Privacy Policy

Last updated: December 26, 2024

1. Introduction

Welcome to NayiPathshala. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered educational platform.

By using NayiPathshala, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you create an account using Google OAuth, we collect:

  • Google Profile Information: Name, email address, and profile picture
  • User ID: A unique identifier assigned to your account
  • Role Information: Whether you're a student, teacher, or administrator

2.2 Educational Data

As you use our platform, we collect:

  • Quiz Data: AI-generated questions based on your preferences, answers submitted, scores, and performance metrics
  • User Responses: Your quiz answers, selected preferences, and interaction data with pre-curated content
  • Learning Progress: Topics studied, lesson plans viewed, time spent, and completion rates
  • Teacher Data: Subjects taught, grade levels assigned, student analytics accessed, and curriculum preferences
  • Profile Information: For students - grade level, exam type preferences, and selected learning profiles

2.3 Usage Information

We automatically collect certain information about your device and how you interact with our platform:

  • Device Information: Browser type, operating system, device type
  • Log Data: IP address, access times, pages viewed, and actions taken
  • Analytics Data: Feature usage patterns, click data, and session information
  • Performance Data: Load times, errors encountered, and system performance

2.4 Cookies and Similar Technologies

We use cookies and similar tracking technologies to track activity and store certain information. You can instruct your browser to refuse cookies or indicate when a cookie is being sent.

3. How We Use Your Information

We use the collected information for various purposes:

3.1 Service Delivery

  • Provide, operate, and maintain our educational platform
  • Process your requests and transactions
  • Manage your account and provide customer support
  • Enable teachers to access student analytics and manage class oversight
  • Track student progress and generate performance analytics

3.2 AI-Powered Features

  • Generate personalized quiz questions based on student preferences and curriculum
  • Provide AI-powered feedback on quiz performance
  • Pre-generate and curate curriculum-aligned lesson plans using Claude Haiku
  • Recommend educational resources and learning paths

3.3 Platform Improvement

  • Analyze usage patterns to improve our services
  • Develop new features and functionality
  • Monitor and analyze platform performance
  • Conduct research and development

3.4 Communication

  • Send you technical notices and updates
  • Provide customer support and respond to inquiries
  • Send educational content and platform announcements
  • Notify you of important changes to our services

3.5 Security and Compliance

  • Detect, prevent, and address technical issues
  • Protect against fraud, abuse, and unauthorized access
  • Comply with legal obligations and enforce our Terms of Service

4. How We Share Your Information

4.1 Third-Party Service Providers

We share limited information with trusted third-party providers who assist us in operating our platform:

  • OpenAI: Quiz content and prompts are sent to OpenAI's API for AI-generated feedback and content creation. OpenAI processes this data according to their privacy policy.
  • Google Cloud Services: For authentication via Google OAuth and cloud infrastructure
  • Amazon Web Services (AWS): For secure file storage using AWS S3
  • MongoDB Atlas: For database hosting and management
  • Analytics Providers: For platform usage analytics and performance monitoring

4.2 Educational Context

  • Teachers and Administrators: May access student progress data within their assigned classes
  • School Organizations: If using institutional accounts, relevant academic data may be shared with authorized school administrators

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

4.4 Business Transfers

If NayiPathshala is involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

4.5 What We DON'T Do

  • We DO NOT sell your personal data to third parties
  • We DO NOT share your data for advertising purposes
  • We DO NOT use your educational content for purposes other than providing our services

5. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption: All data is encrypted in transit using HTTPS/TLS and at rest using AES-256
  • Access Controls: Role-based access controls limit who can view your data
  • Authentication: Secure authentication via Google OAuth 2.0
  • Monitoring: Continuous monitoring for security threats and vulnerabilities
  • Regular Audits: Periodic security assessments and penetration testing
  • Data Backups: Regular backups to prevent data loss

Note: While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

  • Account Data: Retained while your account is active
  • Quiz and Learning Data: Retained for educational continuity and progress tracking
  • Log Data: Typically retained for 90 days for security and debugging purposes
  • Deleted Account Data: Most data is deleted within 30 days of account deletion, though some data may be retained for legal compliance

7. Your Privacy Rights

You have the following rights regarding your personal information:

7.1 Access and Portability

  • Request a copy of your personal data
  • Export your educational content and progress data

7.2 Correction and Updates

  • Update your profile information at any time
  • Request correction of inaccurate data

7.3 Deletion

  • Request deletion of your account and personal data
  • Contact us at [email protected] to initiate deletion

7.4 Withdraw Consent

  • Opt out of non-essential communications
  • Disable cookies through browser settings

7.5 Object to Processing

  • Object to certain types of data processing
  • Request restriction of processing in certain circumstances

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Children's Privacy

Our platform is designed for users aged 13 and above. We do not knowingly collect personal information from children under 13 without parental consent.

If you are a parent or guardian and believe your child has provided us with personal information without consent, please contact us immediately. We will delete such information from our servers.

For users between 13-18, we recommend usage under the supervision of parents, guardians, or teachers.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country, where data protection laws may differ. By using our platform, you consent to such transfers.

We ensure appropriate safeguards are in place when transferring data internationally, in compliance with applicable data protection laws.

10. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

11. AI and Automated Decision Making

We use AI technology powered by Claude (Anthropic's Haiku model) and OpenAI for:

  • Generating quiz questions based on student preferences
  • Providing personalized feedback on quiz performance
  • Pre-generating curated lesson plans and educational content
  • Analyzing quiz performance and learning patterns

These AI-powered features are designed to enhance your learning experience. The AI-generated content is provided as-is and users should verify accuracy before relying on it for important educational decisions. All lesson plans are pre-generated by our system using AI and are not customizable by individual users.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

  • Notify affected users within 72 hours of discovering the breach
  • Inform relevant authorities as required by law
  • Take immediate steps to mitigate the impact
  • Provide guidance on protective measures you can take

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

We will notify you of any material changes by:

  • Posting the updated policy on this page with a new "Last Updated" date
  • Sending an email notification to registered users
  • Displaying a prominent notice on our platform

Continued use of NayiPathshala after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email:[email protected]
Platform: NayiPathshala - AI Teaching Platform
Response Time: We aim to respond to all privacy inquiries within 3-5 business days

15. Compliance and Certifications

NayiPathshala is committed to compliance with:

  • Information Technology Act, 2000 (India)
  • Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
  • General principles of data protection and privacy best practices