At Padhaieasy, we respect your privacy and are committed to protecting the personal data of our students and users. This Privacy Policy explains what personal data we collect, why we collect it, how it is processed to provide our educational services, and the rights available to you under the applicable data protection laws of India, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
Padhaieasy collects only data strictly necessary to provide an adaptive, secure, and personalized learning experience:
Account & Profile Information
Identity: Full name and email address.
Credentials: Securely salted and hashed password (via BCrypt), or linked Google identity identifier (Google subject ID and verified email).
Academic Profile: Class/grade (e.g., Classes 6–12, JEE/NEET prep), school name, and optional mobile number.
Token Balances: Educational token balances and plan subscription status.
Learning & Technical Data
Quiz & Test Attempts: Quiz submissions, selected answers, time taken per question, mock test scores, and study streak records.
Study Studio Notes: Study topics, flashcards, and chapter queries submitted to create study aids.
Technical & Security: IP address, browser user-agent, device type, login timestamps, and Cloudflare Turnstile challenge tokens.
Communications: Inquiries, feedback, and support messages sent to us.
Padhaieasy processes personal data solely for specified educational, technical, and operational purposes:
Delivering Educational Services: Generating personalized practice quizzes, chapter-wise mock tests, and tracking your academic progress across NCERT and competitive exam topics.
Account Management & Authentication: Verifying your identity during signup/login via secure email OTP or Google OAuth, managing token credits, and maintaining your session.
Performance Insights: Computing subject-wise strengths, weak areas, speed analytics, and study streak insights to help you improve.
Security & Abuse Prevention: Verifying human users via Cloudflare Turnstile, preventing automated brute force, enforcing rate limits, and securing user accounts.
Essential Notifications: Sending transactional emails such as signup OTPs, password reset codes, and important account notices.
Padhaieasy incorporates artificial intelligence (AI) to generate educational practice materials:
How AI Is Used: When you request a quiz or study notes, the requested subject, topic, grade level, and study prompts are transmitted to secure AI model providers to generate questions, answer keys, and explanations.
No Personal Profile Transmission: We do not send your personal identity details (such as your password, email, or contact number) to AI model APIs. Only the curriculum parameters and learning prompts necessary to generate educational content are transmitted.
No Model Training on Personal Data: Student personal data is not sold or used to train third-party public AI foundation models.
We do NOT sell, rent, or trade your personal data to advertisers or commercial brokers. We engage select, trusted service providers solely to operate our educational platform:
Cloudflare Turnstile:
Provides privacy-preserving human verification on registration and login to defend against automated bot attacks without tracking user identity.
Google Identity Services:
Used if you choose to register or log in with Google, facilitating secure authentication via Google OAuth.
Transactional Email Providers:
Delivers critical verification OTPs, password reset emails, and platform notices.
AI Infrastructure Providers:
Secure cloud-hosted generative AI models that generate educational quiz questions and notes based on non-personal curriculum parameters.
Padhaieasy is designed for school and competitive exam students, including minors:
Parental / Guardian Consent: Where a student is a minor under applicable law (under eighteen years of age), an account must be registered with the verifiable consent or supervision of a parent or legal guardian.
Purpose-Bound Processing: We do not engage in targeted behavioral advertising, tracking, or profiling of minors for commercial gain.
Parental Inquiries: A parent or guardian who wishes to review, modify, or request deletion of their child's personal data may contact our Grievance Officer at any time.
Security Measures
We employ industry-standard technical and organizational security measures, including HTTPS/TLS encryption in transit, one-way cryptographic password hashing (BCrypt), session fixation safeguards, rate limiting, and restricted database access.
Data Retention
We retain personal data and learning history for as long as your account remains active so that you can view past quiz attempts, token history, and study progress. If you request account deletion or if an account remains inactive for an extended period, personal data will be erased or anonymized in accordance with applicable retention guidelines.
Under applicable data protection laws, you (or your parent/guardian) have the following rights regarding your personal data:
Right to Access:
Request a summary of personal data being processed and the processing activities undertaken.
Right to Correction:
Request correction, completion, or updating of inaccurate or outdated personal data.
Right to Erasure / Deletion:
Request the erasure of your personal data and account when no longer necessary.
Right to Withdraw Consent:
You may withdraw your consent for personal data processing at any time by contacting us; note that withdrawal will require closing your account as personal data is essential to deliver personalized services.
Right to Nominate & Grievance Redressal:
Under the DPDP Act, you have the right to nominate another individual to exercise your rights in the event of death or incapacity, and the right to register a grievance with our Grievance Officer.
