Digital Personal Data Protection Act 2023
Privacy notice
The short version: you can use everything on this site without an account, and we do not track anybody, of any age, ever.
Every lesson, calculator and reference page works with no account and no personal data at all. If you choose to create an account so your progress is saved, we store your name, your age band, your email and what you have completed — and nothing else. We run no analytics, no advertising and no third-party scripts of any kind. We do not sell or share your data. You can delete your account and everything in it at any time.
Who is responsible
MoneyLingo is the Data Fiduciary — the law's name for the organisation responsible for your data — for everything described here. Questions about how your data is handled go to privacy@moneylingo.in. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
If you are under 18
Under Indian law, anyone under 18 is a child. That is different from Europe or the UK, where the line is 13 or 16, and it means the strictest rules apply to most of the people this site is built for.
What that means in practice:
- You do not need an account to use anything here. All the learning material and all the calculators are open.
- If you want an account so your progress is saved, we have to ask a parent or guardian first and verify that they really are one. Until they confirm, we do not store any progress — not hidden, not saved for later. We simply do not write it.
- We are not allowed to track you, build a profile of your behaviour, or advertise to you — and a parent cannot agree to those on your behalf either. We would not do it anyway.
- The minimum age for an account is 13.
What we collect
Without an account: nothing. No cookie that identifies you, no fingerprint, no analytics event. The only thing stored on your device is your light-or-dark theme choice, and it never leaves your browser.
With an account: a display name (a nickname is fine), your email address, your age band, and your learning progress. Note that we ask for your year of birth, not your full date of birth, and store only the band — because the band is all the law requires us to know.
What we deliberately do not collect: your location, your contacts, your phone number, your PAN or Aadhaar, your income, your bank or investment details, or any advertising identifier. We are not a regulated financial entity and we have no lawful need for any of it. If a site offering financial education asks you for your PAN, that is worth asking about.
What we do with it, and what we refuse to
We do this
- Recording that a lesson or quiz was completed, so the learner can see their own progress.
- Showing a learner their own progress, badges and streak.
- Showing a teacher completion and quiz performance for their own class.
- Platform-wide aggregate counts computed on our own servers from data we already hold.
- A reminder on a fixed schedule that the learner or their parent switched on.
We refuse to do this
- Any third-party analytics, advertising or session-replay SDK, on any surface.
- Building a behavioural profile to predict churn or to lengthen a session.
- A/B testing engagement mechanics on anyone under 18.
- Retention or cohort analysis keyed to identifiable children.
- Notification timing derived from an individual child's usage pattern.
- Exporting gamification state to any marketing or profiling system.
- Targeted advertising to anyone, of any age.
Cookies and trackers
There is no cookie banner on this site because there is nothing to consent to. We set 1 strictly necessary preference (theme) and no analytics, functional or advertising cookies at all. We load no third-party scripts.
These are vendors we considered and turned down, and why — recorded here so the decision outlives whoever made it:
| Vendor | Why not |
|---|---|
| Google Analytics | Per-visitor event stream to a third party. Cannot be reconciled with s.9(3). |
| PostHog | Product analytics with per-person profiles and session replay. |
| Mixpanel | Behavioural profiling is the product. |
| Microsoft Clarity | Session recording. Records a child using the site. |
| Hotjar | Session recording and heatmaps. |
| Meta Pixel | Advertising retargeting. Prohibited for children in terms. |
| Google Ads / AdSense | We run no advertising at all — see REVENUE_PROMISES. |
| Any A/B testing SDK | Experimenting on minors to optimise engagement. |
Where your data lives
Course-progress data is stored in Google Firebase with India (Mumbai) selected as its region, and the site is served from Mumbai. Sign-in itself runs on Google's authentication service, whose identity records may be processed on Google infrastructure outside India. We send personal data nowhere else.
Your rights
Under the DPDP Act you can ask us to:
- tell you what data we hold about you and who we have shared it with (nobody);
- correct anything that is wrong;
- delete your account and everything in it;
- nominate someone to exercise these rights if you cannot;
- withdraw consent, which must be as easy as giving it.
Deletion is completed within 30 days. Start any of these on your data page or email privacy@moneylingo.in.
Complaints
Our Grievance Officer is reachable at grievance@moneylingo.in. We acknowledge within 24 hours and aim to resolve within 15 days. See the grievance page for the full process.
Pre-launch note. This notice describes the design as built. The named Grievance Officer and Data Protection contact, and the verifiable parental consent mechanism, must be finalised and reviewed by Indian counsel before accounts are opened to the public.