of a personal data breach, EarlyMoments will notify the Data Protection Board of India (DPBI) and all affected Data Principals within 72 hours, providing full incident details and mitigation steps.

7. Your Rights as a Data Principal

In accordance with the DPDP Act, 2023, you hold the following rights:

Right to Access: Request a summary of your personal data and the identities of third-party processors with whom it has been shared.

Right to Correction & Erasure: Request the correction of inaccurate data or the erasure of data no longer required for its original purpose.

Right to Withdraw Consent: Revoke your consent for data processing at any time (subject to the understanding that this may restrict your access to the Platform).

Right to Nominate: Nominate another individual to exercise your privacy rights in the event of your death or incapacity.

8. Grievance Redressal

If you have any inquiries, requests to exercise your rights, or privacy-related complaints, please contact our designated Grievance Officer:

Name: Jatin Jagia (Proprietor)

Email: jatinjagia12@gmail.com (or grievance@earlymoments.co.in)

Working Hours: Monday to Friday, 10:00 AM to 5:00 PM IST

EarlyMoments is legally bound to review, investigate, and resolve any data privacy grievances within a maximum period of ninety (90) days from the date of receipt.