Privacy Policy

1. Information we collect

• Account details for the parent or guardian: name, email address from Google sign-in, relationship to the child, and the country they are in (India or the United States).
• Details for each child, entered by the parent: a first name or nickname and an age. We do not ask for a child's full name, birthday, photograph, school, address or phone number.
• What you do in Taz: chat messages, simulations, experiments, projects and saved work.
• Parent control settings, such as time and question limits and blocked topics.
• Usage: which features are used and how often, including daily and monthly question counts for plan allowances.
• Family plan details: who manages a family and who has been invited or has joined.
• Payment records: plan, amount, dates and the Razorpay reference. Card and UPI details are handled by Razorpay, not stored by us.

2. How we use it

• To provide Taz: answer questions, save work and apply plan allowances.
• To help keep children safe: check messages for harmful content and alert parents where they have asked us to.
• To send parents summaries, safety alerts, invitations, offer codes and billing messages.
• To take payments and handle cancellations and refunds.
• To fix problems and improve Taz using counts and error reports that do not contain chat text.

We do not sell personal information and do not use it for advertising or to build profiles of children.

3. Children and parental consent

Accounts are created by a parent or legal guardian, who must be 18 or older. Before a child can use Taz, the parent fills in a short screen with their own details and their child's nickname and age, and gives consent for Taz to collect and use the child's information as this policy describes. We email the parent a copy of what was saved. A child cannot use Taz on an account until this is done.

From a child we collect the nickname and age the parent entered, the questions the child asks and the answers given, and what the child makes in Taz (projects, simulations, experiments and saved work). We use it only to run Taz for that child: to answer at the right level, to keep their work, to keep them safe, and to show the parent their activity. We do not sell children's information, do not use it for advertising, do not track children across other websites, and do not ask a child for more information than is needed to take part.

A parent can at any time see or change the family details, ask what information we hold about their child, have it deleted, or withdraw consent and stop any further collection, in Settings under Family details and consent, or by writing to contact@aitaz.com. Withdrawing consent deletes the family details, and the child can no longer use Taz on that account. These rights follow the Children's Online Privacy Protection Act (COPPA) for families in the United States, and we give them to every family.

4. AI replies

To write replies, the question and recent conversation are sent to AI models through OpenRouter. Names, addresses and other personal details are removed first, and we choose providers that offer not to train on or keep these messages wherever that option is available. Our records of AI use store the kind of question, the model and the cost, never the words. A reply to a common question may be saved for 30 days so it can be reused without sending anyone's question again.

5. Services that help run Taz

• Google: sign-in.
• OpenRouter and the AI model providers it routes to: writing replies, as described above.
• OpenAI moderation, if switched on: checking messages for harmful content.
• Razorpay: payments and subscriptions.
• Brevo: emails to parents and account holders.
• Cloudflare, Render and Supabase: hosting the website, server, files and database.
• Google Analytics, Microsoft Clarity and PostHog: only on public pages, only for visitors who agree, never inside the children's app.
• Discord: only if you choose to link a Discord account.

Some of these services store data outside India. We choose providers with appropriate security and use them only to run Taz.

6. Cookies and analytics

Signing in uses one secure cookie that keeps you signed in and cannot be read by page scripts. On our public pages we ask before using analytics cookies; advertising features are off. Cloudflare Web Analytics counts visits without cookies or personal information.

7. Storage, security and retention

Data is sent over HTTPS, access is restricted, and passwords are stored only as secure hashes. We keep account data while the account is open. AI usage records are kept for 90 days. When an account is deleted, its personal data is removed within 30 days, except records we must keep by law, such as payment and tax records.

8. Your rights

• Access: ask what data we hold about you or your child.
• Correction: ask us to fix incorrect data.
• Deletion: delete your account in settings, or ask us to.
• Withdraw consent: stop using Taz and delete the account at any time.
• Grievances: write to us and we will respond as described below.

To use these rights, write to contact@aitaz.com from the account's email address.

9. Changes to this policy

We will show the date of the latest version on this page and email account holders about significant changes.

10. Contact and Grievance Officer

Email contact@aitaz.com. Our Grievance Officer can be reached at the same address; we acknowledge complaints within 24 hours and aim to resolve them within 15 days.