Kuhu is made for children, which is exactly why it is built to know as little as possible. This page explains, in plain language, everything we collect, why, and what we will never do. For the child-focused summary, see our Children's Privacy page.
Kuhu (“we”, “us”) is a language-learning app for children of the Indian diaspora, operated from India and available at kuhukids.com. For any privacy matter, write to privacy@kuhukids.com. Our grievance contact under India's Digital Personal Data Protection Act (DPDP) is grievance@kuhukids.com — we aim to respond within 7 days.
Kuhu serves families in India and around the world, so we hold ourselves to the strictest children's-privacy rules across the countries our families live in — India's Digital Personal Data Protection Act (DPDP), the US Children's Online Privacy Protection Act (COPPA), the EU/UK GDPR and the UK's Age-Appropriate Design Code. Rather than offering different protections in different places, we apply the strongest standard to everyone: no child data, no ads, no tracking of children, verifiable parental consent. Whichever law applies to you, your rights on this page do not shrink with geography.
If you join the waitlist: your email address, your language preference, and the time you signed up.
If you create a family account (parents/guardians only, 18+): your email address, a record of your consent (what you agreed to and when), and your family's lesson progress — which lessons were completed, in which language. That is the entire list.
From children: nothing. Children never have accounts, are never asked for a name, photo, birthday, voice recording, or any other personal information, and cannot type free text anywhere in the learning app. Lesson progress belongs to the parent's account, not to a child's identity.
On our marketing pages only (the homepage and other parent-facing pages), we use Google Analytics and Statcounter to count visits. These tools are never loaded on the learning-app screens children use — we block them there by design, and we have disabled advertising and ad-personalization features. If you continue into the app from the homepage, analytics is switched off.
The Family Corner lets a parent add photos of loved ones to word cards and record rhymes in their own voice. These photos and recordings are stored only in your browser, on your own device. They are never uploaded to Kuhu, never leave your device, and we never see, receive, or process them — deleting them in the Family Corner (or clearing your browser data) removes them completely. Because they never reach us, they are not part of any data we hold about your family. The Family Corner is designed for grown-ups; the microphone is used only when a parent chooses to record, and the app never records children.
We never show advertising. We never sell or share personal data with anyone for marketing. We never track or profile children — no behavioural monitoring, no targeted anything, as required by India's DPDP Act and the US COPPA rule. We never use your data, or your child's progress, to train AI models. Audio in the app is pre-recorded; nothing a child does is sent to any voice or AI service.
Account and progress data is stored with Supabase (our database provider) and the site is served by Vercel (our hosting provider). They process data on our behalf under their own security commitments and do not use it for their own purposes. Sign-in emails are delivered by our email provider. Payments, when we launch them, will be handled by payment providers — we will never see or store card numbers.
You can ask us at any time to show you the data we hold about your family, to correct it, or to delete your account and everything with it — email privacy@kuhukids.com from your account email and we will complete deletion within 30 days. You can withdraw consent at any time, which ends the account. Progress saved only on your device can be cleared from your browser settings. If you are in the UK/EU, these rights map to your GDPR rights; if in India, to your DPDP rights — either way, the answer is the same: it's your data.
We keep account data only while the account is active. Accounts inactive for 24 months are deleted after an email warning. Waitlist emails are deleted once they are no longer needed for launch communication. Data is protected with encryption in transit, row-level security in our database (each family can only ever read its own rows), and access limited to the founder.
If we change this policy, we will update the version and date above and email account holders about anything material. We will never quietly weaken the child-safety commitments on this page.