Privacy Policy

Who we are

MDAS is an initiative of Mayrah Centre for Child Development, Rohini, New Delhi, India (“Mayrah”, “we”, “us”, “our”). We are the Data Fiduciary responsible for the personal data described in this policy.

For any question about this policy or your data, or to exercise any of the rights below, contact us:

What this policy covers

This policy applies to the MDAS web tool on this website.

Who may use MDAS

MDAS is intended to be completed by a parent or legal guardian, aged 18 or over, about a child in their care aged between 8 months and 7 years. It is not intended for use by children, and children should not complete it themselves.

What we collect

Information you give us:

Information the system generates:

• A score for each developmental domain assessed, and an overall indicative status
• The date and time of the assessment
• A private, randomly generated reference for your report. Your report can only be opened by someone who has this reference — it cannot be found by guessing.

If you use the enquiry form instead of, or as well as, the assessment, we collect your name, your mobile number, your child’s age, and any developmental areas you tick. We use these only to reply to you.

Technical information: our hosting provider records standard web server logs, which may include your IP address, browser type and the pages requested. These are used to keep the service running and secure.

What we deliberately do not collect

We have designed MDAS to hold as little information about your child as possible. We do not collect or ask for:

• Your child’s name, date of birth, photograph or any other identifying detail — only their age in months
• Your child’s school, medical records, diagnosis history or therapy history
• Your email address, home address or precise location
• Any payment or financial information — MDAS is free
• Any government identifier (Aadhaar, PAN or similar)

Children’s data

Your child is a “child” under the Digital Personal Data Protection Act, 2023. We take that seriously:

• We process information relating to your child only on the basis of your consent as their parent or guardian, given through the consent screen before the assessment begins.
• Your child is never identified to us. The only information we hold about them is their age in months and your answers about what they can do.
• We do not carry out behavioural tracking or monitoring of children.
• We do not direct advertising at children, and we do not use this data for advertising at all.
• We do not knowingly allow a child to complete the assessment about themselves.

If you believe a child has submitted information without a parent’s or guardian’s consent, contact us and we will delete it.

Why we use your information, and on what basis

We process your information on the basis of the consent you give on the consent screen. We use it only for these purposes:

1. To generate your report — your answers and your child’s age are used to calculate the indicative result you see on screen.
2. To put your name on your report, so it is recognisable as yours.
3. To contact you, only if you asked us to. If you ticked the optional consent box and your results suggest a professional conversation may be helpful, we may call or message you on the number you gave. If you did not tick that box, we will not contact you for this purpose.
4. To improve MDAS — we look at anonymous, aggregated patterns, such as how many assessments were completed in an age band. This never involves identifying you or your child.
5. To answer you if you send an enquiry through the contact form.
6. To keep the service secure and working, and to meet any legal obligation that applies to us.

What we will never do

• We will never sell your information, or your child’s, to anyone.
• We will never share it with advertisers, data brokers or marketing companies.
• We do not use third-party analytics, advertising pixels or social media trackers on MDAS.
• We do not use your data to train or develop any product for a third party.

Cookies

MDAS does not place advertising or tracking cookies on your device. A single session cookie is used only for Mayrah staff signing in to the administrative area; it is not set for parents completing an assessment.

Who can see your information

• Authorised Mayrah staff, where they need it to contact you (if you consented) or to support the service.
• Our hosting and infrastructure provider, which stores the data on our behalf under contract and may not use it for its own purposes.
• Where the law requires it — for example a valid order from a court or a lawful authority.

That is the complete list. Your report is not shared with your child’s school, with any doctor, or with any other family.

How long we keep it

We keep your name, mobile number, your child’s age and your assessment responses for 30 days from the date of the assessment. After 30 days these records are deleted from our live systems automatically.

Enquiries sent through the contact form are kept on the same 30-day clock and deleted automatically after that.

Anonymous, aggregated statistics that cannot identify you or your child may be retained beyond this period for research and service improvement.

Keeping it safe

We take reasonable technical and organisational measures to protect your information. These include encrypted connections (HTTPS), access controls on the administrative area, restricting staff access to those who need it, and addressing each report by a private random reference so that one family’s report cannot be reached from another’s.

No system can be guaranteed completely secure. If a personal data breach occurs that affects you, we will notify you and the Data Protection Board of India as required by law.

Where your data is held

Your information is stored on servers operated by our hosting provider on our behalf. Where information is processed outside India, we do so in line with applicable Indian law.

Your rights

Under the Digital Personal Data Protection Act, 2023, you may:

• Ask what we hold about you and your child, and how it has been used
• Ask us to correct anything inaccurate or incomplete
• Ask us to delete it, at any time
• Withdraw your consent at any time — this does not affect anything done before you withdrew
• Nominate someone to exercise these rights on your behalf if you are unable to
• Complain to us, and then to the Data Protection Board of India if you are not satisfied

To exercise any of these, write to us at the address below. We will respond within 30 days.

Grievance Officer

If you are unhappy with how we have handled your information, you can contact our Grievance Officer:

If your complaint is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top will always show the current version. If we make a significant change to how we use your information, we will make that clear on the MDAS site.