Last updated: July 2026 · Ariantra AI Foundry Private Limited
Who We Are
Ariantra AI Foundry Private Limited is the data controller responsible for your personal data. We run a game-building bootcamp for children aged 8–14, operating online across India.
When this policy says "Ariantra", "we", "us", or "our", it means Ariantra AI Foundry Private Limited.
This policy applies to all personal data collected through our website, WhatsApp communication, and the Ariantra platform. It should be read alongside our Terms & Conditions.
What We Collect and Why
We collect only what we need to deliver our service. Here is every type of data we collect and the specific purpose for each:
| Data | Purpose | Legal Basis |
|---|---|---|
| Parent's name | Identify the account holder, address communications | Contract performance |
| Parent's phone number | Session booking via WhatsApp, notifications | Contract performance |
| Parent's email address | Sending session summaries and receipts | Contract performance |
| Child's first name | Personalising the session experience | Parental consent |
| Child's age | Ensuring the child meets the age requirement (8–14) | Parental consent |
| Session dates & duration | Record-keeping, billing, progress tracking | Contract performance |
| Mentor session notes | Progress summaries shared with parent after each session | Contract performance |
| Games built during sessions (HTML files) | Platform storage, parent viewing, potential publishing — owned by Ariantra per our T&C | Legitimate interest / T&C |
| Payment information | Processing session payments via Razorpay | Contract performance |
| Ari chat history (conversations with the AI buddy, including games built in them) | Showing your child their chat history across visits and devices — stored on our servers, linked to the account (or the device for guests); never sold, shared, or used for advertising | Contract performance / parental consent |
| Game play activity (which games a signed-in account plays and for how long) | Understanding engagement, improving games, and deciding upgrades — linked to the account, never sold or shared | Legitimate interest |
| Technical usage data (IP address, browser/device type, and AI usage volumes per request on Ari) | Service security, abuse and rate-limit enforcement, cost accounting, and counting visitors — stored on our servers, visible only to the operator; never sold, shared, or used for advertising | Legitimate interest |
| Website usage data | Understanding how visitors use our site and games (via Mixpanel) | Legitimate interest |
We do not collect: full names of children, photographs, school names, home addresses, or any sensitive personal data beyond what is listed above.
How creator-account details are protected: when you create a game-creator account on our Studio, the parent contact details and child's first name you provide are stored encrypted (AES-256). They are not visible to Ariantra staff or shown on any screen; the platform only uses them internally to email you about your child's games (for example a content review or an available upgrade). Your child's first name and age appear publicly under their games only if you switch that on, and you can turn it off at any time.
Children's Data
Important — Please Read
Ariantra's service is designed for children aged 8–14. Under India's Digital Personal Data Protection Act 2023 (DPDP Act), Section 9, processing personal data of a child requires verifiable parental consent.
By enrolling your child and agreeing to these terms, you — as the parent or legal guardian — provide this consent on behalf of your child. We do not collect data from children directly. All data is collected from and through the parent.
We do not serve behavioural advertising to children. We do not track children's activity outside of our platform. We do not build profiles on children for any purpose other than delivering the Ariantra service.
If we become aware that we have collected personal data from a child without verifiable parental consent, we will delete it promptly. To report such a concern, contact our Grievance Officer.
Third Parties Who Receive Your Data
We use a number of trusted third-party services to deliver our product. Each receives limited data only as necessary for its function:
| Service | Provider | What They Receive | Purpose |
|---|---|---|---|
| Gemini API | Session prompts typed by the child | Generating game code during sessions | |
| Mixpanel | Mixpanel Inc. | Anonymised usage events across ariantra.com sites and published game pages: pages visited, clicks, game plays and play duration, city-level location. No typed text, no names/emails, raw IPs not stored; session recordings (site pages only, never game pages) have all text masked | Understanding how visitors use our sites and games |
| Razorpay | Razorpay Software Pvt Ltd | Payment details, name, email | Processing session payments |
| Meta Platforms | Phone number, messages exchanged | Session booking and communication | |
| Netlify | Netlify Inc. | Game HTML files | Hosting published games |
| Amazon Web Services | Amazon | Game HTML files | Hosting published games ({slug}.ariantra.com) |
We do not sell personal data to any third party. We do not share personal data with third parties for their own marketing purposes.
How Long We Keep Data
| Data Type | Retention Period | Reason |
|---|---|---|
| Parent contact details | Duration of enrolment + 1 year | Service delivery and support |
| Child's name and age | Duration of enrolment + 1 year | Service delivery |
| Session records and mentor notes | Duration of enrolment + 2 years | Progress history and dispute resolution |
| Payment records | 7 years | Legal requirement under Indian tax law |
| Games built during sessions | Indefinitely | Owned by Ariantra per T&C — retained as platform content |
| Website analytics | Mixpanel events up to 5 years | Usage trend analysis |
After the applicable retention period, personal data is deleted or anonymised. Games built during sessions are retained indefinitely as Ariantra's intellectual property, but personal identifiers within those games can be removed on request.
Your Rights
Under India's Digital Personal Data Protection Act 2023 and the IT (Reasonable Security Practices) Rules 2011, you have the following rights regarding your personal data:
Right to Access
Request a summary of what personal data we hold about you and your child.
Right to Correct
Request correction of any inaccurate or incomplete personal data.
Right to Erase
Request deletion of your personal data. We will action this within 30 days. Note: games built during sessions are Ariantra's IP and are not subject to erasure requests.
Right to Withdraw Consent
Withdraw consent for processing your child's data at any time. This will end the service relationship.
Right to Grievance Redressal
Lodge a complaint with our Grievance Officer. We will respond within 48 hours and resolve within 30 days.
Right to Nominate
Nominate another individual to exercise your rights on your behalf in the event of death or incapacity.
To exercise any of these rights, contact our Grievance Officer via WhatsApp or email. We will acknowledge your request within 48 hours.
Cross-Border Data Transfers
Some of our third-party service providers process data outside India:
- Google (Gemini API) — servers in the United States and globally
- Meta (WhatsApp) — servers in the United States
- Netlify — servers in the United States
These transfers are made to providers who maintain appropriate data protection standards. Razorpay processes payments within India and is subject to RBI guidelines.
As India's DPDP Act framework for cross-border transfers is notified, we will update this policy accordingly.
Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include:
- HTTPS encryption across all Ariantra web properties
- Access to personal data limited to Ariantra mentors and administrators on a need-to-know basis
- Payment data handled entirely by Razorpay — Ariantra does not store card or bank details
- Session data stored on secured servers with access controls
No system is completely secure. If you believe your data has been compromised, contact our Grievance Officer immediately.
Cookies & Analytics
Our website uses the following cookies and tracking tools:
- Mixpanel — measures anonymised usage across all ariantra.com pages and published game pages (pages visited, clicks, game plays and how long games are played). Typed text is never captured, no names or emails are sent, and raw IP addresses are not stored. On site pages (never on game pages) it also records sessions with ALL text masked and media/embedded games blocked.
We do not use advertising cookies or track users across third-party websites.
Our website does not currently display a cookie consent banner. We will add one as Indian cookie consent regulations are clarified under the DPDP Act framework.
Changes to This Policy
We may update this Privacy Policy from time to time — particularly as India's DPDP Act rules are notified and come into effect.
- The updated date at the top of this page will change when we make updates
- For material changes affecting how we process children's data, we will notify enrolled parents via WhatsApp at least 14 days in advance
- Continued use of the service after the effective date constitutes acceptance of the updated policy
Grievance Officer & Contact
As required under India's IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, Ariantra has appointed a Grievance Officer to address privacy-related concerns.
Grievance Officer
Name: Amit Kumar
Designation: Co-Founder, Ariantra AI Foundry Private Limited
Email: contact@ariantra.com
WhatsApp: +91 72044 04452
We will acknowledge your grievance within 48 hours and resolve it within 30 days.
You also have the right to escalate unresolved complaints to India's Data Protection Board once it is constituted under the DPDP Act 2023.