What we know about you,
and what we don’t.

Robonamix is the children’s education initiative of Gravixar, run from Building 8, Civic Center, Bahria Town, Rawalpindi, Punjab, Pakistan. We have been teaching since 2019.

Gravixar is the entity responsible for the personal information described here, and is who answers if you have a complaint. You can reach a human at support@robonamix.com or +92 336 5676672.

This policy covers robonamix.com and the studio services we run behind it. It does not cover Meta’s platforms: if you message us on Instagram or WhatsApp, or comment on one of our posts, that conversation happens on their infrastructure under their privacy policy as well as this one. Section 9 explains the one place our systems touch Instagram at all.

There are exactly two places on this site where you can hand us information, plus one place a child who already attends can sign in.

The enquiry form, at /contact

• Everyone: your name, your email address, and the message you write.
• If you are a school: the school’s name, your role there, and optionally the year group or cohort size you are asking about.
• If you are a parent: your phone or WhatsApp number, roughly how old your child is, and optionally which programme interests you. We ask for an age, not a date of birth.
• The phone number is required of parents and optional for schools. That is deliberate rather than careless: a school contact is reachable by email as a matter of course, and a parent in this market is reachable on WhatsApp.

Studio registration, at /register

• You give us: your name, your phone or WhatsApp number, your email, your child’s name and age, and any notes you choose to add.
• Your browser gives us: the IP address the form was submitted from, and your browser’s user-agent string. We record these to investigate spam and abuse. They are not fields on the visible form, which is precisely why we are telling you about them here.
• A hidden field: the form contains one field that real people never see. If it comes back filled in, we treat the submission as automated. If a password manager fills it by accident, message us and we will find your registration by hand.
• A one-way fingerprint: we compute a hash of your email, your child’s name and the current month. It cannot be turned back into your details. Its only job is to stop a repeated submission creating three copies of you in our records.

If your child attends the studio

• A login code: children sign in with a code derived from their own first name. We do not create an email account for your child, we do not ask them for a password, and we do not ask them anything about themselves.
• Their work: the projects they build in the studio, saved against that code.
• A consent record: where you have given permission to share your child’s work with family, we record your name, the fact that you said yes, and the date. Section 6 explains what that permission does and does not unlock.

From September 2026 this site counts visits. It did not before, and we would rather say what changed than let you assume it never happens. We use Vercel Analytics and Vercel Speed Insights, both of which are cookieless: they set nothing on your device and cannot recognise you across other websites.

• Page views: which pages are read and roughly where in the world visitors are. Not who you are.
• WhatsApp clicks: when somebody opens WhatsApp from a link here, we record the page they were on. Deliberately never the pre-filled message, never a phone number, never anything about the conversation that follows.
• Form submissions: that a contact or registration form succeeded, and whether it came from the school or parent side. The event carries none of what you typed.
• Loading speed: how quickly pages render, so we can tell when the site is slow for real people rather than only for us.

• No advertising trackers. There is no Meta Pixel on this website, no Google Analytics, no session recording and no heatmapping. Nothing here builds an advertising profile of you.
• No tracking cookies. We set exactly one cookie, only for a signed-in child, so that they stay signed in while they work. There are no advertising cookies and no third-party cookies. The measurement in section 4 uses none.
• No selling, ever. We do not sell, rent, trade or broker your data, and we do not share it with advertising networks.
• No social login. You cannot sign in here with Facebook, Google or Instagram, so we never receive a profile from any of them.

Everything a child makes here is private by default. It becomes visible outside the studio only when both of these are true, and neither is enough on its own:

• 1. we have recorded your consent for that specific child, and
• 2. the child has chosen to share that specific project.

We cannot publish your child’s work for them, and your child cannot publish before a grown-up has said yes. When a project is shared, the link is a long random string, it is never listed anywhere, and nothing on this site links to one.

Those links expire. Ninety days, and the expiry is enforced when the link is opened rather than merely written down in a policy. If you revoke a link it dies permanently: sharing the same project again mints a brand new link, so an old URL forwarded into a group chat cannot be brought back to life.

There are two different permissions here and they are easy to confuse, so we keep them genuinely separate.

• Sharing work with family is the one described in section 6. We record it ourselves, and it unlocks a private link to a project. It does not permit a photograph.
• A photograph of your child needs a signed parental consent form, in Urdu, which we hold on paper. Nothing digital substitutes for it, and no other permission implies it.

No such form exists for any child today. So every public surface we run is face-free: our website, our Instagram and our Facebook Page show the builds, the benches and the hands. That is a statement about where the bar sits, not a stylistic preference, and it holds until a form is signed.

The default is deliberately inverted. A photograph is not publishable because nobody objected to it; it is publishable only because a person looked at the actual pixels and cleared it, with a reason recorded. Consent given once is also not consent for ever — tell us you have changed your mind and we will take the material down and stop.

Three parties, and no others. We use no advertising networks and no data brokers.

• Vercel Inc. hosts this website, stores our files, and provides the cookieless measurement in section 4. Their servers are outside Pakistan, so your information is processed abroad. Like any web host, they keep standard server logs.
• Gravixar HQ is our own internal system, run by us on our own infrastructure. Enquiries and registrations sync into it so that we can actually reply to you and keep track of the conversation.
• Meta Platforms only in the narrow sense set out in the next section.

We publish to our own accounts — @Robonamix and our Facebook Page — from our own internal tool, using Meta’s publishing interface. It is worth being precise about what that connection is and is not, because “they have a Meta app” sounds considerably more invasive than the reality.

• It sends. The connection takes a post we have written and puts it on our own account. That is its entire function.
• It does not read you. It does not collect information about people who follow, like, comment on or view our posts, and we build no audiences or custom-audience lists from anybody.
• It signs nobody in. It is not a login. No visitor to this website is ever authenticated through Meta, so we never receive your Facebook or Instagram profile.

If you follow or message us on those platforms, Meta collects that interaction under their own privacy policy, and it is worth reading. That is between you and Meta, and it happens whether or not we use their publishing tools.

We would rather tell you the truth here than quote a tidy number we do not actually enforce.

• Family share links: ninety days, enforced automatically, as described in section 6.
• Enquiries and registrations: we keep these while we are talking to you, and afterwards as ordinary business records. We do not currently run an automatic deletion schedule for them. You can ask us to delete yours at any time and we will.
• A child's work: kept while they attend, so they can return to a project weeks later. Ask us and we will delete it.

Our programmes are built for ages 8–17, and we have enrolled younger children by arrangement. We ask a parent or guardian to complete our forms, not the child, and nothing on this website invites a child to give us personal information about themselves.

If you believe a child has given us information without your knowledge, email support@robonamix.com and we will delete it. You do not need to explain yourself and we will not ask you to.

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or withdraw a consent you gave earlier. All four are free, and we answer within 30 days.

Email support@robonamix.com and say what you want. If you are asking about a child, tell us their name so we can find the right records. Our data deletion page sets out exactly what a deletion request removes.

When we change what we collect, we change this page in the same breath and move the effective date at the top. If a change is material and you are an active family, we will tell you directly rather than hoping you re-read a web page.