Legal

Privacy policy

This policy explains what personal data Trust Fund Baby collects, why we collect it, who we share it with, and the choices you have. We have written it in plain language on purpose. If anything is unclear, write to us and we will explain it.

Last updated: 19 September 2026

Who we are

Trust Fund Baby is operated by TFB EduVest LLP, an LLP incorporated in India (LLPIN ACX-6787), with its registered office at 1901/1902 Sahyadri Tower, Upper Govind Nagar, Malad East, Mumbai 400097. We are an AMFI-registered mutual fund distributor (ARN-368678).

In this policy, “we”, “us” and “TFB” mean TFB EduVest LLP. “You” means the person visiting our website, opening an account, or talking to us on social media. For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described below.

What this policy covers

It applies to personal data we handle when you:

  • visit trustfundbaby.in or use our free Academy lessons;
  • create an account, or start a TFB Seed, TFB Harvest or TFB Deed;
  • comment on or message our Instagram or Facebook pages;
  • book a discovery call, email us, or call us; or
  • contribute to a child’s fund as a well-wisher.

Personal data we collect

Data you give us. Your name, email address, mobile number, city and, where you open an account, your PAN. For TFB Deed, the intake also includes the child’s name and date of birth, the vesting age and payout instructions you choose, and the name of the trustee you appoint. If you book a discovery call, we hold your booking details and anything you tell us on that call.

Identity and financial data collected for regulatory checks. To open a mutual fund folio we, through our transaction partner, collect and verify the identity and bank details the law requires: your Aadhaar-based KYC through DigiLocker, your PAN, your bank account details and cancelled cheque or bank statement, and your signature. Your SIP mandate, UPI AutoPay or eNach details are held by the payment rail and your bank, not by us.

Payment data. Card, UPI and netbanking details used for the TFB Deed fee, the discovery-call booking fee or well-wisher contributions are entered directly with our payment provider. We receive only the outcome of the payment plus a reference, never your full card number.

Social media data. If you comment a keyword such as SEED, HARVEST or DEED on our Instagram or Facebook posts, or message us there, Meta Platforms shares your public username, your comment or message, and the platform identifiers we need to reply or to send you a direct message. We use this only to answer you and to follow up on the enquiry you started.

Technical data. IP address, device and browser type, pages viewed, referring links and timestamps, collected through cookies and similar technologies. See “Cookies and analytics” below.

Why we use your data

  • To provide the service. Open and operate your account, place and track mutual fund transactions, generate Academy progress, and process Deed paperwork.
  • To meet legal obligations. KYC, anti-money laundering checks, tax reporting, and the record-keeping that applies to a registered mutual fund distributor.
  • To take payments and reconcile fees you owe or contributions you make.
  • To answer you, including replying to comments and direct messages on Instagram and Facebook.
  • To keep the service safe and honest, including fraud prevention, security monitoring, and enforcing our terms.
  • To tell you about TFB, where you have asked us to or where the law permits it. Every such message carries a way to opt out.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects about you.

Who we share it with

We share personal data only where it is needed for the purposes above, and only with parties bound to protect it. Depending on what you use, that can include:

  • Our mutual fund transaction partner (Fintech Primitives / Cybrilla), which runs KYC, folio onboarding, mandates and order placement.
  • Asset management companies and registrars and transfer agents, which hold your folio and process your transactions and any redemption.
  • Banks and payment providers, including our payment gateway for non-mutual-fund money, and the UPI or netbanking rails used for your mandate.
  • Document execution vendors used for e-stamping and e-signing, where a Deed is being executed.
  • Meta Platforms, in respect of the Instagram and Facebook pages we operate, so that comments and messages can be delivered and answered.
  • Service providers who host our website, send our email, SMS or WhatsApp messages, and run our analytics, under contracts that limit them to our instructions.
  • Professional advisers such as our chartered accountant, auditors and legal counsel.
  • Authorities, including AMFI, SEBI, the Income Tax Department and courts, where we are required by law to disclose, or where it is necessary to establish or defend a legal claim.

If TFB is ever reorganised or its business transferred, personal data may move with it. We would tell you before that happened, and the same protections would continue to apply.

How long we keep it

We keep personal data only as long as we need it, or as long as the law requires. Investment, KYC and transaction records are kept for the period prescribed for registered distributors and under anti-money laundering rules, which is up to eight years after the end of the relationship. Enquiries that never became an account — including Instagram and Facebook conversations — are kept for up to 24 months and then deleted. Website analytics are kept in aggregated or de-identified form.

Cookies and analytics

We use cookies that are necessary to run the site and, where you accept them, cookies that tell us how the site is used so we can improve it. You can block or clear cookies in your browser settings; the essential ones are needed for the site to work properly.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

  • ask for a summary of the personal data we hold about you;
  • ask us to correct, complete or update it;
  • ask us to erase it, where we are not required to keep it;
  • withdraw a consent you gave, at any time;
  • nominate someone to exercise your rights if you die or are incapacitated;
  • complain to us, and to the Data Protection Board of India.

Write to sanchit@trustfundbaby.in with the subject line “Data request”. We will acknowledge it within seven days and complete the request within thirty days. Some rights are limited where we must keep records for legal reasons, and we will tell you if that is the case and why.

Deleting your data

You can ask us to delete the personal data we hold about you at any time. Here is exactly how:

  • Email us. Write to sanchit@trustfundbaby.in with the subject line “Data deletion request”. Tell us the email address, mobile number, or Instagram or Facebook username you used with us, so we can find your record.
  • Or ask us on social. Send a direct message to @trustfundbabyin on Instagram or to our Facebook page saying you want your data deleted, and we will action it the same way.
  • Revoke our access. To remove the permissions you granted us through Facebook or Instagram, go to your Facebook settings, then Apps and websites, then Business integrations, and remove Trust Fund Baby. You can also review and remove apps inside the Instagram app under Settings → Website permissions → Apps and websites.

We confirm every deletion request within seven days and complete it within thirty days. We will delete or anonymise what we hold, except the records we are legally required to retain — for example a folio you still hold, a transaction we must report, or records we must keep under anti-money laundering rules. If you are still an investor with us, deleting everything would mean we could no longer operate your account; we will tell you that before we act, and you can choose to close the account instead.

Children's data

A TFB account is opened and controlled by a parent or legal guardian. We do not create accounts for minors and we do not accept personal data directly from a child. Where a Deed names a child as beneficiary, we hold the child’s name and date of birth because the trust requires it, and we hold it for the duration of the Deed.

Keeping data safe

We use encryption in transit, access controls, and vendors that hold industry certifications to protect your data. No system is perfectly secure, so if a breach ever affects your data we will tell you and the Data Protection Board of India as the law requires.

Changes to this policy

If we change how we handle personal data we will update this page and move the “last updated” date. Material changes will be notified to account holders by email before they take effect.

Contact and grievance officer

For any question about this policy, or a complaint about how we have handled your data, contact our Grievance Officer:

Grievance Officer, TFB EduVest LLP
1901/1902 Sahyadri Tower, Upper Govind Nagar, Malad East, Mumbai 400097
sanchit@trustfundbaby.in

We aim to resolve every complaint within thirty days. If you are not satisfied, you can escalate to the Data Protection Board of India, and for matters relating to your mutual fund folio, to AMFI or SEBI.