Legal

Privacy policy

Last updated: 28 October 2026

Draft — to be reviewed by a lawyer.This text describes how EdSmart Studio works today, but it has not yet had legal review and may change before launch.

EdSmart Studio is a learning platform used by school students, their parents, teachers and schools. Most of our users are children, so we collect as little as we can, we never show ads, and we never sell personal data.

This policy explains what we collect, why, who we share it with and the choices you have. It is written with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) in mind.

1. Who we are

EdSmart Studio Placeholder: legal entity name and registered address (“we”, “us”) is the Data Fiduciary for the personal data described here, except where a school decides how its students’ data is used. In that case we process the data on the school’s instructions.

2. What we collect

DataExamplesWhy
Account detailsName, email address, password (stored hashed), role (student, parent, teacher, admin), school and class (cohort)To create and secure your account and connect students with their parents, teachers and school
Learning contentTutor chat messages, answers typed or handwritten on the pad, homework and assessment answersTo tutor, give feedback and grade work
UploadsPhotos of written working, homework sheets and question papers (photo, PDF or Word)To read the work, give feedback and turn papers into homework or assessments
Progress and rewardsStrengths and gaps by subject, unit, topic and concept; points, streaks, tiers and avatarTo show progress to the student, their parents and teachers, and to adapt practice
Plan and usagePlan type, monthly usage counts, AI usage cost recordsTo apply plan limits and run the service
Contact formName, email, role, organisation and messageTo reply to your enquiry or arrange a demo

We don’t ask for more than we need. Please avoid putting unnecessary personal information (such as full names, addresses or faces) into photos you upload.

3. Children’s data and parental consent

  • For users under 18, we process personal data only with verifiable consent from a parent or lawful guardian, as the DPDP Act requires. Where a school enrols its students, the school confirms it holds that consent.Placeholder: describe the exact consent flow once confirmed
  • We do not track children’s behaviour across other websites or apps.
  • We do not show advertising, and we do not target any advertising at children.
  • We do not process children’s data in any way likely to harm their well-being.
  • A parent or guardian can ask to see, correct or delete their child’s data at any time (see section 8).

4. How the AI works with your data

The tutor, the feedback and the reading of handwritten or photographed work are powered by AI models from third-party providers. To produce a response, the relevant text or image (for example, a question and the student’s answer) is sent to the provider and the result is sent back.

  • We send only what is needed for the task, not the student’s whole profile.
  • We use providers whose terms do not allow them to use our data to train their models.Placeholder: confirm and list the AI providers and their data terms
  • The tutor teaches from the school’s approved curriculum content, not from the open internet.

5. Who we share data with

  • Within the platform: a student’s progress and work are visible to the student, their linked parents, their teachers, and authorised staff at their school.
  • Service providers who help us run EdSmart Studio, such as hosting, storage, email delivery and AI model providers, under contracts that limit their use of the data.
  • Where required by law, or to protect the safety of a user.

We never sell personal data, and we never share it for advertising.

6. This website

This marketing website uses Cloudflare Web Analytics, which measures visits without cookies and without tracking you across sites. The contact form uses Cloudflare Turnstile to block spam. We don’t use advertising or tracking cookies.

7. How long we keep data

We keep account and learning data while the account is active, and delete it when it is no longer needed for the purpose it was collected for, or when you ask us to, unless the law requires us to keep it.Placeholder: set concrete retention periods (e.g. after account closure, for uploads)

8. Your rights

You (or, for a child, their parent or guardian) can:

  • ask for a summary of the personal data we hold and how it is used;
  • ask us to correct, complete or update it;
  • ask us to erase it, or withdraw consent (this may mean the account can no longer be used);
  • nominate someone to exercise these rights on your behalf; and
  • raise a grievance with us, and then with the Data Protection Board of India if it isn’t resolved.

If your account was created by a school, you can also contact the school.

9. Security

Data is sent over encrypted connections, passwords are stored hashed, and access is limited by role, so for example a teacher sees only their own cohorts. If a breach affecting your data occurs, we will inform you and the Data Protection Board as the law requires.Placeholder: confirm these security measures against the app before publishing

10. Contact and grievances

Email [email protected]Placeholder: confirm address; name a grievance officer. We aim to respond within the time the law requires.

11. Changes

If we change this policy, we’ll update the date above and, for significant changes, tell users in the app.