Privacy Policy

1. What data we collect

• Account data: your email address and display name, provided when you sign in via our authentication provider (Clerk).
• Learning activity: quiz and exam attempts with scores, topic visits, video watch positions, SRS review sessions, adaptive practice sessions, and course enrolments.
• Doubt threads and messages: the questions you submit and the responses you receive (AI or faculty).
• Bookmarks and highlights: annotations you create on course materials.
• Notifications: in-app messages and, where configured, transactional emails for system events (access approvals, doubt replies, etc.).
• Usage signals: streak counters, badge awards, and leaderboard scores derived from the above activity.

2. Why we process your data

• Service delivery: to authenticate you, display your progress, deliver course content, and let faculty grade your work.
• AI assistance: the text of your doubt messages is sent to a third-party AI model provider (Anthropic) to generate responses. No identifying metadata is included beyond the message text and an anonymised session identifier.
• Platform improvement: aggregate, anonymised usage patterns help us improve content and features. We do not sell or share individual data for marketing.
• Legal compliance: we retain records as required by applicable law and to resolve disputes.

3. Retention

We retain your personal data for as long as your account is active. If you request deletion of your account, we will permanently erase your personal data within 30 days of completing verification, subject to any legal hold obligations. Anonymised or aggregated data (e.g. course completion statistics) may be retained indefinitely as it cannot be linked back to you.

4. Your rights under the DPDP Act 2023

As a Data Principal under the DPDP Act 2023, you have the following rights, which you can exercise from the Account & Privacy page in your student dashboard:

• Right of access:download a machine-readable copy of all data we hold about you (“Download my data”).
• Right to erasure: request permanent deletion of your account and associated personal data. Requests are reviewed and processed within 30 days.
• Right to withdraw consent: you may contact us at any time to withdraw consent; this will not affect the lawfulness of processing carried out before withdrawal.
• Right to nominate: you may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, as permitted by the Act.

5. Third-party processors

• Clerk (clerk.com):identity and authentication. Your email and name are stored in Clerk’s infrastructure.
• Anthropic (anthropic.com): AI model provider for doubt-answering. Doubt message text is transmitted to Anthropic and processed according to their data-processing agreement.
• Neon / Vercel: database and hosting infrastructure (data stored in India-adjacent or GDPR-compliant regions).

6. Grievance contact

For any privacy concerns, requests not covered by the self-service tools above, or complaints, please contact our Grievance Officer:

If you are not satisfied with our response, you may approach the Data Protection Board of India once it is constituted under the DPDP Act 2023.