What we collect

• Student name, email, class level, and encrypted password.
• Guardian name, guardian email, relationship, consent timestamp, notice version, and self-attestation status.
• Learning activity such as chapter opens, lesson completion, quiz scores and selected answers, structured practice scores, hints used, missed marking-point ids, retry dates, streaks, and badges.
• Feedback submitted by the student and technical logs needed to keep the service secure and working.

Written-practice answer text and guided-practice draft text stay in the student's browser and are not sent to the account database. Only structured self-check evidence is saved. The pilot does not ask for a school name, government identity number, payment details, or a public student profile.

Why we use it

• Create and protect the student account.
• Save learning progress and return the student to useful work.
• Find confusing lessons, broken flows, and weak quiz topics.
• Review the pilot before access is widened.

We do not sell student data, run targeted advertising, or create public rankings from pilot activity.

Guardian permission

A parent or lawful guardian must complete the permission section during registration. The MVP stores a self-attestation and the notice version accepted. It does not verify identity or age through DigiLocker, Aadhaar, or another government identity source.

This flow supports a small supervised pilot. It must not be described as full legal verification, and it should receive a compliance review before unrestricted public onboarding.

Service providers and retention

The web apps and API are hosted on Vercel. Account and progress records are stored in PostgreSQL through Supabase. Bunny Stream may deliver lesson video. These providers process technical request data as needed to deliver their part of the service.

Pilot records are kept while the account is active and while they are needed to review the pilot, secure the service, or meet an applicable record-keeping requirement. A student or guardian may ask for correction, consent withdrawal, or account deletion.