Privacy policy

RehearsalJr is used by school students in India, so most of the people whose information we hold are children. This page says exactly what we keep, why we keep it, and how to make us delete it. Consent version v1.

Who we are

Gradeless AI Pvt. Ltd. operates RehearsalJr and decides what happens to the information described here. Registered office: 1/3, Block 1, Plot No. 3, WHS, near Mayapuri Chowk, Timber Block, Kirti Nagar, New Delhi, Delhi 110015. Questions, complaints and requests: gourab@gradeless.ai.

Under India's DPDP Act you may also write to our Grievance Officer, Gourab Chatterjee, at the same address — gourab@gradeless.ai, +91 76830 19950. We acknowledge a request within 7 days and respond within 30.

Parental consent comes first

Under section 9 of India's DPDP Act, and under the GDPR for anyone it covers, a parent or guardian must approve before a child uses any AI feature. We ask for a parent's email address during sign-up and email them a link. Until they approve, the AI features stay locked, and the lock is enforced on our servers rather than in the app. A parent can withdraw approval at any time from that same email, which locks the features again and also stops the weekly summary described below.

We do not ask a child to prove their age. The obligations above apply to everyone under 18 and set no lower limit, so we ask for a parent's approval for every account instead of turning younger children away.

What we collect, and why each thing

• Google account identity (an account identifier and the email address on it) — signing in with Google is the only way into the app, so this is how we know whose work is whose.
• First name, date of birth and class — the name is what the app calls them. The class decides which version of a news story they read; a story about a rocket is explained differently for class 5 than for class 11. The date of birth is kept because the consent rules turn on being a child.
• A parent's or guardian's email address — to ask for approval, and to send the weekly summary if it is switched on.
• Journal recordings and their transcripts — a child records an answer to one daily prompt. The recording is stored privately and turned into text so they can read it back.
• A written reflection on a journal entry — only ever when a child taps the button asking for one. Never automatically.
• Quiz answers and scores — so a quiz can be marked and cannot be retaken for a better mark.
• Which articles and chapters were opened, and when — to show their own week back to them, and to fill in the daily plan.
• Streaks and daily activity — the rings on the home screen.
• Crash and error reports — when the app or our servers break, we receive a technical report so we can fix it.
• Reports a child sends us about something the app showed them — which story, chapter or feedback they flagged and the reason they chose. If they flagged the “simpler” version of a story, the report also carries that text, because it is not kept anywhere else. Our team reads these.

What we never do

• Nothing reads a journal entry to judge it. The only automatic processing a recording receives is being turned into text. No mood detection, no scoring, no summary, no topic guessing — unless the child themselves asks for a reflection on a particular entry.
• No advertising, anywhere in the app, and no advertising identifiers.
• We never sell or rent anyone's information.
• Nothing a child writes or records is shown to other children.
• We do not track anyone across other apps or websites.

The weekly email to a parent

Off unless a child switches it on. When it is on, a parent receives a weekly email with how many days their child showed up, how many stories, quizzes, chapters and journal entries they did, how well the quizzes went, and the titles of the stories and chapters they opened.

It never contains anything from inside a journal entry. It may say “wrote 3 journal entries” and that is the whole of it — not the words, not a mood, not a topic. Every email carries an unsubscribe link that works without signing in.

Who else handles this information

• Supabase — our database, sign-in, and the private store the recordings sit in.
• Render — runs our servers.
• OpenAI — turns a recording into text. That is all it is used for.
• OpenRouter (and Google's Gemini models through it) — writes the news articles and quizzes, draws the illustrations, and writes a reflection when a child asks for one.
• Resend — sends the consent email and the weekly summary.
• Sentry — receives crash reports. These carry no name, no email and no account identifier, and we strip anything a child wrote before the report leaves the device or the server.

How long we keep it

• Journal recordings, transcripts, quizzes and reading history: until the account is deleted.
• News articles and their pictures: about a week, then removed automatically.
• When an account is deleted we keep one record that the deletion happened — an account identifier and the date. Nothing else. It exists so we can prove to a parent or a school that we did what we were asked.
• One thing we cannot delete, stated plainly: our sign-in provider keeps its own security log of sign-in events, which mentions the email address on the Google account. It is kept on their schedule and we have no way to reach into it. Everything else described on this page is removed.

Deleting everything

In the app: Settings → Delete my account. It happens immediately — there is no waiting period and no recovery. It removes the recordings themselves, the transcripts, the reflections, the quizzes, the reading history, the streak, the name and date of birth, the parent's email address, and the account itself.

Deletion runs from the app on the child's device, because the recordings sit in a private store that opens only with that account's own sign-in — our app and servers hold no master key of their own to it. A parent who wants the account deleted and cannot get to the device can email gourab@gradeless.ai and we will respond and help get the deletion done from the app. A parent can also withdraw consent from their own approval email at any time, which locks every AI feature and stops the weekly summary immediately.

Other rights

You may ask what we hold, ask us to correct it, ask us to delete it, withdraw consent, or complain. Write to gourab@gradeless.ai. Under the DPDP Act you may escalate to the Data Protection Board of India if we do not resolve it.

Security

Everything travels over HTTPS. Recordings sit in a private store whose access rules are keyed to the account that made them. On the phone, the app's data is kept in the device's encrypted storage. Our servers hold no master key to the database or the recordings: every request runs with the permissions of the child making it.

Changes

If we change what we do with this information in a way that matters, we raise the consent version and ask parents to approve again. This page always shows the version currently in force.