How we handle your information

It applies to the adult account holder (the guardian) and to any learner profile that guardian creates, including a child learner. A child does not independently contract with us. Where we say “you”, we mean the guardian unless we say otherwise.

Account holder and transaction data may include email address and federated sign-in identifiers (Zitadel), account and credit-pack status, purchase, subscription, cancellation and refund records (kept for account and tax purposes), MFA enrolment, support and grievance communications, and login, fraud-prevention, security and consent records. Payment-card, UPI or bank credentials are processed by Razorpay and are not intended to be stored by the Operator.

For each learner profile, the guardian may provide a display name, avatar, school board and grade. Optional demographics, if the guardian chooses to enter them, are limited to birth year (not a full date of birth), gender, country and region codes, primary language and school type. We do not ask for a child’s email, mobile number, school name, class section, admission number, photograph or full date of birth.

Learning records include questions the learner types, generated answers, short courses, lessons, quizzes, teach-back chats, mastery and progress, optional notes a learner sends about a page, and the processing metadata needed to route, secure, troubleshoot and delete this material.

Anonymous search records. When a learner searches for a topic, we may save a record of that search that is not linked to the learner, the guardian or the account. The record holds: the words searched for, after we automatically mask email addresses, web links, phone numbers and long runs of digits and shorten the text to at most 120 characters; the topics we showed in response, and the topic the learner opened first, if any; the learner’s grade, school board and the language setting of the app or browser; and the time of the search rounded down to the hour, with technical details of how the search ran. It does not include the learner’s name, profile, account, device, IP address or location. Automatic masking cannot catch everything, such as a name or an address, so please ask children not to type personal information into search. Because these records are not linked to an account, we cannot find or remove one learner’s search records on request.

Technical data may include device type, browser or app version, IP address, approximate network region, timestamps, crash information, security events and diagnostic logs. We also set a strictly necessary httpOnly session cookie and short-lived cookies used only to complete sign-in. Optional Plausible page analytics, when enabled, is used to understand site use — not to advertise.

Signed-out science challenge. Before anyone signs in, the mobile app can offer a short science challenge. Answers from that challenge are sent to our servers together with a bot-check token. The challenge does not ask for a name, email, or learner profile. Some questions link to the public source of the item, which opens in the device browser.

Create and protect the guardian’s account

Account identifiers, login, consent and security records.

Create a learner profile

Display name, avatar, board and grade chosen by the guardian.

Deliver a lesson, course or practice session

The question, generated explanations, quizzes, teach-back and related output.

Manage credits

Purchase status, balances, allocation and transaction records.

Show progress to the guardian

Mastery, attempts and the questions the learner asked.

Secure and support the Service

Technical data, logs and support communications.

Improve the pages a learner uses

Optional notes a learner types or dictates about a page.

Improve search and find missing topics

The anonymous search records described in section 2, used to see which searches find nothing or the wrong topic so we can improve search and add the topics students look for.

Meet legal obligations

Account, transaction, consent, security and complaint records where the law requires.

We do not sell personal data, use learner information for targeted advertising or cross-service profiling, share learner activity with schools or teachers unless the guardian directs us to, or use questions and outputs to train general-purpose AI models.

Before we create a child learner profile or process a child’s personal data, we ask the parent or lawful guardian to create the account and provide the profile details. Optional demographics can be refused or withdrawn without losing access to unrelated features. Withdrawal does not affect processing already lawfully completed or records that must be retained by law.

A federated sign-in or authenticator code verifies control of an account; it does not by itself establish that the account holder is an adult or is a child learner’s parent or lawful guardian. The guardian controls the account and may delete lesson material, a learner profile or the account. A parent or lawful guardian must supervise a child learner’s use of the Service.

We use contracted processors to provide the Service. These currently include Anthropic (Claude) and OpenAI for lesson, course and feedback generation; Zitadel for identity; Razorpay for payments; cloud hosting; and optional Plausible for analytics. Optional in-browser dictation on the feedback control may send audio to the browser’s speech service (Google in Chrome; Safari is typically on-device). We do not store recordings — only the typed or dictated note. We require contractual confidentiality and security, and we configure inputs and outputs so learner questions and generated lessons are not used to train general-purpose models.

Uploaded or typed content and generated output are private to the guardian’s account. They are not placed in a shared textbook, question-answer or training repository and are not reused for another user.

Learner profile, questions and lesson output

Until the guardian deletes the profile or account, or an earlier service limit applies.

Optional page notes

Until the guardian deletes the account. We do not keep the recording from in-browser dictation.

Optional demographics

Until the guardian clears them or deletes the profile or account.

Anonymous search records

Deleted automatically after 90 days.

Credits and transaction records

For the applicable contractual, tax, accounting, consumer-protection and legal period.

Security logs

For the period required for security and legal compliance, including applicable DPDP log-retention rules.

Deleted accounts

Access ends when the account is marked deleted. Remaining personal data is permanently removed after a short grace period, then through the backup cycle, unless legal preservation applies.

We may preserve specific records where reasonably necessary for a legal claim, security investigation, statutory obligation or lawful direction. We do not use preserved material for ordinary product purposes.

We disclose personal data:

• to contracted service providers described above;
• when the guardian directs or authorises the disclosure;
• to comply with a binding legal process or lawful government request;
• to investigate fraud, a security incident, unlawful material or a threat to safety;
• as part of a merger, financing, restructuring or sale, subject to confidentiality and continued protection; or
• where otherwise required or permitted by applicable law.

We do not permit another user to access a guardian’s questions, learner profile, generated lessons or progress. We do not disclose learner data to advertisers.

We use proportionate technical and organisational safeguards, including encryption in transit, httpOnly session cookies, access controls, monitoring, secure development practices, backups and processor contract controls. Our personnel do not routinely review private learning material. Exceptional access is limited to guardian-authorised support, a security investigation, abuse handling or legal compliance. No electronic service can guarantee absolute security.

We maintain an incident-response process. Where applicable law requires, we will notify affected guardians and the Data Protection Board of India without delay and provide further information within the prescribed period. Notices will explain the incident, likely consequences, mitigation, recommended protective steps and a contact for questions.

Subject to applicable law and proportionate identity verification, a guardian may exercise rights concerning the guardian’s own data and, where the guardian is the parent or lawful guardian, data relating to a child learner:

• obtain information about the personal data we process and the processors with whom it has been shared;
• correct inaccurate or incomplete account or learner-profile information;
• erase lesson material, a learner profile or the account;
• withdraw optional demographics;
• raise and escalate a grievance through the published channel; and
• complain to the Data Protection Board of India once the applicable complaint mechanism is operative.

You can delete the account from parent space. You can also write to [email protected]. We may retain limited data despite a deletion request where the law requires or permits it, and we will explain the basis where appropriate.

The Service may use strictly necessary software for authentication, payments, security, crash reporting and operation. Optional Plausible analytics, when enabled, counts visits without advertising cookies. We do not permit targeted or behavioural advertising directed at learners. Progress is shown to the guardian and the learner — not as a public leaderboard, cash gambling feature or sale of learner data.

We may update this policy when the Service, providers or law changes. We will show the effective date and provide prominent notice to the guardian where a change materially affects learner data or guardian choices. We will seek fresh consent where required. We will not introduce targeted advertising, cross-user content reuse, or general-purpose model training on learner questions through a policy update alone.

The Operator is Tekeya LLC. Registered office: Swastik, Mannancheriyil Villas, Chottanikara, Ernakulam, Kerala - 682312.

• General and privacy enquiries, rights requests and deletion requests: [email protected]
• Grievances, complaints and appeals: [email protected]

We will acknowledge and respond within the periods required by applicable law and will communicate the expected timing where further review is necessary.