1Who we are
YUG ("we", "us") is an app made by KryzenX that tells the Bhagavad Gita and other wisdom traditions as stories for children aged 5 to 17 and the grown-ups who read with them, with practice and small daily activities. YUG works on the web and as a phone app. This policy covers all of them, and the pages at this address.
Under India's Digital Personal Data Protection Act, 2023, KryzenX is the data fiduciary: we decide why and how your family's data is used, and we answer for it.
YUG is available in India, the United States, Canada, Australia and New Zealand. Families in each country have the rights their own law gives them, and this policy says where those differ.
2What we collect
We only collect what a feature needs. Here it is, in full.
The grown-up's account
- Name and email, and a password (we store only a one-way scrambled form, never the password itself). We email a 6-digit code to confirm the address.
- If you choose Continue with Google: the email, name and account id Google shares with us. We never see your Google password.
- Your country, and in India your mobile number, state and city, asked once when a family is saved, used for the account. Outside India we ask only the country; a mobile number is optional. We send you updates or offers only if you give a number and tick a separate box, and we record when you did.
- Your app language.
You can also start as a guest family with no name, email or number. Your device keeps a private key to the family until a grown-up saves it.
Each reading profile
Each child has a reading profile, and a grown-up can keep one of their own. Every profile holds the same few things:
- A first name, age, a chosen avatar, language, reading level and optional interests (such as "kindness" or "courage").
- Progress: parts read and where they stopped, practice done, stars, streaks, badges, story cards and game scores.
- Things a child chooses or writes in the app: answers in story questions, short Morning and Bedtime YUG notes (up to 300 characters) and challenge reflections. These stay inside your family.
Family features
- Ask a grown-up: a grown-up (behind the grown-up gate) can send a relative a private link to a story question. The link shows the child's first name, the question and their choice; the relative may add a first name, which is checked for anything unsuitable. Links stop working after 30 days.
- Invite a family: your family's invite code, and which families joined with it.
- Support: messages you send us, with your app version, device type and language, so we can help.
Payments
In the iPhone and Android apps, YUG Vasant is bought through the App Store or Google Play, and paid with the account you use there. Apple or Google handles the payment; RevenueCat checks the purchase for us and tells us whether your plan is active. RevenueCat gets only a random family number and the purchase, never your name, email or anything about your children. Elsewhere, YUG Vasant is paid through Razorpay; your card, UPI or bank details go to Razorpay, not to us. Either way we keep the plan, its dates, the order number and whether your plan is active.
Technical information
- The days an account was used (first and last time that day), to run and support the service.
- Your network address, held briefly to stop people guessing passwords or creating accounts in bulk (for at most an hour).
- Your device's time offset, sent with each request so streaks and daily stories follow your own midnight. It isn't stored.
We do not use advertising IDs, third-party analytics or tracking tools, and the app doesn't ask for your contacts, photos, camera, microphone or location.
3What we never do
- Show ads, or let anyone advertise to your children.
- Sell, rent or trade personal data.
- Track children or build profiles of them for marketing.
- Let children message each other or strangers, or show any child's profile in public. There are no public leaderboards.
- Sell coins, gems or anything like them to children.
4How we use it
- To run YUG: show each child the right story for their age and language, remember their place, and keep their progress across devices.
- To run your account: sign-in, email codes, password resets, receipts and messages about your plan.
- To answer you when you contact support.
- To keep YUG safe: stop misuse, guessing and fake accounts.
- To improve YUG, looking at counts across all families (for example, how many finish Part 1), never at one child to target them.
- To send updates or offers, only if you opted in. You can stop them any time.
5Children and parental consent
YUG is for children, so a grown-up is always in charge:
- Children never have their own login. Every reading profile belongs to a family account held by a parent or guardian.
- A parent or guardian gives consent when they add a child, and when they save a guest family that children were already using.
- Settings, purchases, invites, sharing out of the app and deleting data sit behind a grown-up gate, and deleting also needs the account's password (or its Google sign-in).
- We don't track children's behaviour for advertising or target them with ads, as India's data protection law requires.
- In the United States, YUG follows the Children's Online Privacy Protection Act (COPPA): we collect from a child only what a feature needs, with a parent's consent, never more as a condition of playing, and a parent can review it, stop it or delete it at any time.
If you think a child is using YUG without a parent's consent, write to us and we will remove their data.
6Who else handles it
We share data only with companies that help us run YUG, only what they need, and under contracts that let them use it only for us:
| Who | What for | What they handle |
|---|---|---|
| Cloudflare | Delivering the app securely, and storing story pictures and audio | Network traffic; no story progress |
| Our hosting provider | Running our servers and database | The account and family data above, stored for us |
| Apple, Google Play | Selling YUG Vasant in the iPhone and Android apps | The purchase, under your own store account |
| RevenueCat | Checking store purchases and renewals for us | A random family number and the purchase; no names |
| Razorpay | Taking payments for YUG Vasant outside the app stores | What you enter at checkout |
| Our email provider | Sending codes, receipts and replies | Your email address and the message |
| Only if you choose Continue with Google | The sign-in itself |
We may also share information if the law requires it, or to protect a child's safety. If KryzenX is ever merged or sold, this policy's promises go with your data, and we'll tell you first.
Our servers are in India, so for families in the United States, Canada, Australia and New Zealand, data is stored and processed in India. Some providers may process data in other countries. When they do, we use providers bound to protect it to the standard of this policy, and follow what the law allows.
7How long we keep it
- Family and children's data is kept while your account exists, so your children's progress is there when they return.
- When you delete a child or the family in the app, it is deleted from our live systems straight away, including everything that child created. Backup copies are replaced in our normal backup cycle.
- Email codes expire in 15 to 30 minutes, and shared question links after 30 days.
- Apple, Google, RevenueCat and Razorpay keep their own payment records, as the law requires them to.
- If an account stays unused for a long time, we may contact you before deleting it.
8How we protect it
- Everything travels encrypted (HTTPS).
- Passwords and email codes are stored only in scrambled form (argon2), and codes stop working after a few wrong tries.
- Sign-in and account creation are rate-limited against guessing and abuse.
- Our team's tools need a password and a code from an authenticator app, and only a few people can use them.
- If a breach ever affected your data, we would tell you and the authorities as the law requires.
9Your rights and choices
As a parent or guardian, you can, for yourself and your children:
- See your family's information in the app, or ask us for a summary of what we hold.
- Correct a child's name, age and language in the app; for your own name, number or city, write to us and we'll update it.
- Delete a child's profile or the whole family: Family → Your family's data. It's permanent.
- Withdraw consent at any time, by deleting the data or writing to us. To stop updates or offers, reply to any of them or write to us.
- Nominate someone to act for you if you are unable to.
- Complain to us (section 11), and if you're not satisfied, to the regulator where you live: the Data Protection Board of India, the US Federal Trade Commission, the Office of the Privacy Commissioner of Canada, the Office of the Australian Information Commissioner, or New Zealand's Office of the Privacy Commissioner.
We reply to requests within 30 days, and usually much sooner.
10Changes to this policy
If we change this policy, we'll update the date above. If a change matters for how we use your family's data, we'll tell you in the app or by email before it takes effect, and ask for consent again where the law requires.
11Contact and grievances
For any question, request or complaint about privacy, write to us. We're glad to help.
KryzenX · YUG
Email: [email protected]
Grievance officer: reachable at the same address, subject "Privacy".