Privacy Policy

myedubuddy is run by Anveshak Technology & Knowledge Solutions (“we”, “us”). We decide how and why your personal data is used on myedubuddy, which makes us the “data fiduciary” under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”).

This policy covers the myedubuddy website, the student dashboard, classrooms and the pages teachers use, and the myedubuddy Android app. It should be read together with our Terms of Use.

When you create an account

• Full name, email address and mobile number.
• The date and time you ticked the box agreeing to the Terms of Use and this policy, and which version of them you agreed to.
• Your password. We only ever store a scrambled version of it (an argon2 hash), so nobody at myedubuddy can see what it is.

If you choose to complete your profile

• Date of birth, class or standard, school or college, city and state.

These profile fields are optional. You can add, change or clear them at any time on your Profile page.

When you use the Service

• The test series you enrol in.
• Your test attempts: when you started and submitted, each answer you chose, questions you marked for review, and how long you spent on each question.
• Your results: score, correct and incorrect answers, accuracy and, where calculated, rank and percentile.
• Notifications we send you and whether you've read them.

If your coaching class adds you to a classroom

• Your name, email address and (if they give it) mobile number, which your teacher enters to create your account. You then choose your own password the first time you log in.
• Which classroom and batch you belong to, and when you were added.
• What you hand in for homework: photos or PDFs of your work and any note to your teacher. Photos are stored without the location and camera details a phone adds to a picture.
• Your answers and score in quizzes your teacher sets.
• Messages you write and reactions you leave on what your teacher shares.

Teachers also add content of their own: homework, notes, posts with photos or links, quizzes and calendar dates. A teacher who shares a photo that shows students is responsible for having permission to do so.

If your teacher switches on strict test mode

A teacher can switch on strict test mode for a batch. While it is on, and only during a test, we record each time you:

• leave the test screen (another tab, window or app), leave full screen, or unlock the screen in the app;
• try to copy, paste, print or save the test;
• open the same test in a second window or on a second device.

We record what happened and when, nothing more. Strict mode does not use your camera or microphone, does not record your screen or what you type, and does not look at your other apps, tabs or files. You are told before the test starts, and each time something is recorded.

When you buy a paid test series

• The amount, the series you bought, the payment status and the payment partner's reference number.
• Your card, UPI or bank details are entered on our payment partner's secure page (currently Razorpay). We never receive or store them.

When you contact us

• The content of your emails and any details you choose to include.

Visit statistics

To see how the website is used, we count page visits. For each page opened we keep the kind of page (for example “Test series”), the day, the website you came from, whether it was a phone, tablet or computer, and whether you were logged in. We do not keep your name, your account or your IP address with a visit, and we set no cookie for this.

To count visitors rather than page views, each visit carries a code worked out from the day, your IP address and your browser type. It is the same for you during one day and different the next, and it cannot be turned back into your IP address, so it cannot be used to follow you over time. If your browser is set to “Do Not Track” or “Global Privacy Control”, your visits are not counted at all.

If you give us a testimonial

• Your name, a short description such as “Parent of a Std 6 student”, your words and, if you give us one, a photo. These are shown publicly on our website, only with your permission (and a parent or guardian's permission for a student under 18). Ask us at any time and we will take it down.

Technical information

• Like most websites, our servers and hosting providers automatically record basic technical details, such as your IP address, browser type and the time of each request. We use these only for security and fixing problems.

We use your information only to:

• create and secure your account, and let you sign in;
• run your tests, save your answers, keep time and calculate your results;
• show your performance analytics, such as subject-wise accuracy and trends over time;
• send account emails, such as password reset links, and notifications about your tests;
• run classrooms: let your teachers share work with your batch, see what you hand in and how you are doing, and tell you and them when something new is shared or answered;
• show your teachers what strict test mode recorded during a test, where they have switched it on;
• count visits to the website, so we know which pages are useful;
• process payments and refunds for paid series;
• answer your questions and handle complaints;
• improve our questions and tests using combined, anonymised statistics (for example, what share of students got a question right);
• prevent cheating, fraud and misuse, and meet our legal obligations.

We do not sell your personal data, and we do not show advertising. We don't use your data to build advertising profiles.

Where a test shows a rank or percentile, it's worked out by comparing your score with other students' scores on the same test. Other students see only their own position. They don't see your name, score or answers.

In a classroom, the students of your batch and its teachers can see your name next to the messages you write and count your reactions. They cannot see your homework, your quiz scores or your test results; only your teachers can.

We process your personal data with your consent, which you give when you register (or, for a student under 18, which their parent or guardian gives). You give it by ticking the box on the sign-up form. If a coaching class created your account, the class is responsible for having your consent (or your parent or guardian's) before adding you. We also process it where the DPDP Act allows it without consent, for example to comply with the law. You can withdraw consent at any time (see Your rights and choices). If you do, we'll stop processing your data and close your account, because we can't run tests or results without it.

Many of our students are under 18, and the DPDP Act treats anyone under 18 as a child. For these students:

• a parent or legal guardian must give consent for the child to use myedubuddy before the account is used. We may contact the parent or guardian to confirm this;
• we collect only what's needed to run tests and show results, and we never use a child's data for advertising, targeted marketing or behavioural tracking;
• a coaching class that adds a child to a classroom must have the parent or guardian's consent first, and should tell them if it uses strict test mode;
• the parent or guardian can use all the rights in Your rights and choices for the child: they can see what we hold, correct it, withdraw consent or ask us to delete the account.

If you believe a child is using myedubuddy without a parent or guardian's consent, contact admin@myedubuddy.com and we'll act on it promptly.

We use one essential cookie. It keeps you signed in and lasts up to 30 days. It can't be read by the web page's scripts, and it's only sent to our sign-in service. It's cleared when you log out or reset your password.

We don't use analytics, advertising or social-media tracking cookies. If we ever add any, we'll update this policy and ask for your consent first where required.

We count visits to the website without any cookie (see Visit statistics). Your browser also remembers one display choice for you, how many rows a list shows, in its own storage; it is never sent to us.

We share personal data only in these cases:

• Our staff: authorised myedubuddy administrators can see student profiles, enrolments and results to run the platform and help students. Their access is limited by role, and their changes are logged.
• Your teachers, if you are in a classroom: the teachers of your batch can see your name, email address and mobile number, the tests of the batch's series that you took after joining and your answers to them, your homework and quiz scores, your messages, and what strict test mode recorded. They can give you a new temporary password only if the classroom created your account. Their changes are logged.
• Your batch: students of your batch see your name on the messages you write there.
• Service providers who process data on our behalf and under our instructions:
  • website and database hosting;
  • file storage for question images and for the photos and PDFs shared in classrooms;
  • email delivery, for password resets and notifications;
  • error monitoring (currently Sentry), which receives technical details when something breaks, linked to an internal account number only, never your name, email or answers;
  • our payment partner (currently Razorpay), for paid series.
• Legal reasons: when required by law, a court order or a government authority, or to protect the rights and safety of our users or the public.
• Business changes: if myedubuddy is merged, sold or reorganised, your data may move to the new operator, who must keep protecting it under this policy.

Your data is stored in India (AWS Mumbai region). If a service provider processes it outside India, we'll do so only as the DPDP Act allows.

Our safeguards include:

• encrypted connections (HTTPS) between your browser and our servers;
• passwords stored only as one-way argon2 hashes;
• sign-in and password-reset tokens stored only in hashed form;
• password reset links that work once and expire after 30 minutes. Resetting your password signs you out on every device;
• role-based access for staff, and audit logs of administrative changes.

No system is completely secure. If a personal data breach happens, we'll inform affected users and the Data Protection Board of India as the law requires.

• We keep your account and test history for as long as your account is open.
• If you ask us to delete your account, or withdraw consent, we delete your personal data within 30 days.
• We keep payment records for as long as tax and accounting laws require (usually 8 years), even after your account is deleted.
• Classroom posts, with their files, messages and the work handed in for them, are deleted when the teacher deletes the post. What strict test mode recorded is kept with the test it belongs to.
• Visit statistics are deleted after 400 days.
• We may keep anonymised, combined statistics (for example, how many students answered a question correctly). These can't identify you.

Under the DPDP Act, you (or your parent or guardian, if you are under 18) can:

• Access a summary of the personal data we hold about you and how we use it.
• Correct or update your details. You can edit most of them yourself on your Profile page.
• Erase your data, by asking us to delete your account.
• Withdraw consent at any time. It's as easy as giving it: just email us.
• Nominate someone to use these rights for you if you die or become unable to.
• Raise a grievance with us, and then with the Data Protection Board of India if you're not satisfied with our answer.

To use any of these rights, email admin@myedubuddy.com from the email address on your account. We may ask you to confirm your identity. We'll respond within 30 days.

These rights are set out in Chapter III (sections 11 to 14) of the DPDP Act. You can read the official text of the Act in the Gazette of India (opens a PDF in a new tab).

We'll update this policy when our practices change. The date at the top shows the latest version. If a change significantly affects how we use your data, we'll tell you by email or on the website before it takes effect, and ask for your consent again where the law requires.

For privacy questions or requests, email admin@myedubuddy.com or message us on WhatsApp at +91 82083 28061. Requests about your data must come from, or be confirmed from, the email address on your account.

Grievance Officer: Shashank Thakur, Grievance Officer, Anveshak Technology & Knowledge Solutions. Email admin@myedubuddy.com or message on WhatsApp at +91 82083 28061.

The Grievance Officer handles complaints about something another person shared on myedubuddy (a classroom post, a photo, a message), about how we handle your personal data or your child's, about your account, a test or a result, and about anything in these documents.

How to raise a grievance. Write to the Grievance Officer with:

• your name, and the email address on your account (or your child's account);
• what it is about: the page, post, test or message, with a link or a screenshot if you can;
• what went wrong, and what you would like us to do.

What happens next.

• We acknowledge your complaint within 24 hours.
• We aim to resolve it within 15 days, and tell you what we did and why.
• Content that shows a person in a sexual or intimate way, or that impersonates someone, is removed or blocked within 24 hours of the complaint.
• Before acting on anything about an account or personal data, we may ask you to confirm who you are.

If you are not satisfied. For a complaint about your personal data, once you have raised it with us you can take it to the Data Protection Board of India. For anything else, see the dispute terms in our Terms of Use.