Privacy Policy

The short version

• Your school set up your account and decides how the app is used in class.
• We collect what we need to run classes, tests, homework and the AI tutor.
• Your teachers can see your work and marks. Other students can't.
• Nobody outside your school can see your information.
• We never sell your information, and there are no ads.
• Don't type personal details (phone number, address, passwords) into the AI tutor.

Who we are

Intellishala is a learning platform for schools, operated by Navam Intellitech Private Limited, a company incorporated under the Companies Act, 2013, with its registered office in New Delhi, India (C-97, Ground Floor, Hari Nagar, New Delhi 110064, Delhi, India). In this policy, "you" means anyone who uses Intellishala: a student, teacher, school administrator or parent.

Your school is in charge of your data

Your school is the data controller (the Data Fiduciary under India's Digital Personal Data Protection Act, 2023) for information about its students and staff. Intellishala processes that information on the school's behalf, only on its instructions, to provide the service to the school. You can ask your school or us about your data, and we will help either way.

Students may be under 18

Most people who use Intellishala are school students, and many are under 18. Your school, as the institution offering Intellishala, obtains the consent required by law from parents or guardians of students under 18 and instructs us to process the data; we act on the school's instructions. We use children's information only for the school's teaching and to keep children safe. A parent or guardian can ask to see, correct or delete their child's information.

What we store

• Account details from your school: name, school email address, admission number, your role (student, teacher or administrator), your school, classes and sections.
• For students, if the school enters them: date of admission, and a parent's or guardian's name, relationship and phone number. We don't store a student's own phone number.
• For staff, if the school enters them: phone number and joining date.
• Sign-in: your Microsoft account identifier if you sign in with Microsoft, or a securely hashed password if your account uses one; and the time you last signed in.
• Schoolwork: tests you take and your answers (including photos of handwritten working you upload in a test), marks, the order questions were shown in, and how many times you left the test tab.
• AI tutor: a monthly count of how many tutor questions each account asked. We don't keep the text of your questions or the tutor's answers on our servers.
• Files teachers upload to share with their classes, and messages you send us with the Feedback button.
• A profile photo, only if you choose to upload one. We remove hidden information such as location data before storing it.

We don't collect students' home addresses, Aadhaar numbers, biometric data, precise location or payment details.

The AI tutor

• When you ask the tutor a question, its text and up to the last six messages of the conversation (yours and the tutor's) are sent to DeepSeek, which writes the answer, together with matching passages from the NCERT textbooks.
• Your question's text (or, for a follow-up such as "explain that more simply", your previous question) is also sent to OpenAI to find the matching textbook passages.
• If you photograph a question, the photo is sent to OpenAI to read the text from it. We don't store the photo.
• Your name, email address and account are not sent with a tutor question. Only what you type or photograph is sent, so please leave personal details out.
• Your recent tutor conversation is saved in your own browser so it can continue. It stays on your device until you clear it.
• Answers come from the NCERT books but can still be wrong. Check with your teacher.

Who can see your data

• Teachers see the students, work and marks for the classes they teach.
• School administrators see information for their own school, including whether each staff member and student has signed in at least once.
• Other students can't see your answers or marks. No other school can see your school's data.
• A small number of our authorised staff can access data when they need to: to support your school, keep the service secure, or fix problems.
• We disclose data where Indian law requires it, for example to a court acting lawfully.

Service providers

These companies process data for us to run Intellishala:

• Supabase: our database and file storage, in Mumbai, India.
• Vercel: hosts the application, with server functions in Mumbai, India, and pages delivered through Vercel's global network. Vercel Speed Insights measures how fast pages load.
• Microsoft: sign-in with your school Microsoft account. Microsoft stores your school's sign-in directory under your school's own Microsoft tenant and its settings. When you sign in, Microsoft sends us your account identifier, name, school email and, if you have one, your Microsoft profile photo, and sign-in tokens that we store with your account.
• DeepSeek: writes the AI tutor's answers, and helps teachers write and complete questions. DeepSeek is a company based in the People's Republic of China. Its terms do not state where API requests are processed or how long they are kept. We send no student name, email or school with a tutor question, and we have asked DeepSeek in writing to confirm that API inputs are not used to train its models.
• OpenAI: finds matching textbook passages for a tutor question, and reads text from photos of questions (a student's tutor photo, or a teacher's question paper), in the United States. OpenAI's API terms state that data sent through the API is not used to train its models unless the customer opts in; we have not opted in.
• Cloudflare: plays help videos, if you open one.

Some of these providers process data outside India. Any such transfer follows Section 16 of the DPDP Act.

How we protect your data

• Data is encrypted in transit (HTTPS).
• Each school's data is kept separate, and access is limited by role.
• Passwords are stored only as secure hashes.
• Data at rest and backups: Supabase encrypts stored data with AES-256; all connections use TLS. Our own nightly backups are kept on an encrypted (LUKS) server in India.

If there is a data breach, we will tell the affected school without delay and notify the people affected and the Data Protection Board of India as the law requires.

How long we keep data

• While your school uses the app, we keep account and schoolwork data for as long as the school needs it.
• When a school stops using the app, or asks us to, we delete its data within 90 days, and backups are cleared within 30 days after that.
• Security and processing logs are kept for at least one year, as the DPDP Rules require, and then deleted unless another law requires us to keep them.
• A profile photo is deleted as soon as you remove it. Tutor history in your browser stays there until you clear it.

Your rights, and how to ask for deletion

You can ask for a summary of your data, ask us to correct or complete it, ask us to delete it where it is no longer needed and the law allows, have a complaint resolved, and nominate someone to act for you. A parent or guardian can ask on a child's behalf.

To ask, contact your school first (a school administrator can also deactivate an account), or email us at ceo@intellishala.com with your name, your school and what you are asking for. We may need to confirm who you are. We aim to reply within 30 days, and in any case within the time the law allows. If you aren't satisfied, you can complain to the Data Protection Board of India.

Cookies and browser storage

• A sign-in cookie that keeps you signed in.
• An exam access cookie used when you sit a test on a shared school computer.
• Browser storage that keeps your recent AI tutor conversation on your device.
• Vercel Speed Insights, which measures page load times.

We don't use advertising or cross-site tracking cookies.

Grievance Officer and contact

Daiwik Kashyap, Director, Navam Intellitech Private Limited
Email: ceo@intellishala.com
Address: C-97, Ground Floor, Hari Nagar, New Delhi 110064, Delhi, India

Changes to this policy

If we make an important change, we will tell schools and show a notice in the app before it takes effect. The date at the top shows when this policy was last updated.

Governing law

These terms and this policy are governed by the laws of India; the courts at New Delhi have exclusive jurisdiction.