Privacy policy

Last updated: 1 August 2026

This Privacy Policy explains how NeuroBuddy collects, uses, and protects your personal data when you visit neurobuddy.in, complete our readiness assessment, or buy our products. We've written it to be clear and direct, because the families we serve deserve that.

This policy is governed by the Digital Personal Data Protection Act, 2023 of India (DPDP Act) and other applicable laws.

Who we are

NeuroBuddy is operated from Faridabad, India. We design developmental support tools for children with autism, ADHD, and learning differences, and we work with occupational therapists and special educators to validate our products.

For any questions about your data, please email care@neurobuddy.in.

What data we collect

When you complete our readiness assessment

  • Your name and contact details (email, mobile number)
  • Your child's first name, age, and developmental profile information you choose to share
  • Your answers to the assessment questions about your child's communication, attention, social-emotional, daily living, sensory, and academic readiness

When you buy from us

  • Name, billing and shipping address, email, mobile number
  • Order history and products purchased
  • Payment information (processed and held by Razorpay; we do not store card details ourselves)
  • GSTIN if you've shared it

When you visit our website

  • Standard web analytics: IP address, browser type, device, pages visited, time spent
  • Cookies and similar tracking technologies (see Cookies section below)

When you contact us

  • The contents of your emails and any details you share with our team

Why we collect this data (Purpose)

Under the DPDP Act, we collect and process your personal data only for specific, lawful purposes:

  • To deliver your child's personalised recommendations. Your assessment answers help us suggest the right products and free resources for your child's developmental stage.
  • To process and fulfil your orders. Including taking payment, shipping products, and providing customer support.
  • To send you transactional communications. Order confirmations, shipping updates, refund notifications.
  • To check in on outcomes. We may contact you 30, 60, or 90 days after purchase to learn whether the product helped your child. Your feedback shapes future products.
  • To improve our products and content. Aggregate, anonymised data on what assessment paths lead to what recommendations helps us improve.
  • To comply with legal obligations. Including tax records, consumer protection requirements, and lawful requests from authorities.

Children's data — special protection

We take special care with information about children. We do not:

  • Knowingly collect any data directly from children under 18
  • Process children's data without parental consent
  • Use children's data for targeted advertising or behavioural tracking
  • Share children's data with third parties for marketing purposes

All assessment responses are completed by parents on behalf of their child, and the data is used only to generate personalised recommendations and improve our products.

Who we share data with

We share data only with carefully chosen service providers we need to operate our business. Each is bound by confidentiality and data protection obligations:

  • E-commerce and order processing — our online store, hosting, and order management platform
  • Payment processing — Razorpay handles all payment information; we do not store card details ourselves
  • Email delivery — for transactional emails (order confirmations, assessment results, shipping updates)
  • Logistics partners — Shiprocket, Delhivery, and other courier services to deliver your orders
  • Analytics — Google Analytics and Meta Pixel for anonymous website analytics
  • Internal data infrastructure — to securely route data between our systems

We do not sell your personal data. We do not share it with third parties for their own marketing purposes.

Your rights under the DPDP Act

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correct — ask us to fix any inaccurate information
  • Erase — request that we delete your data, subject to legal retention requirements
  • Withdraw consent — opt out of marketing communications, assessment outcome follow-ups, or further data processing at any time
  • Grievance redressal — raise a complaint about how we handle your data (see Grievance Officer below)
  • Nominate — designate another person to exercise your rights in case of death or incapacity

To exercise any of these rights, email care@neurobuddy.in with your request. We respond within 30 days.

Grievance Officer

If you have a concern or complaint about how we handle your personal data, you can reach our Grievance Officer:

We acknowledge complaints within 48 working hours and resolve them within 30 days. If you're not satisfied, you can escalate to the Data Protection Board of India under the DPDP Act.

How long we keep your data

  • Assessment responses: Up to 3 years from your last activity, then anonymised for product improvement
  • Order data: 8 years (required for tax and legal compliance)
  • Marketing preferences: Until you withdraw consent
  • Website analytics: Up to 2 years

You can ask us to delete your data at any time, subject to legal retention requirements above.

How we keep your data secure

  • All data in transit is encrypted via HTTPS (SSL/TLS)
  • Payment data is handled directly by Razorpay (PCI-DSS compliant) — we never see or store full card details
  • Our systems are password-protected with two-factor authentication where available
  • Only the small NeuroBuddy team and our validated service providers have access, and only on a need-to-know basis

While we follow industry-standard security practices, no system is 100% secure. If a data breach occurs, we'll notify you and the Data Protection Board within the timeframes required by law.

Cookies

We use cookies and similar tracking technologies to:

  • Make our website function (essential cookies — these can't be turned off)
  • Understand how visitors use our site (Google Analytics)
  • Show you relevant content on other platforms (Meta Pixel)

You can control non-essential cookies through your browser settings or our cookie banner where shown.

International data transfers

Some of our service providers (Shopify, Google, Meta, Brevo) process data outside India. They are bound by contract to provide adequate data protection and we only use providers that meet recognised international standards.

Changes to this policy

We may update this policy from time to time. If we make a significant change, we'll notify you by email and update the "Last updated" date at the top of this page. The latest version is always available at neurobuddy.in.

Contact us

Questions about your privacy or this policy? Email care@neurobuddy.in. We respond within 48 working hours.

NeuroBuddy is a developmental support brand. We are not a substitute for clinical assessment, diagnosis, or therapy. Always consult a qualified clinician for your child's specific needs.