Privacy Policy

• We collect your name, WhatsApp number and date of birth so we can run your classes.
• We collect your assessment answers so we can show you your own progress.
• We do not sell your data. Ever.
• We never share your health information with anyone unless you tell us to.
• You can ask us to show you, correct, or delete your data at any time.

Noble Corp, a sole proprietorship of Naresh Bishandas Sareen, of 22 A/B, 1st Floor, Shop No. 8, Yogesh House, 2412 East Street, Pune, Maharashtra 411001, is the Data Fiduciary for the purposes of the Digital Personal Data Protection Act, 2023. Questions about your data go to hello@jollyplay.in.

Your assessment results and safety-screen answers are the most sensitive things we hold. They are visible to you, and to the small number of Jolly staff who need them to keep you safe or to review your results.

We do not share them with your family, your doctor, an insurer, an employer or anyone else unless you specifically ask us to. If you choose to share a progress report by link, you control that link and can switch it off at any time.

Jolly is not a medical service and your report is not a diagnosis.

We ask for your consent separately for different things, because they are different decisions:

• Service messages — reminders, joining links, receipts. Required; without them the service cannot work.
• Promotional messages — offers and invitations. Entirely optional, and refusing changes nothing about your membership.
• Physical activity — a separate acknowledgement before any movement assessment.
• Photographs and names in class — optional, and you may withdraw it later.

You can withdraw any consent at any time, as easily as you gave it. Reply STOP on WhatsApp, or tell us and we will do it for you. Withdrawing consent does not undo what we lawfully did beforehand.

We use a small number of service providers, each for one job:

• WhatsApp (Meta) — to deliver messages to you.
• Razorpay — to take payments. They handle card and UPI details; we do not.
• Zoom — to run live classes.
• Supabase and Vercel — to store data and run the website.
• A courier — your name, address and phone, to deliver your kit.

Some of these store data outside India. We share only what each one needs. We do not sell your personal data to anybody.

• While you are a member, and for three years after you leave, so you can come back and still see your history.
• Invoices and payment records for eight years, because tax law requires it.
• Consent records for as long as we hold the data they relate to.
• If you ask us to delete your data, we do so within 30 days, apart from records the law requires us to keep.

Under the DPDP Act, 2023 you may:

• Ask what data we hold about you and get a copy.
• Ask us to correct anything wrong or out of date.
• Ask us to erase your data.
• Nominate someone to exercise these rights if you become unable to.
• Complain to us, and then to the Data Protection Board of India if we do not resolve it.

Write to hello@jollyplay.in or ask us to call you. We respond within 30 days. There is no charge.

Your one-time codes are stored only as an irreversible hash, never as the code itself. Access to member data is restricted by role, and every change to a membership, refund or assessment result is logged with who did it and when. If a breach affects you, we will tell you and the Data Protection Board.

Jolly is for adults aged 55 and over. We do not knowingly collect data about anyone under 18. If we learn that we have, we delete it.

If we change this policy in a way that matters, we will tell you on WhatsApp and by email before it takes effect, and ask again for any consent that has materially changed.