This Privacy Policy explains how E-Vidya Academy collects, uses, stores, shares, and protects personal data in connection with the Service, in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 and Rules made thereunder.

1. Data We Collect

1. From Subscribers (parents/guardians): name, mobile number, and UPI transaction reference for payment verification.
2. From students (via the registration/roll-number flow): student's name, class, and mobile number, and usage data (which classes/subjects accessed, quiz scores, certificate generated).
3. From agents: full name, shop/business name, business address, mobile number, and, in relation to persons they refer, the referred student's name, class, and phone number.
4. Technical data: IP address, device/browser type, and similar diagnostic data collected automatically for security and reliability purposes.

2. How We Use Data

To create and operate accounts, generate roll numbers, deliver classroom content, process and verify payments, calculate and pay agent commissions, respond to queries/complaints, and maintain records required for accounting and tax compliance. We do not use children's personal data for behavioural advertising, cross-site tracking, or any purpose unrelated to delivering the Service.

3. Consent, Including for Children's Data

Because part of the data we process relates to a school-going child, we process such data only on the basis of the verifiable consent of the child's parent or lawful guardian, given at the point of registration. Consent may be withdrawn at any time by contacting us, though this will mean the student's access to the Service ends.

4. Sharing of Data

1. We share personal data with: (a) Google Firebase/Firestore, our cloud database and hosting provider; (b) UPI payment applications, to process your payment (we do not store your UPI PIN or full payment credentials); (c) internal administrative notification tools, used only to notify the proprietor of new registrations.
2. We do not sell personal data to third parties. We may disclose data where required by law, court order, or a lawful request from a government authority.
3. Some service providers (such as Google Firebase) may process or store data on servers located outside India. By using the Service, you acknowledge this cross-border processing, carried out only for the purposes described in this Policy.

5. Data Retention

We retain personal data for as long as the relevant account is active, and thereafter for a period reasonably necessary for accounting, tax, and legal-compliance purposes, or until you request deletion and no legal ground requires further retention.

6. Data Security

We apply reasonable technical and organisational safeguards, including encrypted transmission (HTTPS) and access-restricted database rules, to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

You may request access to, correction of, or erasure of personal data relating to you or the student you registered, and may withdraw consent, by writing to the contact details below.

8. Cookies & Analytics

Our website may use minimal cookies or local storage strictly necessary for the Service to function. We do not currently use third-party advertising cookies.

9. Changes to this Policy

We may update this Privacy Policy from time to time; the updated version will be posted here with a revised "Last Updated" date.

10. Grievance Officer / Contact