Privacy policy
Last updated 3 November 2026. Draft, awaiting legal review.
Who we are
Puberty Lab is a NanoSkool Education app at puberty.nanoskool.com. You sign in with your NanoSkool account, but Puberty Lab keeps its own database, separate from every other NanoSkool app. Nothing about your health is shared with NanoSkool's learning, money or career apps, and medical information is never used to judge anyone's academic ability, career suitability or employability.
What we keep
For everyone: your name, how you sign in (email or phone) and what you do in Puberty Lab.
For young people: birth month and year (never the full date), the sex used for growth charts if given, heights and weights, puberty and skill milestones, the health profile your family fills in, lessons, habits, reflections and conversations with Pia.
For parents: the link to your children and every consent you give or withdraw. For professionals: your qualifications, registration and the notes you write.
Children and consent
Under 18, we use a young person's information only with verifiable consent from a parent or lawful guardian (DPDP Act 2023, section 9) and the young person's own agreement. Consent is recorded with its version (puberty-dpdp-2026-11-v1), time and method, and can be withdrawn in Settings at any time. Under 13, a parent must set up the account. At 18 the account becomes the young person's own and the parent's access ends.
We do not track, profile or show advertising to children, and we never use health conditions for advertising to anyone.
What parents can and can't see
Parents see growth, the health profile, suggested check-ups and, unless a 14 to 17-year-old chooses otherwise, lessons, habits and milestones. Parents never see Pia conversations or private reflections.
Safety
If something written in Pia, a reflection, a health profile or a help request suggests a young person may be in danger, our trained safeguarding team sees the relevant excerpt and acts. That can include contacting the young person, a guardian, a professional, Childline or the police. Where the law requires it, such as suspected sexual abuse of a child under the POCSO Act, we report. We tell young people about this exception in words for their age.
Pia and our AI provider
Pia's replies are written by Claude, an AI model from Anthropic. A young person's messages and first name are sent to Anthropic, outside India, to produce replies; contact details and health records are not. Pia is an AI, not a doctor, and never diagnoses or prescribes.
How we protect it
Data travels encrypted (HTTPS). Notes, journals, Pia chats, health-profile answers and safeguarding records are encrypted again inside the database with a key kept separately. Every look at someone else's record is logged, and denied attempts are logged too. Professionals see only what a family shares with them, and only after we verify their qualifications.
Your rights
Download everything in Privacy (young people) or Settings (parents). Correct things by editing them. Delete an account, which removes its health record, reflections and chats; a safety case that is still open is closed by the safeguarding team first. Research use needs a separate consent and is off by default. With it on, only approved studies listed at /research receive de-identified data, never anything you wrote or your period log, diary, test results, notes, chats or safety information.
Keeping and deleting
We keep a record while the account exists. When an account is deleted, its data is removed; the audit log keeps a note that a deletion happened, without health details. Backups roll over within seven days.
Contact
Questions or complaints: write to the NanoSkool team through your school or the app. Breaches are handled under our breach-response procedure and reported as the DPDP Rules require.
Contact
Puberty Lab, NanoSkool Education. For payments and refunds, use the contact details on your Razorpay payment receipt. In an emergency, call 112, or see Get help.