Privacy Policy

Who we are

Own Sandbox (“we”, “us”) is a live online STEM academy for children aged 8–18, operated from India and serving families worldwide. Because our students are children, we hold ourselves to a higher standard of data care than a typical website. Questions about this policy can be sent to ajay@own-sandbox.com.

What we collect

• From parents/guardians: name, email address, phone/WhatsApp number, and country — provided when you book a demo class, contact us, or create an account.
• About students (with parental consent): first name, age, grade level, course enrolment, class attendance, project submissions, and learning progress shown on the student dashboard.
• Automatically: approximate country (for currency display), and anonymous usage analytics via Vercel Analytics and Microsoft Clarity (page views, session interactions). We do not run advertising trackers.

Children’s privacy

• Student accounts are created and managed with parental involvement.
• We collect only the minimum information needed to teach: a first name, age, and coursework. We never ask a child for contact details, payment information, or precise location.
• We do not show advertising to students or sell any personal data.
• Class communication happens through the parent’s WhatsApp number or email — never directly with a child on an outside channel.
• A parent may review, correct, or delete their child’s data at any time by emailing ajay@own-sandbox.com. We respond within 7 days.

How we use information

• To schedule and deliver live classes and demo sessions.
• To track learning progress and show it to the student and their parents.
• To send class reminders and important account emails.
• To process payments (handled by our payment providers — we do not store card details).
• To improve the website using aggregate, anonymised analytics.

We do not sell, rent, or trade personal information. Ever.

Where data lives

Account and dashboard data is stored with Supabase (managed PostgreSQL) with row-level security, so each family can only access its own records. The website is hosted on Vercel. Transactional email is sent via Resend. Each of these providers processes data under their own security and privacy commitments.

Testimonials and student work

We only publish a student’s name, photograph, project, or a family testimonial with explicit written consent from a parent or guardian, and we remove any of it promptly on request.

Cookies

We use strictly necessary cookies for login sessions, a preference for your display currency, and analytics cookies from the providers listed above. We do not use third-party advertising cookies.

Your rights

Depending on where you live (including under India’s DPDP Act and the EU’s GDPR), you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. Email ajay@own-sandbox.com and we will honour these requests for any user, anywhere.

Changes

If we make material changes to this policy, we will update the date above and notify account holders by email before the changes take effect.