1. Who We Are

LearnSkill.io ("we", "us", "our") is an AI-powered learning platform for CBSE students and teachers, operated from India. This Privacy Policy explains what personal information we collect from you, how we use it, who we share it with, and the rights you have to control it. By using the Platform you consent to the practices described below.

2. Information We Collect

We collect only what we need to operate the learning experience. Specifically:

• Account data — your name, email, and Google profile picture, obtained via Google OAuth when you sign in.
• Profile data — your role (student/teacher), board, class, subjects, exam dates, and preferences you fill in during onboarding.
• Learning activity — chapters you open, topics completed, quiz attempts and scores, time spent, bookmarks, reminders, and notes you create.
• Voice inputs — when you talk to Aarav Sir or Suhani, your spoken audio is sent to our speech-to-text providers (currently Sarvam AI and OpenAI Whisper) for transcription. We do not store the raw audio after transcription; we keep only the resulting text turn for conversation continuity.
• Photo inputs — when you upload an image to Study Lab or Aarav's photo-doubt feature, the image is sent to AI vision providers (Anthropic Claude, Google Gemini) for analysis. Images are not stored permanently unless you save the resulting session.
• Payment data — if you subscribe, your payment is processed by Stripe / Razorpay; we receive only the transaction ID, plan, and renewal status. We never see or store your card number.
• Group Study & Broadcast Room data — when you join a study room or broadcast room, your name, avatar, and live screen-share state are visible to other participants in that room until the session ends.
• Device & usage data — IP address (for security and abuse prevention), browser type, device type, crash reports, and the URLs you visit inside the app. Standard server log data is retained for 90 days.
• Guest / no-account usage — when you use the Study Card free trial without signing up, we do not collect your name or email. We process the questions you type or speak so our AI providers can answer them, and we log a temporary device/usage signal together with your IP address solely to enforce free-trial limits and prevent abuse. This guest activity is not linked to any personal account; if you create an account later, it is not retroactively connected to your guest session.
• Cookies & local storage — we use a session cookie to keep you signed in, and local storage to cache lesson content for offline reading.

3. How We Use Your Information

• To create and operate your account.
• To personalise your roadmap, lessons, and Aarav Sir's memory of your weak topics.
• To generate AI content (essays, mock tests, voice replies, diagrams) that you explicitly request.
• To deliver reminders, exam-prep emails, and product updates (you can opt out of marketing emails at any time).
• To process payments and manage subscriptions.
• To detect fraud, abuse, and to keep the platform safe.
• To comply with legal obligations (court orders, government requests under Indian law).

We never sell your personal data to anyone, ever. We do not use your private study activity to train external AI models.

4. Third-Party Services We Share Data With

To operate the platform, certain data is sent to the third-party services listed below. Each is contractually required to process data only for the stated purpose.

• Google OAuth — for sign-in (email, name, profile picture).
• MongoDB Atlas — primary database hosting (India region).
• Sarvam AI — Indian-language speech-to-text and text-to-speech.
• OpenAI / Anthropic / Google Gemini — AI model providers for text, voice, and vision processing.
• ElevenLabs — Aarav Sir's voice synthesis (text only; we never send your voice to ElevenLabs).
• Stripe / Razorpay — payment processing.
• SendGrid / Resend — transactional emails (reminders, password resets, receipts).
• Daily.co — video calls for Group Study and Broadcast Room features.
• Cloudflare — content delivery and DDoS protection.

5. Children & Minors

LearnSkill is built primarily for CBSE Class 6–12 students, many of whom are minors, and the Study Card free trial can be used without an account. We do not knowingly collect personal data from children under 13 without verifiable parental consent — and during a guest trial we do not collect a child's name or email at all. We rely on parents and guardians to supervise younger children's use of the trial. If you are a parent or guardian and believe your child has registered or shared personal data without consent, please email support@learnskill.io and we will remove the account or data within 72 hours. Teachers using our Classroom feature are responsible for ensuring they have appropriate parental consent for their students.

6. Data Retention

We keep your account and learning data for as long as your account is active. If you delete your account (see Section 8 below), all your personal data is deleted within 30 days, except where we are legally required to retain certain records (e.g., GST invoices for paid users, retained for 7 years under Indian tax law). Server logs are retained for 90 days.

7. Security

We protect your data with industry-standard practices: HTTPS everywhere, encrypted database connections, hashed passwords (we use OAuth so we never store your Google password), session-token authentication, and least-privilege access for our own staff. No system is 100% impenetrable; if we detect a breach affecting you, we will notify you within 72 hours.

8. Your Rights — Access, Correction, Deletion

Under India's DPDP Act 2023 and GDPR (for EU visitors), you have the right to:

• Access your data — sign in and visit your profile / dashboard.
• Correct any inaccurate data — edit it in your profile, or email us.
• Delete your account and all associated data — visit /account/delete from inside the app, or email support@learnskill.io with your request. We process all deletion requests within 30 days.
• Withdraw consent at any time — by deleting your account.
• Lodge a complaint with the Data Protection Board of India.

9. Cookies

We use only essential cookies — a session cookie to keep you signed in, and local storage to cache the chapters you've opened so they load fast next time. We do not use third-party advertising cookies or behavioural tracking pixels.

10. International Data Transfers

Your data is primarily stored on servers located in India. Some AI processing happens on servers in the US (OpenAI, Anthropic, Google) — your inputs are transmitted to those services for processing and the responses are returned. We do not retain copies on those services beyond what is required for the immediate request.

11. Changes to this Policy

We may update this Privacy Policy occasionally. The "Last updated" date at the top will always reflect the current version. For material changes (anything reducing your rights), we will notify you by email at least 14 days before the change takes effect.

12. Contact Us

For any privacy question, data request, or grievance, write to support@learnskill.io. We aim to respond within 5 working days.