Privacy policy

Last updated 13 September 2026.

This policy explains what Coshi collects, why, and what you can do about it. It covers two different things, and they are not the same: the online store at coshi.shop, and the companion itself — the deity and the app that pairs with it. The second is the one that matters, because it involves a child's voice.

Who we are

coshi.shop and the Coshi companion app are operated by Coshi Infrastructures Pvt. Ltd. (CIN U32909UP2026PTC249518), RIG No. 1384 Mahadevpuram, Colony Chargawan, Arogyamandir, Gorakhpur, Uttar Pradesh 273003, India.

Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here. You can reach us at support@coshi.in or +91 75650 30700.

Part one: the store

What we collect

When you reserve or buy from coshi.shop we collect your name, email address, phone number, billing and delivery address, and the details of what you ordered. If you write to us, we keep that correspondence. Our store, like any website, also receives technical information such as your IP address, browser and device type, and which pages you visited.

Payments

Payments are processed by Razorpay. Your card, UPI and bank details go directly to them. We never see or store them.

Hosting

The store runs on Shopify, which processes store data on our behalf in order to host the site, take orders and prevent fraud.

Why we use it

To take and fulfil your order, to keep you informed about your reservation, to answer you when you write in, to meet our tax and legal obligations, and to keep the store secure. We send marketing email only if you have asked for it, and every such email carries an unsubscribe link.

You must be an adult to buy

Our products are made for children and sold to adults. You must be 18 or older to place an order or to create an app account.

Part two: the companion and the app

The account belongs to the adult

Your child never signs in to anything. The app is set up, owned and controlled by a parent or guardian, and it is the adult who creates the child's profile on it.

Verifiable parental consent

The companion does not process any of a child's personal data until a parent or guardian has given verifiable consent through the app, as the DPDP Act requires for anyone under 18. You can withdraw that consent at any time. Withdrawing it stops the deity from listening and responding, and you can delete everything already recorded at the same time.

What the deity records

The deity listens only when the button in its palm is pressed. It records what is said to it during that exchange, and keeps what it said back. It is not always listening, and it does not record when it has not been activated.

We keep, against the child profile the parent created: the conversations, which stories were played and where they stopped, the times of use, and the questions the deity declined to answer together with the reason it declined.

What we never do

We do not build a behavioural profile of your child. We do not track your child across services, we do not advertise to children, and we do not serve targeted advertising of any kind on the basis of a child's data. We do not sell personal data, and we do not use your child's voice or conversations to advertise anything to you either.

Service providers

We use third-party technology providers to turn speech into text and to generate the deity's replies.

What you can see and control, from the app

Every conversation, in full. Which stories played and where they stopped. Daily time limits, quiet hours and a bedtime cutoff. Which stories are available at all. Every transcript is readable by you and deletable by you, individually or all at once.

You can switch the microphone off entirely, and the deity will still chant and tell stories without listening or responding to anything.

Security

Conversations are encrypted in transit and at rest. Access within Coshi is limited to the people who need it to run and support the service. No system is perfect, and if a breach affects your personal data we will notify you and the Data Protection Board of India as the law requires.

How long we keep it

A child's conversations and listening history are kept for as long as you keep them. They are deleted when you delete them, when you delete the child's profile, when you close your account, or when you withdraw consent — whichever comes first. Order and payment records are kept for as long as tax and company law require us to.

Your rights

You may ask us for a copy of the personal data we hold about you or your child, ask us to correct it if it is wrong, ask us to erase it, and withdraw a consent you have given. You may also nominate someone to exercise these rights on your behalf if you are unable to. Write to support@coshi.in and we will act on your request within the time the law allows.

Exercising any of these rights costs nothing and we will not treat you differently for it.

Complaints

Our Grievance Officer can be reached at support@coshi.in or +91 75650 30700. We acknowledge every complaint within 48 hours and resolve it within one month. If you are not satisfied with how we have handled it, you may complain to the Data Protection Board of India.

Changes

We may update this policy as the product changes or the law does. The revised version is posted here with a new "last updated" date, and we will tell you directly about any change that materially affects how your child's data is handled.

Contact

support@coshi.in · +91 75650 30700 · Coshi Infrastructures Pvt. Ltd., RIG No. 1384 Mahadevpuram, Colony Chargawan, Arogyamandir, Gorakhpur, Uttar Pradesh 273003, India.