Privacy Policy

The data we collect

• Account & profile: name, email, password (stored only as a hash), optional mobile number, date of birth, user type, and your study/work details (e.g. board and class, or program, or role and industry).
• Parent/guardian (for minors): the parent/guardian’s name, contact details, and relationship, captured to obtain and record consent.
• Learning activity: enrolments, attendance, assignment submissions, quiz attempts, grades, and lesson progress.
• Payments: fee and payment status for paid courses. Payments are processed by our payment provider — we do not store card details.
• Security & technical: limited logs and IP address used for rate-limiting, abuse prevention, and an internal audit trail of administrative actions.

Why we collect it (purpose limitation)

We use personal data only to deliver courses and content; manage enrolment, scheduling, and assessments; process payments and invoices; and maintain security, prevent fraud, and meet legal obligations. We practise data minimisation — we ask only for what a given purpose needs.

Children’s data & parental consent

Anyone under 18 is treated as a child under the DPDP Act. Because Edulynt serves minors, children’s data is handled with particular care:

• At sign-up (for both email/password and Google), we collect date of birth and user type and classify each account as child or adult.
• A child’s account is held in a restricted, pre-activation state — it cannot enrol in courses or undergo non-essential data processing — until verifiable parental/guardian consent is obtained, except where a clear statutory exemption applies.
• We record the consent status, method, timestamp, and the version of this Policy and the Terms that were agreed to.
• We do not carry out tracking, behavioural monitoring, profiling, or targeted advertising directed at children, beyond what is strictly necessary for security or core service delivery.
• We avoid processing likely to have a detrimental effect on a child’s well-being, even where consent exists.

Parents/guardians act as data principals for their children and may exercise the rights below on the child’s behalf.

How long we keep data (retention)

We keep personal data only as long as needed for the purpose it was collected, or as required by law (for example, tax and accounting records for payments). When a retention period ends, data is securely deleted or irreversibly anonymised unless longer retention is legally required.

Your rights

You — or a parent/guardian for a child’s account — may request access to, correction of, or deletion of personal data, and may withdraw consent, subject to legal retention limits. To make a request or raise a grievance, contact our grievance channel below; we will respond within a reasonable time.

Sharing & third-party providers

We share personal data with service providers only where needed to run Edulynt — for example hosting, database, transactional email, and payment processing. Providers are permitted to use the data only to provide their service to us and are expected to protect it.

Cross-border transfers

Some of our infrastructure or vendors may be located outside India, which can involve transferring personal data abroad. Where that happens, we will handle such transfers in line with the DPDP Act’s rules on cross-border transfers and any government restrictions in force.

Security

We use reasonable technical and organisational measures, with heightened safeguards for children: encrypted (HTTPS) connections, hashed passwords and secure cookies, environment-based secrets, automated dependency and secret scanning, an administrative audit trail, and regular database backups. No system is perfectly secure, but we work to protect your information and to improve these controls over time.

Data Fiduciary & grievance contact

Edulynt is the Data Fiduciary. Edulynt’s Founder currently serves as the Data Protection Lead and handles privacy requests and grievances. Contact: grievance@edulynt.com.

Changes to this policy

We may update this Policy. Material changes will be communicated through the platform and the version above will change; where required, we will ask you (or a parent for a child’s account) to review and accept the update.