Privacy Policy

Last updated: —

This Privacy Policy explains how the Institute (“we”, “us”, the “Institute”) collects, uses, and protects your personal data when you use the LearnX student platform (the “Platform”). It is published in accordance with the Information Technology Act, 2000 and rules thereunder, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”). For the purposes of the DPDP Act, the Institute is the Data Fiduciary.

1. Information we collect

• Account information from Google Sign-In: your name, email address, and profile photo.
• Registration/enrolment details you submit in course forms, which may include your phone number, class/batch, and other fields configured by the Institute.
• Learning activity: the courses you enrol in, classes you RSVP to, and attendance records (when you join a class and at what time).
• Technical data: a device identifier stored on your device, and standard log data (e.g. time of requests) used for security and troubleshooting.

2. How we use your information

• To create and manage your account and enrolments.
• To let you join online classes and to record attendance.
• To communicate with you about your classes (e.g. email or WhatsApp).
• To generate attendance and participation reports for the Institute.
• To keep the Platform secure and to comply with legal obligations.

3. Legal basis & consent

We process your personal data based on the consent you provide when you sign in and submit your details, and where necessary for the legitimate purpose of delivering education services you have requested. You may withdraw consent at any time (see “Your rights”), though this may limit your ability to use the Platform.

4. Children's data

If you are under 18 years of age, you may use the Platform only with the involvement and verifiable consent of a parent or lawful guardian, as required by the DPDP Act. The Institute relies on the enrolling parent/guardian to provide such consent. We do not knowingly undertake tracking, behavioural monitoring, or targeted advertising directed at children.

5. Sharing & processors

We do not sell your personal data. We share it only with:

• Google Cloud / Firebase, which hosts the Platform and processes data on our behalf as a Data Processor.
• Online meeting providers (e.g. Zoom, Google Meet) when you choose to join a class via their link; their use of your data is governed by their own policies.
• Google (Analytics and Ads) and Microsoft (Clarity), but only if you have accepted analytics and advertising cookies — see section 10. These providers receive usage data, never your enrolment answers.
• Authorities where required by law.

6. Storage & security

Your data is stored on Google Cloud infrastructure (data centres located in India, region asia-south1, where available). We apply reasonable security practices including access controls and encrypted transport (HTTPS). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data retention

We retain your data for as long as your account is active and as needed to provide services and meet legal, accounting, or reporting requirements. You may request deletion as described below; some records may be retained where required by law.

8. Your rights

Subject to applicable law, you have the right to access, correct, and update your personal data, to withdraw consent, to request erasure, and to nominate another person to exercise your rights in case of death or incapacity. To exercise any of these rights, or to raise a grievance, contact our Grievance Officer below.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023:

Name: Grievance Officer
Email: grievance@example.com
Organisation: the Institute, India

We will acknowledge grievances within 24 hours and endeavour to resolve them within 15 days of receipt.

10. Cookies, local storage & analytics

Strictly necessary storage. The Platform uses your browser's local storage to keep you signed in, remember preferences, and cache the app for offline use (as a Progressive Web App). This is essential to providing the service and is always active.

Analytics and advertising cookies — only with your consent. When you first visit, we ask whether you agree to analytics and advertising cookies. Nothing is loaded, and no request is made to any of the providers below, until you choose Accept. If you choose Reject, or simply ignore the notice, none of them ever run. You can change your answer at any time using the Cookie settings link in the footer.

If you accept, we use:

• Google Analytics 4 — to understand which pages are used and how people move through the Platform, in aggregate. IP addresses are anonymised.
• Google Ads — to measure whether our advertising leads to enrolments, and to build advertising audiences.
• Microsoft Clarity — to see anonymised usage patterns and session recordings so we can fix confusing screens. Recordings on signed-in pages are masked: names, email addresses, phone numbers and every other text value are obscured before the recording leaves your device.

These providers act as Data Processors and may set their own cookies. We do not send them your name, email address, phone number, or any answer you gave on an enrolment form. Where an event records what happened (for example, that an enrolment was submitted), it carries only an internal course or class identifier.

We use Google Consent Mode v2, so your choice is passed to Google's tags directly. Withdrawing consent stops further collection; it does not delete data already collected, for which you may contact our Grievance Officer.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date reflects the latest version. Continued use of the Platform after changes constitutes acceptance.

12. Contact

Questions? Email support@example.com or see our Contact page.

This document is a template provided with the LearnX platform and does not constitute legal advice. The Institute should have it reviewed by a qualified legal professional and complete all bracketed details before publishing.