Privacy policy

How Jhablu handles your family’s data — written in plain language, not legalese. Last updated 24 July 2026.

At a glance

Jhablu is built for Indian families and treats your child’s information like it’s our own kid’s. The short version:

  • Saved to your account. Your child’s profile, optional profile photo, scrapbook, and saved stories are stored securely under your phone-verified account, so they’re there when you sign in on another device. Some app preferences — and any family-calendar reminders you created earlier — stay on this device only.
  • Some features use specialist providers. Depending on the language and feature, the minimum profile and request data needed is sent to ChatGPT or Sarvam. Bulbul receives read-aloud text when you use audio.
  • No advertising tracking. We don’t use advertising cookies, share data with data brokers, or track you across other apps. We do use first-party usage counts and privacy-scrubbed error monitoring to operate Jhablu.
  • Your phone is only for sign-in. We use it to send the one-time-password (OTP) at sign-in. No SMS marketing.
  • You control your data. Settings → Your data lets you download your account plus device records or permanently delete the account. Signing out alone does not delete it.

Who runs Jhablu

Jhablu is built and operated by Frolicbit Technologies Pvt. Ltd., a private limited company registered in India. For the purposes of India’s Digital Personal Data Protection Act 2023, Frolicbit Technologies Pvt. Ltd. is the data fiduciary — we’re the ones responsible for how your personal data is collected, used, and protected in Jhablu.

  • Registered office: Plot No. 365, Dr. Munje Road, Dhantoli, Nagpur, Maharashtra – 440012, India
  • Data contact: contact@frolicbit.com

What we collect

Two kinds of information, both provided by you when you use Jhablu:

About you (the parent)

  • Your name — provided at sign-in. Optionally your relationship to the child (mother, father, grandparent, other), which you can add later from Settings → You.
  • Your mobile number — used only to send the sign-in OTP. Never used for SMS marketing, and shared only with the service providers listed below who deliver the message.

About your child

  • Their name and age — needed to age-appropriately tune activities, stories, and rhymes.
  • Optional details you choose to add: date of birth (for the birthday card), interests (cricket, drawing, etc.), personality traits, growth areas, available times, school class. All optional; skip what you don’t want to share.
  • Your child’s photo — only if you upload one. It is stored with the child’s account profile and included in export and deletion.
  • The scrapbook — activities done, stories and activities you save. Account-backed scrapbook entries sync across sign-ins; some learning history stays on this device.

Why we collect it

Every field has one purpose: making Jhablu feel personal to your child. We don’t collect things “just in case” — if a field doesn’t shape an activity or story, we don’t ask for it.

  • Name & age → activities are addressed to your child by name and pitched at the right developmental level.
  • Interests & personality → the generator weaves them into activities. A cricket-loving kid gets cricket-themed maths puzzles.
  • Phone number → secure sign-in (OTP).
  • Scrapbook entries → your own record of moments. It’s yours: nothing in Jhablu shows it to us, and database access is limited to what’s needed to run and support the service.

Where your data lives

Jhablu deliberately separates account data from device-only data:

  • Your adult profile, child profiles and profile photos, scrapbook, saved stories and teacher library are kept in your account.
  • Account data follows your phone-verified sign-in. Quick-play history, language/display preferences, some local counters — and any family-calendar reminders you created earlier — stay in this browser and do not travel.
  • If you uninstall the app or clear browser storage, the device-only items are gone with no backup. Your account data is safe and returns when you sign back in.

What does leave your device: when you tap “Activity for [child]” or “Read story”, we send the relevant profile fields (name, age, interests) plus your chip selections (mood, energy, etc.) to the configured content provider to generate the result. That request returns to your device and lives in scrapbook only if you save it.

Your account data (profiles, scrapbook, saved stories) lives on managed, access-controlled servers so it can follow your sign-in across devices. The device-only items above aren’t copied to our servers and aren’t backed up by us.

About children’s data

Jhablu is meant for parents to use with their children aged 6–12, not for children to use directly. Every piece of data about your child is provided by you, the parent or guardian, and you control all of it.

  • Parental consent. By creating a child profile you confirm that you are that child’s parent or legal guardian and that you consent to us processing their data as described here. We record the policy version, time and account role when the signup checkbox is accepted. You can withdraw consent by removing the child profile or deleting the account.
  • Under-18s. The DPDP Act treats anyone under 18 as a child. Jhablu is an adult-operated service and does not knowingly accept a child as the account holder.
  • We do not collect children’s data without explicit parental input.
  • We do not show ads to children, do not profile them for marketing, and do not share their data with third parties for advertising.
  • You can edit or delete your child’s profile any time from Settings → Your children → Edit / Remove.
  • Signing out ends access on that device but does not delete the account. Use Settings → Your data → Delete my account to erase account content and Jhablu records on the current device.

Content generation and third-party services

We use service providers only to run the features you request:

  • Supabase: phone/email authentication, account database and server functions.
  • MSG91: mobile number, OTP and approved template variables needed to deliver sign-in messages.
  • ChatGPT and Sarvam: the child’s first name, age, selected optional profile fields and the request choices needed to generate an activity, story or other content. We do not send the adult’s phone number, payment data or profile photo.
  • Bulbul: the story or narration text needed when you request read-aloud audio. That text may contain a first name.
  • Razorpay: checkout amount, plan, adult contact details entered at checkout and payment/order identifiers.
  • Hosting and Sentry: service operation and privacy-scrubbed error records. Jhablu configures Sentry without user identity, request bodies, cookies, prompts, outputs or replay.
  • Optional contact webhook: if enabled during beta, the phone/email/child first name submitted for a requested update is sent to the owner-configured contact intake service.
  • Approximate location: we keep a rough idea of the city or state our families are in, so we can see where Jhablu is loved most — never your exact location.
  • Public story sharing: when you explicitly create a share link, the story snapshot and first-name attribution become accessible to anyone with that link. Deleting the account removes those links.

How long we keep your data

We keep your data only as long as we need it for the purpose you gave it, or as long as the law requires — then we delete it.

  • Account, child profiles, scrapbook & saved stories: kept while your account is active. Remove a child profile and its data is deleted; delete your account and we remove your personal data within 30 days — except anything we must keep by law (such as tax and payment records).
  • Payment records: retained as long as required under Indian tax and accounting law.
  • Generation metadata: feature, language, model, age/gender bands and safety outcome; no routine prompt or output snapshot. Deleted after 90 days.
  • Content reports you submit: report reason, optional note and the content snapshot needed for review. Deleted after 180 days.
  • First-party usage counts: deleted after 395 days. User-linked abuse events are deleted after 30 days.

How we protect your data

Your account data lives on managed, access-controlled servers, is protected in transit by encryption (HTTPS), and is reachable only through your phone-verified sign-in. We limit staff access to what’s needed to run and support the service.

No system is perfectly secure, but if a breach ever affects your personal data, we will notify you and the Data Protection Board of India as required under the DPDP Act, 2023.

Where your data is processed

Your account data is stored on servers configured for our service, and some processing happens outside India. In particular, when you generate an activity or story, the request is processed by ChatGPT, which may process it on servers in the United States. We transfer only the minimum needed — your child’s name, age, the options you picked, and the titles of recent stories so the next one isn’t a repeat; never your phone number, photos or scrapbook entries — and only to countries not restricted by the Government of India under the DPDP Act, 2023. By using these features you consent to this transfer for the purpose of generating your content.

Your rights

Under India’s Digital Personal Data Protection Act 2023 (DPDP Act), and as a matter of how we’d want any kids’ app to treat us, you have the right to:

  • Access the data we hold about you and your child — your profiles, scrapbook, and saved stories are all visible in the app whenever you’re signed in.
  • Correct any inaccurate information — edit from Settings → You and Settings → Your children.
  • Export or delete account and device data from Settings → Your data. Signing out is separate and does not delete saved data.
  • Withdraw optional consent. Optional preference toggles take effect immediately. If you previously opted in to WhatsApp updates and want a number already sent to our messaging processor removed, contact contact@frolicbit.com.
  • Nominate another person to exercise these rights on your behalf if you die or become incapacitated (a right under the DPDP Act) — write to us to set this up.
  • Complain — raise a grievance with us first, and if it’s not resolved, with the Data Protection Board of India.

To exercise any of these rights, or if you have a concern about how we’ve handled your data, write to our grievance contact at contact@frolicbit.com and we’ll respond promptly.

Grievance Officer

As required under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, you can reach our Grievance Officer with any complaint about how we handle your or your child’s data:

Grievance Officer
Frolicbit Technologies Pvt. Ltd.
Plot No. 365, Dr. Munje Road, Dhantoli, Nagpur, Maharashtra – 440012, India
Email: contact@frolicbit.com

We’ll acknowledge your complaint within 48 hours and aim to resolve it within 15 days. If you’re not satisfied, you may escalate to the Data Protection Board of India.

Cookies and analytics

Jhablu uses no advertising cookies or cross-site analytics. We keep first-party feature/view counts to understand demand and cost, and use Sentry for privacy-scrubbed operational errors. We do not enable session replay, DOM recording or advertising profiles.

Changes to this policy

We’ll update this page when our practices change. The “Last updated” date at the top reflects the most recent revision. Material changes (new data we collect, new third-party processors, etc.) will be flagged in the app.

Contact us

Questions, concerns, or requests about your data?

Made for Indian families.