Privacy Policy
Last updated: 27 October 2026
This is the working policy we operate by. For how to reach us, the business address and contact details on the Contact page are the source of truth.
1. Who we are
Adhyay is operated by Tech Mandalae, a proprietorship, Phase-2, Akashdeep Enclave, Roorkee, Uttarakhand, 247667, India. For the personal data described here, Tech Mandalae decides how and why it is used. This policy is written with the Digital Personal Data Protection Act, 2023 and the IT Rules in mind. Contact: support@techmandalae.com, +91 9520666861.
2. Information We Collect
- Account details: name, email address (or a school-issued login), password (stored as a hash), role, school and class, and optionally a phone number, city and school details.
- Student information entered by a school, a teacher, a parent or the student: name, class, section, student ID, results and practice history.
- Work you create: exams, answers, practice papers, uploaded handwritten answer sheets, notes and project files.
- Payment records: the plan or top-up, amount, Razorpay order and payment IDs and status. We do not receive card numbers.
- Messages and announcements sent between parents, teachers and school administrators.
- Technical data: IP address, browser and device type, pages and features used, and error reports.
Profile details: if you add your school, city or contact details to your profile, we use them to personalise your experience and to understand where and how Adhyay is used. These fields are optional and you can edit or remove them at any time. We do not collect precise location.
Website enquiries: if you submit an enquiry form on our website, we collect your name, phone number or email, your role, optionally your class and message, and a record of your consent. We use these details only to respond to your enquiry and keep them until the enquiry is closed and no longer needed.
3. How We Use Your Information
- To provide the service: sign-in, generating papers, evaluating answers, tracking progress, showing results to the right people.
- To take payments and manage plans, and to keep payment records for accounting.
- To send account notices, codes, receipts and reports.
- To keep the service secure, prevent fraud and fix errors.
- To meet legal obligations.
We do not show advertising in Adhyay, we do not use advertising or analytics trackers, and we do not sell personal data. We do not use your content to train AI models.
4. Who receives your data
We use the outside services below to run Adhyay. Each one receives only what it needs for the purpose shown. We share data with authorities only where the law requires it.
| Service | Used for | What it receives | Where |
|---|---|---|---|
| Anthropic (Claude) | AI: exam and practice paper generation, answer evaluation, explanations, the AI tutor | The prompt for each request (class, subject, chapter, question text), student answers, images of handwritten answer sheets and tutor questions that are sent for evaluation | Outside India |
| Razorpay | Payments | Your name, email, the plan or top-up and the amount. Card, UPI and bank details are entered on Razorpay and are never seen or stored by us | India |
| Resend | Email: sign-in and verification codes, receipts, notices, reports | Your email address, name and the content of the message | May be outside India |
| MSG91 | SMS sign-in codes, only where SMS codes are switched on | Your mobile number and the one-time code | India |
| Google (Sign in with Google) | Optional sign-in | Only if you choose Google sign-in: your Google account email and name are confirmed to us by Google | Outside India |
| Supabase | Database | Everything stored in your account: profile, classes, exams, results, practice history, messages, payment records | Hosted in a cloud region; may be outside India |
| Render | Hosting of the Adhyay server, and storage of uploaded answer sheet images | All requests to the server and the answer sheet images you upload | Singapore |
| Vercel | Hosting of the website | Technical request data such as IP address and browser type | Global network, including outside India |
| Cloudinary | File storage for some uploads | School logos (where configured), evaluation report PDFs, teacher notes, previous-year paper files and student project files | May be outside India |
| Sentry | Error monitoring | Technical details of an error (page address, browser and device information, the error itself) and, for errors in the website, a short recording of the page around the error | May be outside India |
| Google (YouTube Data API) | Finding public educational videos for a chapter | Only the chapter and subject name. No personal data is sent | Outside India |
Transfers outside India. Several of these services run outside India, including the AI service and the Singapore server. By using Adhyay you understand that your data is processed there for the purposes above. We choose providers that protect data with contractual and technical safeguards.
5. Children and consent for users under 18
Many Adhyay users are under 18. Under the Digital Personal Data Protection Act, 2023 the data of a child needs the verifiable consent of a parent or lawful guardian. We handle this as follows:
- A student account created or approved by a school is set up on the school's responsibility, and the school confirms it has the consent it needs from parents.
- A student under 18 who signs up on their own must have the consent of a parent or guardian, and a parent can link to the child's account to see progress.
- For students in Class 1 to 8, a deletion request is made by a parent or the school.
- We do not track or monitor children's behaviour for any purpose other than their learning inside Adhyay, and we do not direct advertising at them.
- A parent can ask for access to, correction of, or deletion of a child's data at any time using the contact details below.
6. Cookies and browser storage
When you sign in, a sign-in token is kept in your browser (in local storage and in a cookie named auth-token, lasting 7 days) so you stay signed in. We use no advertising or analytics cookies. You can sign out to remove it.
7. How long we keep data
- Account and learning data is kept while your account is active.
- If you ask for deletion, the account is deactivated at once and permanently anonymised after 30 days. Until then you can restore it. Results are kept without personal details after that, so a school's records stay consistent.
- Payment records are kept for accounting and legal reasons.
- Answer sheet images you upload are stored on our server so you, your teacher and a linked parent can review them.
8. Security
We use encrypted connections (HTTPS), hashed passwords, role-based access, and signed, expiring links for answer sheet images. No system is perfectly secure; please use a strong password and keep it private. If there is a personal data breach that affects you, we will tell you as the law requires.
9. Your rights
- Access: ask for a summary of the personal data we hold about you and who it is shared with.
- Correction and updating: ask us to fix or complete data that is wrong.
- Erasure: ask us to delete your account and data (see section 7).
- Withdraw consent where we rely on it, and nominate someone to exercise your rights if you are unable to.
- Grievance: complain to us and have it handled as set out below.
Write to support@techmandalae.com or use the Contact & Grievance page. We may need to confirm who you are first.
10. Grievances
Grievance Officer: Parag Gupta, Founder, Tech Mandalae. Email support@techmandalae.com, phone +91 9520666861. We acknowledge a grievance within 48 hours and aim to resolve it within 30 days.
11. Changes to this policy
When we change this policy in a way that matters, we will tell you by email or in the app and update the date above.