Vibe18 Labs Private Limited

Privacy Policy

Effective Date: 30 September 2026

This Privacy Policy explains how Vibe18 Labs Private Limited ("Kidly", "we", "us" or "our") collects, uses, stores, shares and otherwise processes information when you use Kidly.

Kidly is a parenting, child development and family health technology platform operated by Vibe18 Labs Private Limited, India. Kidly includes our mobile applications for iPhone and Android, our websites vibe18.com and kidly.health, and our customer support.

This version replaces the Privacy Policy dated 15 Aug, 2026. It describes what the Kidly app and our servers actually do today, names the companies that process information for us, and says how long we keep it.

Kidly is made for parents, legal guardians and adult caregivers aged 18 or over. It is not made for children to use.

This Privacy Policy should be read together with our Terms of Use and any other terms that apply to specific Kidly features.

1. Who We Are

Kidly is operated by:

Vibe18 Labs Private Limited

Email: support@vibe18.com Website: www.vibe18.com

Registered office: ROW HOUSE-7, TRIVENI C.H.S, SECTOR-16, PLOT-5 NEW PANVEL, NAVI MUMBAI - 410206 India (IN)

For privacy-related questions or requests, please contact:

support@vibe18.com

Vibe18 Labs Private Limited decides how and why personal information is processed through Kidly, except where a third party independently decides the purposes and means of its own processing (for example Apple or Google when you use their speech, sign-in or payment services).

2. About This Privacy Policy

This Privacy Policy applies to information collected through:

  • your Kidly account and the child profiles you create;
  • health records: growth, vaccinations, the baby log, illness history, temperatures, medicines and reminders, doctor visits, lab tests and the Medical Vault for documents;
  • Kidly Intelligence, the AI features in the app (also called Kidly AI);
  • development, milestones and activities, including Elevate;
  • nutrition, meals and habits;
  • Kidly Community, groups, group chat, events and expert Q&A;
  • Kidly Reads and Kidly TV;
  • Shop and the nearby doctors, hospitals, pharmacies and lab tests features;
  • family sharing and the Finance Tracker;
  • home-screen widgets and notifications;
  • subscriptions (Kidly Gold);
  • our websites and customer support.

When you follow a link out of Kidly to another company (for example a retailer, a pharmacy, a laboratory or a booking site), that company's own privacy policy applies to what you do there.

3. The Short Version

The main points of this policy are:

  • we store your account and your children's records in India, on Amazon Web Services in Mumbai;
  • AI features send the information needed to answer to Google's Gemini service, and only after you allow AI processing;
  • Kidly never records or keeps your voice;
  • Kidly shows no ads, and we do not sell your information;
  • Kidly does not use your or your child's information to train AI models (section "Kidly Intelligence and AI Processing" explains what applies to Google);
  • you can delete single records, a child profile or your whole account. A deleted account is permanently removed 90 days later.

4. Information You Provide

When you create or use a Kidly account, we collect:

  • your name and, if you add one, a profile photo;
  • your email address and/or mobile phone number, and your password if you sign in with email;
  • your name and email address from Google or Apple if you sign in with them;
  • your country, language and time zone, which the app reads from your phone (Kidly has no country picker);
  • a Medical Vault PIN, if you use the Medical Vault;
  • the choices you make about consent, notifications and privacy settings;
  • messages you send to customer support; and
  • anything else you choose to enter.

5. Child Profiles

Parents and guardians can create profiles for their children. Depending on the features you use, a child profile may include:

  • name, date of birth, sex and photo;
  • gestational age at birth, for premature babies;
  • blood group, allergies and long-term conditions;
  • an ABHA (Ayushman Bharat Health Account) number and health insurance provider and policy number, if you choose to add them;
  • height, weight, head circumference and other growth measurements;
  • vaccinations, including dates, doses and vaccination cards;
  • milestones, development observations and activities;
  • the baby log: feeds, nursing, meals, sleep and nappies;
  • illnesses, symptoms, temperatures, medicines and doses;
  • prescriptions, doctor visits, lab tests and medical documents;
  • diary notes, habits and expenses; and
  • questions you ask Kidly Intelligence about the child.

Much of this is health information about a child, which is sensitive and may receive extra protection under the law that applies to you. You decide what to enter. Only a name and date of birth are needed to create a profile.

6. Your Responsibility for Child Information

If you create or manage a child profile, you confirm that you are the child's parent or legal guardian, or that you have the parent's or guardian's permission.

You are responsible for making sure that what you enter is accurate to the best of your knowledge.

When you give another person access to a child profile, you decide what they can see and change, and you can remove their access at any time.

7. Information Collected Automatically

When you use Kidly, we automatically collect:

  • device type, operating system, app version, language and time zone;
  • your IP address, in our server logs;
  • crash reports and app performance information;
  • which features and screens are used, and errors;
  • a push notification token for your device; and
  • a pseudonymous analytics ID, which our server creates and which is not your name, email or phone number.

We do not collect your device's advertising identifier, your precise location, your contacts or the list of apps on your phone. The section "Diagnostics and Analytics" explains what you can switch off.

8. How We Use Information

We use information to:

  • provide Kidly's features, such as growth charts on your country's reference, your child's vaccination schedule, reminders, trends and summaries;
  • answer your questions with Kidly Intelligence, when you have allowed AI processing;
  • show content that suits your child's age, your country and your language;
  • send reminders, notifications and service emails, such as sign-in codes, invitations and subscription changes;
  • manage your subscription;
  • keep accounts secure, prevent fraud and abuse, and moderate Community content;
  • answer support requests;
  • find and fix problems and improve Kidly, using diagnostics and usage information; and
  • comply with the law and protect our legal rights.

We do not sell personal information. We do not use it for advertising, and we do not build advertising profiles of you or your child.

We do not currently send marketing emails or messages. If we start, we will ask for your permission first, and you will be able to say no at any time.

9. Kidly Intelligence and AI Processing

Kidly Intelligence uses artificial intelligence to answer parenting and child health questions, prepare health summaries and development assessments, suggest meals, explain vaccinations, read documents and prescriptions you scan, import vaccination cards, and help find nearby care. It also helps us moderate Community content.

The AI model is provided by Google, through the Gemini API. We send information to Google for AI features only after you allow AI processing in the app. You can switch this off at any time under Settings > Privacy & Data; the AI features then stop working until you switch it back on.

To answer, we send Google:

  • your question, and earlier messages in the same conversation;
  • the relevant details of the child you selected: first name (in chat only; other AI features use a placeholder instead of the name), age in months, sex, allergies, long-term conditions, blood group, recent health records and growth measurements;
  • documents and photos you attach or scan; and
  • an approximate location, rounded to about 1 km, when you search for nearby care.

We do not send your email address, phone number or account ID, or your child's date of birth, photo, ABHA number or insurance details. Email addresses, phone numbers, Aadhaar numbers and PAN numbers that you type into a question are removed before it is sent.

Some answers use Google Search, through Gemini, to find current information such as nearby services or booking pages. The search terms are then also processed by Google Search.

Community posts, comments, group chat messages and images you post publicly are checked by automated filters and by Google Gemini for harmful content. This moderation is part of running Community safely and does not depend on the AI processing setting.

Google processes this information to provide the service to us, and may keep it for a limited period under its own terms, for example to detect abuse. Kidly uses Google's paid Gemini API service under Google's data-processing terms, and Google does not use the information we send to train its models.

Kidly itself does not use your or your child's information to train AI models.

Kidly Intelligence can remember things to personalise answers for you: facts you approve (long-term memory), and corrections you make, which it keeps for 14 days. This memory is used only for your own account. You can view it, delete it ("Forget everything") or switch learning off in the app.

We keep your AI conversations so you can return to them. A conversation you have not used for 12 months is deleted automatically, and you can delete one yourself at any time.

AI answers can be wrong or incomplete. Kidly Intelligence is guidance for parents, not medical advice, diagnosis or treatment.

10. Voice Input

You can ask Kidly Intelligence a question, or describe symptoms, by speaking instead of typing.

Kidly never records or keeps your voice; the phone's speech service (Apple or Google) turns it into text. That service may process the audio on its own servers, under Apple's or Google's privacy terms. Kidly receives only the text, and only when you send it.

We record that voice input was used and in which language, never what was said.

One activity asks your child to blow at the screen. The app measures how loud the blowing is on your phone. No sound is recorded, stored or sent.

11. Medical Documents and Scans

You can upload or photograph medical reports, lab reports, prescriptions, vaccination cards, clinic letters, discharge summaries and other records.

Documents are stored privately, encrypted, in our storage in India. The app opens them through links that expire after 5 minutes (child photos and PDF health summaries: 1 hour). The Medical Vault is protected by your PIN, or by Face ID or fingerprint; biometric data never leaves your phone.

When you scan a document, a prescription or a vaccination card, it is read by Google Gemini (see "Kidly Intelligence and AI Processing") to pull out the details. You review the result before it is saved. A scanned prescription can create draft medicine reminders, which are only saved when you confirm them.

Automated reading of documents can make mistakes, so please check the details.

12. Location Information

Kidly uses only your approximate location, and only if you allow it. You can refuse or change location permission in your phone settings; Kidly still works.

Location is used to:

  • work out which country you are in, so the app can use your country's growth charts and vaccination schedule. Your phone's own location service (Apple or Google) turns the position into a country, and the app then discards the coordinates;
  • find nearby doctors, hospitals, pharmacies and lab tests. Your approximate coordinates are sent to our server and to Google Places for the search. The area you searched from is saved, encrypted, on your phone.

Our server does not store your coordinates with your account. Search results are cached for up to 3 days by an area of about 1 km, without any link to who searched. Your country, language and time zone are stored with your account.

13. Home-screen Widgets

With Kidly Gold you can add Kidly widgets to your phone's home screen. Depending on the widget, they show:

  • upcoming reminders, including medicine names, doses and times;
  • habits and the days you completed them;
  • your child's name and today's baby log: feeds, nursing, sleep and nappies;
  • your child's name and recent temperatures, with the fever trend; and
  • your child's name and today's nutrition.

Anyone who can see your home screen can see this information. Kidly widgets do not appear on the lock screen.

Widget information is kept on your phone and is not sent anywhere. On iPhone it is stored encrypted. On Android it is stored in Kidly's private app storage, which Kidly excludes from phone backups and transfers. It is removed when you sign out.

14. Notifications

Reminders for medicines, feeds, nappies, vaccinations and appointments are scheduled on your phone. They can show your child's name and the medicine and dose.

On Android, Kidly marks these notifications as private, so the lock screen shows only that there is a Kidly reminder. On iPhone, whether the content shows on the lock screen depends on your "Show Previews" setting. You can also switch on "Hide details on the lock screen" in Kidly's notification settings, so reminders say only that a dose or reminder is due, without the medicine name.

Push notifications are delivered through Firebase Cloud Messaging (Google). We store your device's push token and remove it when you sign out. A vaccination or appointment digest may list the vaccines or doses that are due.

15. Cloud Backup of Your Records

You can choose to back up your Medical Vault to your own Google Drive or iCloud account. It is off unless you switch it on.

The backup is a file containing your medical documents, prescriptions, vaccination records, growth records and child profiles. It is sent straight from your phone to your Google Drive (in a "Kidly" folder, using access limited to files Kidly creates) or to your iCloud account. Kidly's servers never receive your Google or Apple account tokens.

The backup file is encrypted with AES-256 before it leaves your phone. The recovery code that opens it is created on your phone, kept only in your phone's secure storage and shown to you when you switch backup on; Kidly never receives it. Keep it safe: without it the backup cannot be opened. The list of file names inside the backup, such as document titles, is not encrypted.

Switching backup off, or signing out, stops backups and removes Kidly's access to your Google Drive. Backup files already saved stay in your Drive or iCloud until you delete them there.

Separately from this feature, Kidly keeps its local health records out of your phone's own backups: on Android the app's data is excluded from cloud backup and device transfer, and on iPhone the encrypted caches are excluded.

16. Exporting Your Data

"Export My Data", in the Medical Vault, creates a file on your phone with your medical documents, prescriptions, vaccination records, growth records and child profiles. The file is encrypted with AES-256, and the app gives you a recovery code to open it. You can then save or share it.

You can also create a PDF health summary for a child.

You can download a copy of all the data in your Kidly account at any time from Settings > Download all my data: we email you a link to a single zip file with your records (as JSON files) and the photos and documents you uploaded. The link works for 7 days, after which the file is deleted. If you cannot use the app, contact us and we will send you a copy within 30 days.

17. Community

If you use Kidly Community, we collect the posts, comments, reactions, polls, photos, group memberships, group chat messages, events (including any location you give for an event), expert questions and reviews you submit, and the reports and blocks you make.

Community content is visible to other Kidly users. If you post anonymously, other users do not see your name, but we still know which account posted.

Photos you post in Community, and profile photos, are stored at a public content address: anyone who has the link can open them. Medical documents are never stored this way.

Community content is checked by automated filters and by Google Gemini, and reported content is reviewed by our team. We keep a record of moderation decisions. The copy of a moderated post held in that record is removed after 180 days.

You can block other users. They are not told.

Please think carefully about what you share about your child in Community.

18. Kidly Experts

When you ask a question in expert Q&A, the question, its category and your child's age are shown to the experts who answer and to other users who can see the question.

Experts who answer in Kidly may also have their own professional duties of confidentiality.

19. Family Sharing

You can invite a co-parent, grandparent, nanny, nursery or professional to a child's profile by email. The invitation is sent by email through our email provider.

For each person, you choose which features they can see or change (for example growth, vaccinations, medicines, nutrition, the Medical Vault or expenses). They see only what you allow, and you can change or remove their access at any time.

If you mark an expense as needing a refill in the Finance Tracker, the caregivers who have access to expenses are sent an email about it.

20. Finding Care, Pharmacies and Lab Tests

Kidly helps you find nearby doctors, hospitals, pharmacies and lab tests, and shows links to book or buy from them. Booking and buying happen on the provider's own website or app. Kidly does not send your health information, name or contact details to them; their privacy policy applies to what you give them.

Lab test prices are collected from the laboratories' public websites. In India, the medicine names you search for are sent to Tata 1mg and PharmEasy to fetch prices, without anything that identifies you.

Some booking links may be partner links for which Kidly may receive a fee.

22. No Advertising

Kidly shows no ads. We do not use advertising networks or advertising software in the app, and we do not collect your device's advertising identifier.

The affiliate and partner links described above are the only commercial links in Kidly. If this ever changes, we will update this policy before it happens.

23. Kidly Reads and Kidly TV

We use what you read, save and watch to recommend articles and videos that suit your child's age.

Kidly TV plays YouTube videos in YouTube's privacy-enhanced mode. When a video plays, YouTube (Google) receives information from your device, such as your IP address, under Google's privacy policy. Video thumbnails and some images are loaded from third-party sites (such as YouTube, Unsplash and Open Library), which see your IP address when they load.

24. Payments and Subscriptions

Kidly Gold is bought through the Apple App Store or Google Play. Apple or Google processes your payment; we never receive your card or bank details.

We receive and verify with Apple or Google the transaction ID, the product, the purchase and renewal dates, the subscription status and the store country, so we can give you the right plan.

25. Customer Support

When you contact support, we collect your name, contact details, account information, what you tell us and any device information needed to resolve your request. We use it to help you, to keep a record of the request and to improve our support.

26. Diagnostics and Analytics

Kidly uses three kinds of measurement:

  • crash reports, sent to Firebase Crashlytics (Google). These are on by default;
  • diagnostics and usage events (which features are used, errors and performance), sent to our own servers. These are on by default; and
  • Google Analytics for Firebase, which is off unless you allow it.

Each is linked to a pseudonymous ID, not to your name, email address or phone number. Advertising features in Firebase are switched off.

You can change these choices under Settings > Privacy & Data. Switching diagnostics off stops crash reports, deletes reports not yet sent and stops usage events from reaching our servers. Switching analytics off resets the analytics data on your phone.

27. Cookies and Similar Technologies

Our public websites do not use advertising or analytics cookies.

The app stores what it needs on your phone to keep you signed in, remember your settings and work offline. Health records the app keeps on your phone are encrypted, except the Android widget information described in "Home-screen Widgets".

28. Service Providers We Use

These companies process information for us, only to provide their service to Kidly:

  • Amazon Web Services (India, Mumbai region): our servers, database, file storage, encryption keys and logs. Its content delivery network (CloudFront) delivers the app's public images and our websites from locations around the world.
  • Google, Gemini API: Kidly Intelligence, reading scanned documents, and Community moderation.
  • Google Places: searching for nearby doctors, hospitals, pharmacies and labs.
  • Google Firebase: crash reports (Crashlytics), analytics if you allow it, and push notifications (Cloud Messaging).
  • Google Sign-In and Sign in with Apple: if you choose to sign in with them.
  • Twilio: sending sign-in codes by SMS.
  • Twilio SendGrid: sending emails, such as sign-in codes, invitations and subscription notices.
  • Apple App Store and Google Play: selling and verifying subscriptions.

These companies also receive information when you use a feature that relies on them, under their own privacy policies:

  • Apple or Google speech services, when you use voice input;
  • Apple or Google location services, when the app works out your country;
  • Google Drive or Apple iCloud, if you switch on backup;
  • YouTube, when you watch Kidly TV; and
  • retailers, pharmacies, laboratories and booking sites, when you follow a link to them.

29. Who We Share Information with

We share information only:

  • with the service providers listed above, to run Kidly for us;
  • with the people you choose, such as family members you invite, other Community users when you post, and experts when you ask a question;
  • with the government, courts, law enforcement or regulators, when the law requires it or to protect someone's safety; and
  • with a buyer, investor or successor, if Vibe18 Labs Private Limited is involved in a merger, acquisition, financing, restructuring or sale of assets, subject to this Privacy Policy.

We do not sell your information, and we do not share it with advertisers or data brokers.

30. International Data Transfers

Your account and your children's records are stored in India, on Amazon Web Services in the Mumbai (ap-south-1) region.

Some of our service providers process information outside India, including:

  • Google, for AI (Gemini), Google Search, Google Places and Firebase, on its global infrastructure, which may include the United States. Our Gemini API use is not limited to a particular region;
  • Twilio and SendGrid, in the United States, for SMS and email;
  • Apple and Google, for sign-in, purchases, speech recognition and backups you switch on; and
  • Amazon CloudFront, which delivers public images and our websites from locations around the world.

We have data-processing terms in place with these service providers, including Google, Twilio and SendGrid, and they cover these transfers.

31. Data Retention

We keep information only as long as we need it. The periods below are set in our systems:

  • your account, child profiles and records: while your account is open, and permanently deleted 90 days after you delete your account;
  • AI conversations: 12 months after you last use them, or sooner if you delete them or your account;
  • account data downloads ("Download all my data"): 7 days;
  • Kidly Intelligence memory: corrections for 14 days; facts you approve until you delete them;
  • technical records of AI requests: 90 days. AI feedback: 90 days after it is processed, and no more than 365 days. Daily AI usage counts: 400 days;
  • diagnostics and usage events: 90 days;
  • server logs, which include IP addresses: 90 days;
  • in-app notifications: 90 days after you read them, and no more than 365 days;
  • sign-in sessions: a sign-in lasts up to 30 days, you are signed out after 21 days without use, and no session lasts longer than 180 days;
  • one-time sign-in codes: they expire after 5 minutes (SMS) or 10 minutes (email) and are deleted within 24 hours after that;
  • uploads that were never finished: 30 days;
  • nearby-search results: 3 days, with no link to who searched;
  • Community moderation: the copy of a moderated post is removed after 180 days; the record of the decision is kept;
  • consent records: kept as proof of what you agreed to, and made pseudonymous when your account is deleted; and
  • purchase records: kept for 8 years after the purchase, as Indian accounting and tax law requires, for accounting, tax and disputes; after your account is deleted they are kept without your name or account attached.

Security, audit, moderation and child-safety records are kept for up to 3 years, unless the law requires us to keep a particular record for longer, for example during an investigation.

A clean-up job runs every night and deletes information once the period that applies to it above has passed; information in our backups is removed when those backups expire.

32. Account Deletion

You can delete your account in the app under More > Settings > Security > Delete Account. For your security, you confirm by typing a phrase and signing in again. If you cannot use the app, email support@vibe18.com from your account email (or quoting your phone number) with the subject "Delete my Kidly account"; we confirm your identity before deleting anything. The page kidly.health/delete-account explains the steps.

When you delete your account, you are signed out on every device straight away and your account is scheduled for deletion. For 90 days you can restore it by signing in again. After 90 days it is permanently deleted, together with your child profiles, records, documents and AI conversations. A child profile shared with a co-parent stays with the co-parent.

Deleting your Kidly account does not cancel a subscription bought through the App Store or Google Play; please cancel it there.

You can also delete single entries, a whole child profile, AI conversations, or all Kidly Intelligence memory ("Forget everything"). Deleting a child profile deletes its records and files. When you delete a single entry that has a file attached, such as a medical document, a prescription or lab report scan, a journal or community photo, a group chat photo, or a file you attached to a Kidly Intelligence chat, we delete that file from our storage straight away, unless another of your entries still uses the same file (for example, a prescription and a document saved from one scan); then it is deleted when the last entry using it is deleted.

After deletion we keep only: purchase records without your name or account; pseudonymous consent records; records that belong to other people, such as a co-parent's child profile; moderation decisions (the copy of the post is removed after 180 days); and backups until they expire.

33. Backups and Archived Information

Information deleted from our active systems can remain for a limited time in:

  • earlier versions of deleted files in our storage, which are removed after 30 days;
  • automatic database backups, which are removed after 14 days; and
  • server logs, which are removed after 90 days.

We do not restore deleted information from backups except to recover from a failure of our systems.

34. Security

We protect information with measures including:

  • encrypted connections (HTTPS) for everything the app sends, with the app checking that it is talking to our real servers;
  • encryption of stored files, with keys managed in Amazon Web Services;
  • private storage for medical documents, opened only through links that expire within minutes;
  • encryption of health information stored on your phone (AES-256), with keys kept in the iPhone Keychain or Android Keystore;
  • a PIN, Face ID or fingerprint lock for the Medical Vault;
  • blocking screenshots of sensitive screens on Android, and hiding them in the app switcher on iPhone;
  • a list of your signed-in devices, which you can sign out of, and signing in again before account deletion; and
  • limiting staff access to what is needed to run Kidly.

No online service can guarantee absolute security. Please keep your phone locked and your sign-in details private.

35. Security Incidents

If we become aware of a security incident involving personal information, we will assess and respond to it in accordance with applicable law.

Where notification is legally required, we will notify the relevant authority and the people affected within the time the law requires.

36. Children's Information

Kidly is for adults. Children should not create accounts or use Kidly themselves, and we do not knowingly collect information from children who do.

Parents, guardians and the caregivers they authorise create and manage child profiles, and decide what is entered about a child.

We do not track children's behaviour for advertising, show them targeted ads or use their information to train AI models.

Where the law requires verifiable parental consent or other safeguards for children's information (for example under India's Digital Personal Data Protection Act, 2023 and its Rules), we will meet those requirements as they apply to us.

39. Research and Product Development

We improve Kidly using diagnostics and usage information, and using aggregated statistics that do not identify you or your child.

We do not run research studies with your information, share it with researchers, or use it to train AI models. If we ever want to use identifiable information for research, we will ask for your permission first.

40. Your Privacy Rights

Depending on where you live, you may have the right to:

  • access the information we hold about you and your child;
  • correct or update it;
  • delete it;
  • receive a copy of it (portability);
  • withdraw consent;
  • object to or restrict some processing;
  • nominate someone to exercise your rights if you die or cannot act (India); and
  • complain to us and to a data-protection authority.

Many of these you can do yourself in the app: edit or delete records, delete a child profile, delete AI conversations and memory, change your privacy choices, export your Medical Vault, download all your account data and delete your account.

41. Access, Correction and Deletion Requests

To make any other privacy request, contact:

support@vibe18.com

Please tell us which account the request is about, which child profile if relevant, and what you would like us to do.

We may need to confirm your identity, or your authority to act for a child, before completing a request.

42. Child Data Requests

If you ask for access to or deletion of information about a child, we may ask for evidence that you are the child's parent or guardian, or are authorised by them.

Where a child has independent rights under applicable law, those rights will also be respected.

43. India

Where India's Digital Personal Data Protection Act, 2023 applies, you have the rights to access, correction, completion, updating and erasure of your personal data, to withdraw consent, to grievance redressal and to nominate another person.

Please contact our Grievance Officer (see "Grievance Officer") first. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

44. United Kingdom

Where the UK GDPR applies, you have rights of access, rectification, erasure, restriction, objection and portability, the right to withdraw consent, and rights about automated decision-making and profiling.

Kidly does not make decisions about you with legal or similarly significant effects by automated means alone.

You can complain to the Information Commissioner's Office (ICO).

45. European Union and EEA

Where the EU GDPR applies, you have rights of access, rectification, erasure, restriction, objection and portability, the right to withdraw consent, and rights about automated decision-making and profiling.

You can complain to the data-protection authority in the country where you live.

46. Business Transfers

If Vibe18 Labs Private Limited is involved in a merger, acquisition, financing, restructuring, insolvency or sale of assets, information may be transferred as part of that transaction where the law permits. It will remain protected by this Privacy Policy.

47. Third-party Websites

Kidly links to websites and apps we do not control, such as retailers, pharmacies, laboratories, booking sites and YouTube. Their own privacy policies apply to what you do there.

48. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The effective date at the top shows when it last changed.

If we make a material change, the app will ask you to review and accept the new version, and we may also tell you by email or on our website.

49. Grievance Officer

In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, our Grievance Officer is:

Name: Nitesh Thakur

Designation: Grievance Officer, Vibe18 Labs Private Limited

Email: support@vibe18.com (please write "Grievance" in the subject line)

Address: ROW HOUSE-7, TRIVENI C.H.S, SECTOR-16, PLOT-5 NEW PANVEL, NAVI MUMBAI - 410206 India (IN)

We will acknowledge your complaint within 24 hours and resolve it within 15 days of receiving it.

50. Privacy Contact

For questions, requests or concerns about privacy:

Vibe18 Labs Private Limited

Email: support@vibe18.com Website: www.vibe18.com

Registered office: ROW HOUSE-7, TRIVENI C.H.S, SECTOR-16, PLOT-5 NEW PANVEL, NAVI MUMBAI - 410206 India (IN)

51. Privacy Complaints

If you have concerns about how Kidly handles your information, please contact us first at:

support@vibe18.com

We will investigate and respond in accordance with applicable law. Where you have the right to do so, you may also complain to the relevant data-protection authority.

52. Effective Date

Effective Date: 30 September 2026