Privacy Policy

Effective: 1 May 2026 · DPDP Act 2023 compliant · Plain-English summaries below

1. What data we collect

• About the parent: name, email, WhatsApp number — used for login, billing, class reminders, progress updates.
• About the child: name, class/grade, AI assessment score, learning gaps, classes attended, project submissions, quiz scores. We do not collect government IDs, addresses, or photos unless you upload them yourself.
• Technical: IP address, browser type, page visits — used for security and to fix bugs.
• Optional: child profile photo (only if you upload one); demo/project media (only if shared via WhatsApp during a project submission).

2. How we use it

• To run the learning programme: schedule classes, track progress, deliver certificates.
• To communicate with parents: weekly progress, billing reminders, programme announcements.
• To improve the curriculum: aggregate quiz patterns to find lessons that need updates.
• For security and fraud prevention.

We do NOT use your data for advertising, sell it to third parties, or share it with anyone outside our service providers (Razorpay for payments, Bunny.net for video hosting, Gmail for email).

3. Children's data — DPDP-specific safeguards

Under India's Digital Personal Data Protection Act, 2023:

• We treat all children's data with extra care. Verifiable parental consent is the legal basis for processing.
• We do not run behavioural advertising to children.
• We do not track children's physical location.
• Aggregate, anonymised analytics may be used (e.g. "12% of Class 7 students struggled with Module 3 quiz"), but never individually identifying.

4. Cookies + storage

We use minimal browser storage:

• JWT login tokens in localStorage — keeps parents/students logged in without re-entering credentials.
• Meta Pixel for conversion tracking on landing pages (parent-side only, not in student portals).
• No third-party advertising cookies.

5. Your rights

As a Data Principal under DPDP, you can:

• Access all data we hold about you and your child — email us and we'll send it within 7 days.
• Correct any inaccurate information.
• Delete your account and all associated data — we'll fully remove it within 30 days, retaining only what we're legally required to keep (e.g. payment records for tax compliance).
• Withdraw consent at any time — same effect as account deletion.
• Take your data with you — request a portable export (JSON/CSV).
• Lodge a complaint with the Data Protection Board of India if we don't address your concern within 30 days.

6. Where data lives

Our servers are located in India (Hostinger + VPS). Some processing happens via Razorpay (payments), Gmail (transactional email), and Bunny.net (video CDN — global, with India edge nodes). All providers are bound by their own DPDP/GDPR-grade commitments.

7. Security

• All data transmitted is encrypted in transit (HTTPS).
• Passwords are hashed (SHA-256) — we cannot see them in plain text.
• Payment processing is fully delegated to Razorpay; we never store card data.
• Daily database backups; access restricted to authorised staff.

8. Data retention

• Active accounts: we keep data while you're enrolled.
• After cancellation: 90 days, then permanent deletion (except payment records — kept 7 years for Indian tax compliance).
• Class recordings: retained 1 year, then archived.

9. Changes to this policy

If we make material changes, we'll email all parents at least 14 days in advance. The "Effective date" at the top will be updated.

10. Contact us

For any privacy-related question or to exercise your rights:
Email: connect@wisetribes.in
WhatsApp: +91 91750 66296

Last updated: 1 May 2026 · See also Terms of Service