This Parental Consent Notice explains how Civilsphere Educational Services Private Limited ("Prepdha", "we", "us", "our") asks for, confirms, records, and honours the consent of a parent or lawful guardian before a child uses Prepdha — when we rely on parental consent (for example, a direct parent sign-up or a free trial).
It is written to meet the verifiable parental consent requirement under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025. It should be read together with our Children's Privacy Notice and Privacy Policy, which explain in full how we handle a child's data.
Under Indian law, a child is anyone who has not completed 18 years of age. Because Prepdha is built for students in Classes 6–10, we ask for a parent or guardian's consent before we process a child's personal data.
At a glance
- We ask for your consent, as a parent or guardian, before your child's account is activated.
- We take real steps to confirm that you are an adult and that you are the child's parent or guardian — a tick-box saying "I am over 18" is not enough on its own.
- You consent to specific, clearly described uses of your child's data for learning — nothing more.
- We will never sell your child's data or advertise to your child.
- You can withdraw your consent at any time, as easily as you gave it, and we keep a secure record of what you agreed to.
1. Why we ask for your consent
Because your child is under 18, the law requires us to obtain verifiable consent from you, their parent or lawful guardian, before we process your child's personal data. "Verifiable" means two things must be true:
- you are an adult (over 18); and
- you are the parent or lawful guardian of the child being enrolled.
This protects children from being signed up without a responsible adult's knowledge and agreement.
2. Who can give consent
Consent can be given by the child's parent or lawful guardian, who must be over 18. Where the user is a person with a disability who has a lawful guardian, that guardian gives consent, and we verify the guardianship through the legally recognised means.
3. How we confirm it is really you (verification)
To obtain verifiable consent, we use appropriate, legally recognised methods to confirm that you are an identifiable adult and the child's parent or guardian. Depending on the situation, this may include:
- Details we already hold. If you are already a registered adult user of Prepdha, we may use the identity and age details we already hold for you to confirm who you are.
- Identity or age details you provide, or a government-authorised token. You may provide identity or age details, or authenticate through a government-authorised virtual token — for example, a token mapped to your identity issued through a Digital Locker service (such as DigiLocker) — so that we can confirm you are an adult.
Getting started. To begin, your child may give us your details so that we can reach you and ask for your consent — your child cannot complete sign-up on their own. We then verify your identity and obtain your consent before the account becomes active. We also use age-gating so we can tell when a user is a child and route them to this parental-consent process.
A simple "I am over 18" checkbox, or a child typing a parent's email, is not sufficient on its own — we take genuine steps to verify.
4. What you are consenting to
With your consent, Prepdha will collect and use your child's:
- account details — name, class/section, and the link to your parent account (and the school, where relevant);
- learning and performance data — topics studied, questions attempted, accuracy, diagnostic results, mastery and confidence scores, spaced-repetition and flashcard activity, notes, and assignments; and
- gamification data — XP, streaks, levels, badges, and leaderboard standing.
We use this to:
- provide and personalise your child's learning (including our diagnostics, spaced-repetition revision, AI flashcards, and AI doubt solver, which operate under the oversight of teachers and schools);
- show progress to you and to your child's teachers; and
- keep the service secure.
This is described in full in our Children's Privacy Notice and Privacy Policy.
5. What we will not do
We will not:
- sell your child's personal data;
- serve your child targeted or behavioural advertising;
- track, monitor, or profile your child beyond what is needed to deliver and improve the learning service; or
- process your child's data in a way likely to harm their well-being.
6. The confirmations you will see
During sign-up, we ask you to give consent through separate, clearly-worded confirmations — not one bundled "I agree". They are not pre-ticked; each is an affirmative choice you make:
1. I confirm I am over 18 and am the parent or lawful guardian of this child. 2. I have read the Children's Privacy Notice and Privacy Policy. 3. I consent to Prepdha collecting and using my child's personal data for the educational purposes described above. 4. _(Optional)_ I consent to receiving occasional updates from Prepdha about features and plans.
Confirmation (4) is entirely optional and separate. You can give consent for the core service through (1)–(3) without accepting (4), and your child's access does not depend on it.
7. Your control, and how to withdraw consent
You stay in control of your child's data. At any time, you can:
- review your child's data;
- correct or update it;
- delete it; and
- withdraw your consent.
You can do this using the controls in your parent account, or by contacting us (Section 11). Withdrawing consent is designed to be as easy as giving it.
When you withdraw consent:
- we stop further processing of your child's data for the purposes you consented to;
- it does not undo processing already carried out lawfully before you withdrew; and
- because some processing is essential to the service, withdrawing consent may mean your child can no longer use some or all of Prepdha. We will explain the effect when you ask, so you can make an informed choice.
8. We keep a secure record of your consent
We keep a secure, traceable record of your consent — what you consented to, when, and how it was verified — so that we can honour your choices and demonstrate that consent was properly obtained. The responsibility for being able to show that valid consent was obtained rests with us.
9. Language and clarity
Indian law expects consent information to be presented in clear, plain language that you can understand. We provide this Notice and the consent request in clear language, and we are working to make them available in additional Indian languages so that parents across the country can give informed consent in a language they are comfortable with.
10. If your child joined through a school
Where your child uses Prepdha through their school, the school is typically responsible for the lawful basis for processing your child's data, including any consents, and it instructs us as its service provider. In that case, your school's own notices and arrangements apply, and you can direct questions to the school or to us using the details below.
11. Contact us / withdraw consent
To ask a question, exercise your rights, or withdraw consent:
- Email: communications@prepdha.com
- Grievance Officer / data-protection contact: Kumar S — communications@prepdha.com
- Civilsphere Educational Services Private Limited 202, R Hub, Madhapur, Hyderabad 500081 Phone: +91 79954 67223
We will act on your request and explain any effect it has on your child's use of the Platform.
12. Changes to this Notice
We may update this Notice from time to time to reflect changes in our practices or the law, and will post the updated version here.
This Notice reflects our commitments under the DPDP Act, 2023 and the DPDP Rules, 2025. If you have any questions, please contact us using the details above.
Appendix — Implementation requirements (internal; remove before publishing if you prefer)
This appendix is guidance for Prepdha's product, engineering, and legal teams. It is not part of the parent-facing notice and can be removed from the public page.
The text above is the copy. To be legally valid, the consent flow that delivers it must:
1. Age-gate first. Detect whether the user is a child (under 18) and, if so, route to the parental-consent flow instead of treating them as an adult. 2. Verify the parent as an identifiable adult, using a method recognised under Rule 10 of the DPDP Rules — either (a) reliable identity/age details already held for the parent (if they are a registered adult user), or (b) voluntarily provided identity/age details or a government-authorised virtual token mapped to those details (e.g. via DigiLocker). A self-declared "I am over 18" alone is not sufficient. 3. Allow the child to self-declare the parent's details to initiate the flow (the Rules permit this to start the process), but complete verification of the parent before activating the account. 4. Be granular and unbundled — confirmations (1)–(3) separate from the optional marketing consent (4); none pre-ticked; core service must not be conditioned on (4). 5. Be free, specific, informed, and unambiguous, given by clear affirmative action, consistent with Section 6 of the DPDP Act and Rule 3. 6. Support symmetric, easy withdrawal from the parent account, with the same ease as giving consent, and propagate withdrawal to stop downstream processing. 7. Log immutably and auditably — record which adult consented, the child concerned, what was consented to, the timestamp, and the verification method used, retained for audit by the Data Protection Board. 8. Be available in clear language and, ideally, in the parent's preferred Indian language, since an English-only flow may not meet the "informed" standard for many parents. 9. Handle lawful-guardian consent for persons with disabilities, verifying guardianship via legally recognised credentials (Rule 11).
The verifiable-consent mechanism is the highest-risk part of DPDP compliance for an edtech platform. Have both this copy and the technical flow reviewed by a qualified Indian lawyer before going live.