A. Objective

This policy (“Privacy Policy”) outlines LittleCare’s practices for its website and subscriber-based services (“Services”), including the type of information collected, the method of such collection, how such information is used, and under what circumstances it may be shared with third parties. As a children’s mental health and wellness platform, LittleCare gives special importance to data protection, parental consent, and the responsible handling of information related to minors. This document constitutes LittleCare’s Privacy Policy and is accessible at https://www.little.care.

B. Definitions

Sensitive Personal Data or Information (SPDI) includes Personal Information consisting of:

• Password;
• Financial information such as bank account, credit card, debit card, or other payment instrument details;
• Physical, physiological, and mental health condition;
• Sexual orientation;
• Medical records and history;
• Biometric information;
• Any detail relating to the above provided by an individual to LittleCare for providing Services;
• Any of the above information received by LittleCare under a lawful contract or otherwise.

Exclusion: Information that is freely available in the public domain, or furnished under the Right to Information Act, 2005, or under any other applicable law, shall not be regarded as SPDI.

Personal Information means any information relating to a natural person that, directly or indirectly, in combination with other information available or likely to be available with LittleCare, is capable of identifying such person.

Any person, including LittleCare and its representatives, who collects, receives, stores, processes, or handles SPDI or Personal Information shall be governed by this Privacy Policy.

C. Privacy Principles

LittleCare’s Privacy Policy is guided by principles of transparency, lawful purpose, necessity, accountability, and security in handling Personal Information and SPDI, particularly in relation to data involving minors.

D. Consent

• By using our website or Services, you consent to LittleCare’s collection and processing of your Personal Information.
• If SPDI is required, LittleCare shall seek your express consent before collection.
• Clicking on the “I Accept” tick box on the website constitutes valid consent.
• By accepting this Privacy Policy, you represent that you are at least 18 years of age.
• If you are under 18 years, a parent or legal guardian must provide consent and act on your behalf.
• If you choose not to provide required information, LittleCare may be unable to deliver Services or personalize your experience.

E. Information We Collect

LittleCare may collect Personal Information and SPDI where reasonable and necessary, including:

• Information you provide: Name, age, gender, contact details, email address, address, financial details, health or emotional wellness records, or other information voluntarily shared with LittleCare.
• Information from use of Services: Device details, IP address, browser type, operating system, location data, activity logs, passwords used within Services.
• Other identifiable information: Any other information capable of identifying you or your child.

Information may be collected when you register or create an account; subscribe to Services or newsletters; participate in wellness sessions, assessments, or surveys; provide health-related documents or feedback; communicate with LittleCare via email, phone, or chat; or access interactive or child-oriented features on the platform.

LittleCare also collects aggregated, non-personal usage data (cookies, analytics, etc.) to improve service quality and user experience.

F. Use of Information

LittleCare collects and uses Personal Information and SPDI for the following purposes:

• To deliver, personalize, and improve our Services;
• To support families and children with mental health and wellness programs;
• For research, analytics, and awareness-building (only in anonymized form);
• For customer support, training, and quality assurance;
• For legal, regulatory, and compliance requirements;
• For business continuity and security purposes.

LittleCare shall use data only for lawful and legitimate purposes, inform users of data use and obtain consent where required, retain records only as long as legally necessary, and securely dispose of data after retention.

G. Sharing of Information

LittleCare shall not publish, trade, or disclose your SPDI or Personal Information without consent, except:

• With affiliates, trusted partners, or service providers who assist in delivering our Services and are bound by confidentiality;
• With healthcare professionals, counselors, or wellness experts associated with LittleCare (with consent and in compliance with this Policy);
• With government or law enforcement agencies when required by applicable law.

LittleCare ensures that all third parties receiving data maintain the same level of protection as required under Indian law.

H. Withdrawal of Consent

You may withdraw consent for collection, storage, or use of your SPDI or Personal Information at any time by writing to the Grievance Officer (details below). Withdrawal may affect LittleCare’s ability to provide certain Services, especially those requiring personalized support.

I. Accuracy and Updates

You are responsible for providing accurate and updated information. Requests for updates or corrections can be sent to hey@little.care. Verification may be required for security purposes. LittleCare shall update its records upon request but is not responsible for the authenticity of user-provided data.

J. Retention of Information

LittleCare by Koott Care Pvt. Ltd. shall retain information only as long as necessary or legally required and securely dispose of information after the retention period expires.

K. User Rights

Users have the right to:

• Access information held about them;
• Request correction of inaccurate or incomplete data;
• Withdraw consent or opt out of communications;
• Restrict processing of their information in certain cases;
• Have grievances addressed promptly.

L. Security Practices

LittleCare maintains appropriate technical and organizational measures to safeguard data, including encryption and secure data transmission, role-based access controls, staff confidentiality training and non-disclosure agreements, regular security reviews and audits, and restricted access to authorized personnel only.

M. Cross-Border Transfers

If Personal Information is transferred outside India, LittleCare ensures that equivalent data protection measures are maintained in the receiving jurisdiction. While we use secure channels, transmission of data over the Internet carries inherent risks, and LittleCare cannot guarantee absolute security.

N. Force Majeure

LittleCare shall not be liable for loss, damage, or misuse of information arising from events beyond its reasonable control (“Force Majeure”), including natural disasters, cyberattacks, government actions, strikes, riots, or system failures.

O. Grievance Officer

As required by the Information Technology Act, 2000, and applicable rules, the details of LittleCare’s Grievance Officer are:

• Ms. Athullya O
• Grievance Officer, LittleCare by Koott Care Pvt. Ltd.
• Email: hey@little.care

Only communications addressed to this official email will be treated as valid for Privacy Policy purposes.

P. Legal Effect

This document is an electronic record under the Information Technology Act, 2000. It does not require physical or digital signatures.