Privacy Policy

01About this policy

Adix AI (“Tiny Tales”, “we”, “us”) is the Data Fiduciary for the personal data you share with the Tiny Tales app and website. We handle it in line with the Digital Personal Data Protection Act 2023 (DPDP Act).

02Data we collect

We collect only what we need to run the store and serve you:

• Identity and contact: your name, mobile number, and email address.
• Delivery: the addresses you save for shipping.
• Orders: what you bought, order value, invoices, and support history.
• Optional profile: title and date of birth, if you choose to add them, to personalise offers.
• Location, only if you allow it: when you pick a delivery address on the map in the app, we ask your device for its current location so we can centre the map and check whether we deliver to that area. We use it at that moment for that purpose, and we do not track your location in the background or when the app is closed. You can decline, and enter your address manually instead, or turn the permission off later in your device settings.
• Ratings and reviews: the rating, title, and description you submit for a product, the display name shown against it, and the reviews you mark as helpful. Reviews are published publicly in the app and on the website.
• Device and usage: basic app/browser and device information needed to run the app or site securely, plus the aggregate and cookie-based analytics described below.

Payments are handled by our payment gateway. We do not collect or store your full card, UPI, or banking credentials.

03Why we use your data

• To create your account and process, deliver, and support your orders.
• To issue invoices and meet tax, accounting, and other legal duties.
• To publish the ratings and reviews you choose to post, and to moderate them.
• To prevent fraud and keep the app and website secure.
• With your consent, to send offers, personalise what you see, and measure advertising.

We do not sell your personal data. We do not use your profile or purchase data for third-party advertising without your separate, specific consent.

04Consent and your choices

We rely on your consent and the legitimate uses permitted by the DPDP Act. We ask for consent through a clear, affirmative action — never pre-ticked boxes — and tell you what each use is for before you agree.

Before you agree, we show you a standalone notice — separate from this Policy — itemising each specific purpose for which we seek consent (for example, marketing messages, personalised offers, or advertising cookies), so you can give or withhold consent purpose-by-purpose rather than as one blanket agreement.

Where a Consent Manager registered with the Data Protection Board of India is available, you may also give, manage, or withdraw your consent through that Consent Manager, in addition to the controls in the app or on this website.

You can withdraw consent for optional uses such as marketing at any time, from the app, the “Cookie settings” link in the website footer, or by writing to us. Withdrawing consent does not affect processing we already need to complete your orders or meet the law.

05Cookies and analytics on this website

Every visit to www.tinytalesforus.com contributes to an anonymous, aggregate count of how the store is used — which pages load, how far people scroll, and where the funnel drops. This measurement sets no cookies, stores no visitor identifier, and records no IP address; it exists only as totals. It runs for everyone and needs no consent, because it cannot identify you.

We also use Google Analytics 4 and the Google Ads tag to understand campaigns and improve our advertising. These do set cookies:

• EEA, the UK and Switzerland: nothing loads until you explicitly accept, on the same notice you can decline in one click.
• India and elsewhere: these load by default; you can opt out at any time from the notice or the “Cookie settings” link in the footer. We remember your opt-out and do not load them again.
• Global Privacy Control: if your browser sends a GPC signal, we treat it as an opt-out everywhere and never load these cookies.

Items you add to your bag on the website are stored only in your own browser until you place an order.

06Who we share it with

We share data only with Data Processors who help us run the store, under contracts that bind them to protect it and use it only on our instructions:

• Payment gateway, to take payments and process refunds.
• Logistics and delivery partners across India, to ship your orders.
• Cloud, authentication, and analytics providers, to host and run the app and website.

Advertising platforms, only if you tick the separate ad-sharing box at checkout or in your profile: we share a one-way SHA-256 hash of your email address and mobile number (never the plain values, and never your orders, addresses, or other data) with advertising platforms such as OpenAI (ChatGPT Ads), so they can match you to show you fewer repeat ads and more relevant offers. You can untick the box in your profile at any time; we then remove you at our next audience update.

We do not share your personal data with the manufacturers or suppliers of the products you buy — you are our customer, not theirs. If you raise a manufacturing-defect claim, we take it up with the manufacturer on your behalf without disclosing your personal data to them.

We may also disclose data where required by law or a valid legal request. We do not sell personal data to anyone.

07How long we keep it

We keep personal data only as long as needed for the purpose we collected it for, and delete or anonymise it once that purpose ends.

Exception: invoices, tax records, and other transaction records are retained for the period required under GST and Income-tax law — currently up to 8 years — even after you close your account or ask us to erase your data, because we are legally required to keep them.

08Your rights

As a Data Principal under the DPDP Act you can:

• Access a summary of the personal data we hold about you.
• Correct or update inaccurate or incomplete data.
• Request erasure of your data and closure of your account, subject to records we must keep by law. You can also do this yourself, at any time, from Account settings in the app or the “Delete account” page on www.tinytalesforus.com.
• Nominate someone to exercise your rights if you are unable to.
• Raise a grievance with us and have it addressed.
• Complain to the Data Protection Board of India if you are not satisfied with how we have handled your request or your data.

To exercise any of these, write to our Grievance Officer at hello@adix.ai.

09Children’s data

You must be 18 years or older and capable of entering into a legally binding contract under Indian law to create an account or use the app. We do not offer accounts to, and do not knowingly collect personal data from, anyone under 18. If we learn that we have collected personal data from someone under 18, we will delete it.

We do not do behavioural tracking or targeted advertising directed at children.

10How we protect your data

We use reasonable security safeguards, including encryption in transit, access controls, and token-based authentication, to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and review our controls.

11If there is a data breach

If a personal-data breach occurs, we will notify the Data Protection Board of India within 72 hours of becoming aware of it, and notify affected users without undue delay, describing the nature of the breach and the steps we are taking, as required by the DPDP Act.

12Where your data is processed

Some of our cloud and processing providers may store or process data outside India, in line with the transfers permitted under the DPDP Act. We take steps to see that it stays protected wherever it is handled.

13Grievance Officer

For any question, request, or complaint about your personal data, contact:

• Email: hello@adix.ai
• Address: Adix AI, 3, Qamar Makhdumi Road, near Noori Masjid, Bhuli Road, Wasseypur, Dhanbad, Jharkhand 826001

We acknowledge requests within 48 hours and aim to resolve them within the timelines set by law.

14Changes and contact

We may update this policy as our practices or the law change. Material changes will be notified in the app or on this page.

Questions about your privacy? Write to us at hello@adix.ai.