Privacy Policy

Last updated: 28 July 2026

Pedagiq (“Pedagiq”, “we”, “us”, “our”) operates the website and application at pedagiq.com (the “Service”). We are committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use and share it, and the rights and choices you have. It is designed to be consistent with India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and other applicable data-protection laws. For the purposes of the DPDP Act, Pedagiq is the Data Fiduciary and you are the Data Principal.

By using the Service you agree to this Policy. If you do not agree, please do not use the Service.

1. Who this policy applies to

The Service is used by three types of users — teachers, students (including school and coaching-institute students), and institution administrators — as well as visitors to our website. This Policy applies to all of them.

2. Information we collect

• Account & profile data: your name and email address, and — where you choose to provide it — phone/WhatsApp number, school or institution, city, PIN code, role or designation, and, for students, class, board or exam goal, section and stream.
• Learning content & usage data: quizzes and sessions you create or join, the answers you submit, scores, response times, practice sessions, study notes, revision activity, progress over time, and AI tutoring interactions.
• Subscription & payment data: your plan, trial and subscription status, and payment reference IDs. Card, UPI and bank details are collected and processed directly by our payment gateway (Razorpay) — we do not store your full payment-instrument details on our servers.
• Technical & log data: IP address, device and browser type, pages viewed and similar diagnostic data, collected through cookies and similar technologies.
• Sign-in provider data: if you sign in with Google, we receive your name and email address from Google.

Students who join a live class as a guest may take part using only a name and a class code, without creating an account.

3. How we use your information

• To provide, operate and maintain the Service, including generating AI quizzes, teaching guides, tutoring explanations, study notes, misconception analysis, lesson plans, progress reports and analytics.
• To create and manage your account, authenticate you, and (for teachers and institutions) manage subscriptions and process payments.
• To show teachers the results of their own sessions, and to show institution administrators the performance of their own teachers.
• To communicate with you about your account, updates and support.
• To maintain the security and integrity of the Service and prevent misuse.
• To comply with our legal obligations.

4. Legal basis and consent

We process personal data on the basis of your consent and for the legitimate uses permitted under the DPDP Act (such as providing a service you have requested). Where we rely on consent, you may withdraw it at any time by contacting us (see “Contact and grievances” below) or by deleting your account. Withdrawing consent may mean we can no longer provide some or all of the Service.

5. Children’s and students’ data

Protecting children matters to us. Many students who use the Service are children (under 18).

• Where a student account is created for a child, it must be done with the consent of a parent or lawful guardian. Teachers and institutions that enrol or invite students confirm that they have obtained the necessary consents from students and, where required, their parents or guardians.
• We do not knowingly use children’s personal data for targeted advertising, and we do not carry out tracking or behavioural monitoring of children beyond what is necessary to provide the educational Service.
• If you believe a child has provided us personal data without appropriate consent, please contact us and we will delete it.

6. AI features and your content

Core features of the Service are powered by artificial intelligence. To generate quizzes, tutoring explanations, study notes, analyses and reports, relevant content (such as topics, questions and the answers a student submits) is processed by our AI provider. Our AI provider processes this content only to return results to us and, under its API terms, does not use it to train its models. We do not sell your content or use it for advertising.

7. How we share your information

We do not sell your personal data. We share it only as follows:

• Service providers (processors): we use trusted providers to run the Service, including Supabase (database, authentication and storage), Vercel (application hosting), Razorpay (payments), our AI provider (AI features), Google (optional sign-in) and an email provider (transactional emails). They process data on our behalf under contractual safeguards.
• Within your organisation: teachers can see the data of students who take part in their sessions; institution administrators can see the performance and activity of teachers who belong to their institution. Access is limited by role.
• Legal & safety: we may disclose data where required by law, regulation or valid legal process, or to protect the rights, safety and security of our users and the Service.
• Business transfers: if Pedagiq is involved in a merger, acquisition or asset sale, data may be transferred as part of that transaction, subject to this Policy.

8. Cookies and analytics

We use cookies and similar technologies that are strictly necessary to sign you in, keep you signed in and remember your preferences. We also use analytics tools (such as Google Tag Manager and Google Analytics) to understand how the Service is used and to improve it. We do not use advertising cookies to target children.

9. Data retention

We retain personal data for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes and enforce our agreements. When you delete your account, or on a valid erasure request, we will delete or anonymise your personal data unless we are required to retain it by law.

10. Data security

We take reasonable technical and organisational measures to protect your personal data, including encryption in transit, database-level access controls (row-level security) that keep each user’s data separated, and secure authentication. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authority of a personal-data breach as required by law.

11. Where your data is stored

Our primary databases are hosted in India (the Mumbai / ap-south-1 region). Some of our service providers may process limited data on servers located outside India. Where personal data is transferred outside India, we take steps to ensure it remains protected in line with applicable law.

12. Your rights

Subject to applicable law, you have the right to:

• access a summary of the personal data we hold about you and how we process it;
• request correction or updating of inaccurate or incomplete data;
• request erasure of your personal data;
• withdraw consent you previously gave;
• nominate another person to exercise your rights in the event of death or incapacity; and
• raise a grievance about our handling of your data.

To exercise any of these rights, contact us using the details below. You also have the right to complain to the Data Protection Board of India.

13. Third-party links

The Service may contain links to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we encourage you to read their privacy policies.

14. Changes to this policy

We may update this Policy from time to time. When we do, we will change the “Last updated” date above and, for significant changes, provide a more prominent notice. Your continued use of the Service after an update means you accept the revised Policy.

15. Contact and grievances

If you have questions about this Policy or wish to exercise your rights, contact our Grievance Officer:

Grievance Officer, Pedagiq
Email: privacy@pedagiq.com

We will acknowledge and respond to your request within the timelines required by applicable law.