Last updated: 6 November 2026
Hippofini ("Hippofini", "we", "us") makes money skills fun for kids and teens. This policy explains what personal data we collect through www.hippofini.com, why we collect it, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025. For the purposes of the DPDP Act, Hippofini is the Data Fiduciary for the data described here.
1. What we collect and why
We only collect what you give us in the Join the waitlist form:
| Data | Why we need it |
|---|---|
| Full name | To address you when we contact you. |
| Email address and mobile number | To confirm your place on the waitlist and tell you when Hippofini launches or opens early access. |
| School, city and state | To plan where to launch first and which schools to partner with. We use this in aggregate (for example, "120 sign-ups from Lucknow"). |
| Your consent and the date you gave it | To keep a record that you agreed to this policy, as the law requires. |
We do not use cookies, analytics, advertising pixels or any tracking on this website. We do not sell, rent or trade your personal data, and we do not use it for advertising.
Like every website, our hosting provider automatically processes technical data (such as your IP address and browser type) to deliver the page and protect it from attacks. This is described in section 5.
2. Consent, and how to withdraw it
We process your data only with your consent, which you give by ticking the consent box on the waitlist form. Consent is voluntary, and you can join the waitlist only if you agree.
You can withdraw your consent at any time, as easily as you gave it. Email hippofini@gmail.com with the subject "Withdraw consent". We will stop using your data and delete it within a reasonable time, unless the law requires us to keep it. Withdrawing consent doesn't affect anything we did lawfully before you withdrew it.
3. Children's data
Hippofini is built for children, so we take their privacy especially seriously. Under the DPDP Act, anyone under 18 is a child.
- The waitlist form must be filled in by an adult. If a child's details (such as their school) are shared, the adult confirms that they are the child's parent or lawful guardian and gives consent on the child's behalf.
- If we learn that a child has given us personal data without a parent's or guardian's consent, we will delete it.
- We do not track children, monitor their behaviour or show them targeted advertising, and we will never process data in a way that could harm a child's well-being.
- Before the Hippofini app collects any data directly from a child, we will obtain verifiable consent from the parent or guardian as required by the DPDP Rules, and we will publish an updated policy for the app.
4. How long we keep your data
We keep waitlist data until 12 months after Hippofini launches, or until you withdraw consent, whichever comes first. After that we delete it, unless a law requires us to keep it longer.
5. Who processes your data for us
We don't share your data with anyone for their own purposes. We use a few trusted service providers (Data Processors) who handle data only on our instructions and under contract:
- Cloudflare: hosts this website and protects it from attacks. It processes technical data such as IP addresses and keeps security logs.
- Web3Forms: delivers your waitlist form to our email inbox.
- Google: Gmail stores the waitlist emails we receive. Google Fonts serves this site's fonts, which means your browser sends its IP address to Google when the page loads.
Some of these providers may process data outside India. Any such transfer follows the DPDP Act and any restrictions set by the Government of India. We may also disclose data if the law requires it, for example to a court or a government authority.
6. How we protect your data
We use reasonable security safeguards, including encrypted (HTTPS) connections, restricting access to waitlist data to the people who need it, and providers with strong security practices. If a personal data breach happens, we will inform the Data Protection Board of India and the affected people without delay, as the DPDP Act and Rules require.
7. Your rights
Under the DPDP Act you have the right to:
- Access: get a summary of the personal data we hold about you and how we process it.
- Correct and update: fix inaccurate or incomplete data.
- Erase: ask us to delete your data when it's no longer needed or you withdraw consent.
- Grievance redressal: complain to us and get a response (see section 8).
- Nominate: name someone to exercise these rights for you if you die or become unable to act.
To use any of these rights, email hippofini@gmail.com. We may ask you to confirm your identity before acting on a request. Under the DPDP Act you also have a duty to give us accurate information and not to file false or frivolous complaints.
8. Grievance Officer and complaints
If you have a question or complaint about how we handle your data, contact our Grievance Officer:
Grievance Officer, Hippofini
Email: hippofini@gmail.com (subject: "Privacy grievance")
Phone: +91 79850 15403
Address: 2nd Floor, Sinha Complex, M-14B, Gole Market, Mahanagar, Lucknow, Uttar Pradesh, India
We will acknowledge your complaint promptly and resolve it within the time the DPDP Rules allow (no more than 90 days). If you're not satisfied with our response, you can complain to the Data Protection Board of India.
9. Language
You can ask for this policy in English or in any language listed in the Eighth Schedule to the Constitution of India by emailing hippofini@gmail.com.
10. Changes to this policy
We may update this policy as Hippofini grows, for example when the app launches. We will change the "Last updated" date above, and if a change affects how we use the data you've already given us, we will contact you and ask for fresh consent where required.