1. Introduction

Mindarc ("we," "our," or "us") is committed to protecting the privacy of our users, especially children under the age of 18. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

We comply with India's Digital Personal Data Protection Act (DPDPA) 2023, and international best practices for children's data protection including principles from COPPA (Children's Online Privacy Protection Act).

2. Information We Collect

Account Information

Parent/guardian name, email address, and phone number
Student's first name, class/grade, and school board
Payment information (processed securely via third-party payment processors)

Learning Data

Lesson progress and completion status
Quiz responses and scores
AI tutor conversation history
Time spent on different subjects and topics
Learning preferences and adaptive path data

Technical Data

Device type, operating system, and browser version
IP address (anonymized after 30 days)
App usage analytics (crash reports, performance metrics)

3. How We Use Your Information

To provide personalized learning experiences and adaptive content
To generate progress reports for parents and teachers
To improve our AI tutor and content quality
To process payments and manage subscriptions
To send important service updates and educational content
To ensure platform safety and prevent abuse

We do NOT use student data for advertising. We do NOT sell personal data to third parties. Ever.

4. Children's Privacy

We take children's privacy extremely seriously. Our platform is designed for use by students in Classes 1-10 (approximately ages 6-16).

All student accounts require verified parental/guardian consent before activation
We collect only the minimum information necessary to provide our educational services
Students cannot share personal information publicly on our platform
There are no social features, chat rooms, or user-generated content areas
Parents can review, modify, or delete their child's data at any time through the parent dashboard
We do not serve behavioral advertising to any users, especially children

5. Data Storage & Security

All data is stored on servers located in India (AWS Mumbai/Hyderabad regions)
Data is encrypted in transit (TLS 1.3) and at rest (AES-256)
Access to student data is strictly limited to authorized personnel
We conduct regular security audits and penetration testing
Payment data is handled by PCI-DSS compliant payment processors

6. Data Sharing

We may share data only in these limited circumstances:

With schools: If your child's school uses Mindarc, teachers may see learning progress data
Service providers: Cloud hosting, payment processing, and analytics providers who are bound by strict data processing agreements
Legal requirements: When required by Indian law or valid legal process

7. Your Rights

Under the DPDPA 2023, you have the right to:

Access your personal data and your child's data
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten")
Withdraw consent for data processing
Receive your data in a portable format
Lodge a complaint with the Data Protection Board of India

8. Data Retention

We retain account data for as long as your account is active. Upon account deletion, we remove personal data within 30 days. Anonymized, aggregated learning data may be retained for research and product improvement purposes.

9. Changes to This Policy

We will notify you of any material changes to this policy via email and in-app notification at least 30 days before the changes take effect.

10. Contact Us

For any privacy-related questions or data requests, contact our Data Protection Officer:

Email: privacy@mindarc.in
Phone: +91 20 1234 5678
Address: Mindarc Pvt. Ltd., Hinjewadi Phase 1, Pune, Maharashtra 411057, India