This notice describes the intended handling of information in the BEPIC Genius Challenge project. BEPIC should confirm the final data controller details and have this notice reviewed before launch.
Information collected
The platform may collect a child's display name, class, optional school name, parent/guardian mobile number, account PIN hash, consent timestamp, quiz responses, score, certificate reference and referral attribution. The PIN is stored as a password hash, not plain text. Do not upload a child's photograph for this quiz; the certificate is designed without a photo by default.
Why information is used
Information is used to create and secure the account, select age-appropriate questions, record quiz attempts, generate certificates, maintain the certificate vault, measure referrals and respond to parent/guardian campus-visit requests.
Parent/guardian consent
A parent or legal guardian must register the child and consent to the necessary processing. Promotional communication and public publication should be separate, optional choices. A child does not need to follow a social media account, post a result or invite friends to participate or receive a certificate.
Sharing and publication
BEPIC does not automatically publish a child's identifiable result to public social media. Parents/guardians may choose to download or share a certificate. Before any official public showcase, BEPIC should obtain and record specific parental permission and use only the information approved for publication.
Retention and security
Use HTTPS, a dedicated database, access-controlled staff tools, regular backups and restricted administrative access. Retain information only as long as necessary for the campaign and its legitimate operational needs, then securely delete or anonymise it according to an approved retention schedule.
Third-party services
Links to Instagram and Google Maps open third-party services governed by their own privacy terms. The campaign does not condition rewards on Google reviews, ratings or social follows.
Parent/guardian requests
Parents/guardians should be able to contact BEPIC to ask questions, correct account details or request deletion, subject to applicable legal and operational requirements. Add the verified BEPIC contact details here before launch.
This is a development draft, not legal advice. Have the final notice reviewed for applicable Indian child-data privacy requirements before collecting real participants' information.