Legal

Privacy Policy

How Edukacy collects, uses and protects your personal information when you use our website, learning app and related services.

Last updated: 5 May 2026 Effective from: 5 May 2026
A note before you read. This document describes how we genuinely handle data, but it is a starting template — please review it with a qualified lawyer before publishing. India's Digital Personal Data Protection Act (DPDP) 2023 imposes specific obligations that you should confirm against your actual data flows.

On this page

  1. Who we are
  2. What we collect
  3. How we use it
  4. Cookies & tracking
  5. Third-party services
  6. Sharing & disclosure
  7. Data retention
  8. Your rights
  9. Children & minors
  10. Data security
  11. International transfers
  12. Changes
  13. Contact & grievances

1. Who we are

This Privacy Policy applies to Edukacy ("Edukacy", "we", "us", or "our"), an e-learning brand operating from Airoli, Navi Mumbai, Maharashtra, India. It governs information you share with us through:

  • Our marketing website at edukacy.com
  • Our learning web app at app.edukacy.com
  • The Edukacy Android application
  • Email, WhatsApp and phone communication you initiate with us

By using any of the above (together, the "Services"), you acknowledge the practices described here.

2. What we collect

2.1 Information you give us

  • Account details — name, email address, mobile number, age range or class, password (stored hashed)
  • Profile preferences — subject interests, learning goals, language
  • Communications — content of messages you send us by email, WhatsApp or contact form

2.2 Information collected automatically

  • Learning activity — lessons opened, time spent, XP earned, streaks, quiz answers, bookmarks, Eduscroll interactions
  • Device & technical data — IP address (in anonymised form for analytics), browser type, operating system, device model, screen size, language, referrer URL
  • Cookies & similar technologies — see Cookies & tracking

2.3 Information from third parties

  • Sign-in providers (e.g. Google) if you choose to log in through them — limited to your name, email, and profile picture
  • Payment processors — limited to confirmation of a successful payment; we never receive full card or banking details

3. How we use it

We use your information to:

  • Create and operate your Edukacy account
  • Deliver lessons, track your progress, and award XP, streaks and badges
  • Personalise content recommendations on Eduscroll and within courses
  • Send service-related notifications (lesson reminders, account alerts)
  • Respond to your questions and support requests
  • Improve our content and product through aggregated analytics
  • Detect, prevent and address fraud, abuse, or technical issues
  • Meet our legal and tax obligations under Indian law
  • Send occasional product updates or offers — only if you have opted in, and you can opt out anytime

4. Cookies & tracking

We use a small set of cookies and similar storage:

  • Strictly necessary — session cookies that keep you signed in, preference storage for theme, language and the cookie banner itself. These cannot be disabled.
  • Analytics — Google Analytics 4 with IP anonymisation enabled, used in aggregate to understand which content is helpful. We do not use it to identify you personally.

You can clear cookies any time through your browser settings. Doing so will sign you out and reset your preferences.

5. Third-party services

We share data with carefully selected service providers strictly to deliver the Services. These include:

  • Google Analytics (Google LLC) — anonymised analytics. Google's Privacy Policy
  • Hostinger — website hosting and infrastructure
  • Supabase — backend database and authentication for the learning app
  • Razorpay or Google Play Billing — payment processing for paid subscriptions
  • Web3Forms — relays contact-form submissions to our team inbox
  • Email and messaging providers for transactional and support communication

Each provider is bound by their own privacy practices and contractual confidentiality obligations to us.

6. Sharing & disclosure

We do not sell your personal data. We disclose information only:

  • To the service providers listed above, on a need-to-know basis
  • To law enforcement or regulatory authorities when required by valid legal process
  • In connection with a merger, acquisition, or sale of assets — in which case we will notify you and you will have the opportunity to delete your data
  • To protect our rights, property, or safety, or those of our users

7. Data retention

  • Account data — retained while your account is active. After deletion, we keep minimal records for up to 12 months to handle disputes and prevent abuse.
  • Learning progress — retained alongside your account; deleted on account deletion.
  • Analytics — retained per Google Analytics 4 default settings (currently 14 months) in aggregated form.
  • Communications — retained for as long as needed to handle the matter, then archived.
  • Tax and legal records — retained as required by Indian law (typically up to 8 years).

8. Your rights

Subject to applicable law (including India's DPDP Act 2023), you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete information
  • Delete your account and associated personal data
  • Restrict or object to certain processing
  • Withdraw consent for any processing based on consent
  • Lodge a complaint with the Data Protection Board of India

To exercise any of these, email info@edukacy.com from the address linked to your account. We will respond within 30 days.

9. Children & minors

Edukacy is built primarily for school-age learners. We treat users under 18 with extra care:

  • Account holders under 13 are not permitted; we do not knowingly collect data from them. If we learn we have, we will delete it promptly.
  • Account holders aged 13–17 require verifiable parent or guardian consent. Parents may contact us at any time to review, correct, or delete their child's data.
  • We do not run targeted advertising to minors and never share their data with third-party advertisers.

10. Data security

We protect your data with industry-standard practices:

  • TLS encryption for all data in transit
  • Encrypted storage where the underlying provider supports it
  • Hashed and salted passwords — we never see or store your password in plain text
  • Role-based access controls within our team
  • Regular review of access credentials and third-party integrations

No system is 100% secure. In the unlikely event of a breach affecting your personal data, we will notify you and the appropriate authorities as required by the DPDP Act.

11. International transfers

Our infrastructure is primarily located in India. Some service providers (notably Google) may process limited data outside India under their own safeguards. By using the Services, you consent to these transfers where applicable.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. For material changes, we will notify you via in-app message or email. Continued use of the Services after a change indicates acceptance.

13. Contact & grievances

For any privacy-related question, request, or complaint:

Per Section 8(9) of the DPDP Act 2023, our designated Grievance Officer can be reached at the same email and will respond within the timeframes specified by law.