1. Who We Are
eduyora ("we", "us", "our") is an online digital reading and learning platform accessible at www.eduyora.in, operated by eduyora technologies, a sole proprietorship of Jyoti Verma, through Rahul Kumar and Yoginder Kumar, with its principal place of business at Villa No-75, Green Residency, Kingson Green Villa, New SKS World School, Chipyana Buzurg, Gautam Buddha Nagar, Uttar Pradesh – 201009, India.
We provide schools, publishers, teachers, and students with a digital library, AI-assisted learning tools, quiz and progress tracking, vocabulary building, and collaborative study features.
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at the details provided in Section 13 below.
2. Scope of This Policy
This Privacy Policy applies to all personal data we collect when you use the eduyora platform, including:
- The eduyora platform at www.eduyora.in
- All portals accessible through the platform (Owner, Co-Owner, Publisher, School Admin, Teacher, and Student portals)
- All APIs and services that power the platform
By registering for or using eduyora, you acknowledge that you have read, understood, and agreed to the practices described in this Policy.
3. Definitions
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or can identify a living individual – directly or indirectly |
| Data Principal | The individual whose personal data is being processed (you, the user) |
| Data Fiduciary | eduyora – the entity that determines the purpose and means of processing your data |
| Processing | Any operation performed on personal data – collection, storage, use, sharing, or deletion |
| Child / Minor | Any individual below the age of 18 years |
| School | An educational institution registered on the eduyora platform |
4. What Personal Data We Collect
We collect only the data that is necessary to provide our services. The data we collect varies based on your role on the platform.
4.1 All Users (Registration & Account)
- Full name
- Email address
- Role (Student, Teacher, School Admin, Publisher, Owner, Co-Owner)
- Account creation date
- Login activity (last login, session metadata)
- Password (stored in encrypted, hashed form – we never store plain-text passwords)
4.2 Students
- Name and email address
- School they are associated with
- Books accessed and reading time spent per book
- Quiz attempts, scores, and answers
- Vocabulary words saved and mastery status
- Annotations and bookmarks made within books
- Doubts (questions) submitted to teachers
- Study session activity (peer study connect, study calls)
- Progress data (XP, reading minutes, books completed)
- Device and browser metadata (for troubleshooting)
4.3 Teachers
- Name and email address
- School they are associated with
- Classes managed and students assigned
- Books assigned to students
- Doubt replies sent to students
- Settings and preferences
4.4 School Administrators
- Name and email address
- School name and details
- Student and teacher roster managed
- Subscription and billing records (school-level)
- Payment screenshots uploaded for subscription verification
4.5 Publishers
- Name and email address
- Books uploaded to the platform
- Book processing status and metadata
- Earnings and payout records
- Billing history
4.6 Owner / Co-Owner
- Name, email address, and Google account details (if signed in via Google)
- Two-factor authentication (TOTP) configuration status
- Platform administration activity logs
4.7 Data We Do NOT Collect
We do not collect:
- Aadhaar numbers, PAN, or any government identity documents from students or teachers
- Financial card numbers or bank account details from students
- Precise GPS location data
- Biometric data of any kind
- Social media profiles or contacts
5. How We Use Your Personal Data
We use personal data only for the purposes stated below:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Creating and managing your account | Name, email, role | Consent + Contract |
| Providing access to books and learning features | Book access records, reading sessions | Contract |
| Tracking student progress and generating reports | Reading time, quiz scores, vocabulary, XP | Contract (service delivery) |
| Enabling doubt submission and teacher replies | Doubt content, teacher responses | Contract |
| Enabling peer study sessions and video calls | Study session metadata, Agora channel names | Contract + Consent |
| Sending account and approval notifications | Email address | Contract |
| Password reset and security communications | Email address | Legitimate interest |
| AI-powered features (summarise, mindmap, simplify…) | Book text selected by the user | Contract + Consent |
| Verifying manual subscription payments | Payment screenshot uploaded by school or authorised user | Contract |
| Improving platform performance and fixing bugs | Anonymised usage data, error logs | Legitimate interest |
| Complying with legal obligations | As required by applicable law | Legal obligation |
We do not use your personal data for advertising, profiling for commercial purposes, or selling to third parties — ever.
6. Special Provisions for Children (Minors Under 18)
We take the privacy of children very seriously, in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act).
6.1 Parental / Guardian Consent
Students on the eduyora platform are added by their school. By enrolling students on eduyora, the School Administrator confirms and warrants that they have obtained verifiable consent from the parent or legal guardian of each student who is a minor, authorising the school to enroll that student in digital educational services including eduyora. This mechanism is the standard, legally recognised approach for institutional EdTech platforms in India.
6.2 What We Do NOT Do With Children's Data
- We do not show children targeted advertisements
- We do not profile children for commercial purposes
- We do not allow children's data to be accessed by any party other than their school's authorised administrators and teachers
- We do not use children's personal data to train AI models
- We do not share children's data with third parties beyond what is strictly necessary to operate the platform (see Section 8)
6.3 What Parents / Guardians Can Do
If you are a parent or guardian and wish to review, correct, or request deletion of your child's data, please contact your child's school administrator in the first instance, or reach us directly at support@eduyora.co.in. We will respond within 30 days.
8. Third-Party Service Providers (Data Processors)
To deliver our platform, we use the following third-party services, each of which may process limited data as part of providing their service. Each provider operates under their own Privacy Policy and Terms of Service. We select providers that maintain industry-standard security practices.
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| Supabase | Database, authentication, and storage | Account data, all platform records | EU / US (SOC 2) |
| Cloudflare R2 | Book file and asset storage | Book files (no personal user data) | Global CDN |
| Gemini | AI-powered learning features | Book text selected by user (no personal identifiers) | US |
| Agora | Peer video study calls | Channel name, temporary user token | Global |
| Resend | Transactional email delivery | Name, email address | US |
| Upstash | Background job queue for book processing | Job metadata (no personal user data) | US |
| Render | Python worker for book processing | Book files (no personal user data) | US |
| Google Analytics | Website usage analytics | Anonymised usage data (no personal identifiers) | US |
We do not sell your data to any third party. We do not share your data with advertisers.
9. Data Retention
We retain personal data only for as long as necessary for the purpose it was collected.
| Data Type | Retention Period |
|---|---|
| Active user accounts | For the duration of your account |
| Student reading, quiz, and progress data | School subscription period + 6 months |
| Doubts and teacher replies | School subscription period + 6 months |
| Deleted user accounts | Purged within 30 days of deletion request |
| Payment screenshots | 3 years (for financial record-keeping) |
| Error logs and system logs | 90 days |
| Email delivery logs | 30 days |
Following the termination or expiry of a school's subscription, we will retain associated student data for up to 6 months to allow for reactivation, dispute resolution, or data export requests. After this period, data will be deleted upon written request to support@eduyora.co.in. We do not proactively share or use this data for any purpose after subscription end.
10. Your Rights as a Data Principal
Under the DPDP Act 2023 and general privacy principles, you have the following rights:
| Right | What It Means | How to Exercise It |
|---|---|---|
| Right to Access | Know what personal data we hold about you | Email support@eduyora.co.in |
| Right to Correction | Request correction of inaccurate or incomplete data | Email support@eduyora.co.in or update in profile settings |
| Right to Erasure | Request deletion of your personal data | Email support@eduyora.co.in |
| Right to Grievance Redressal | Raise a complaint if your data rights have been violated | Contact our Grievance Officer (Section 13) |
| Right to Withdraw Consent | Withdraw consent where consent is the legal basis | Email support@eduyora.co.in – may affect platform access |
| Right to Nominate | Nominate another individual to exercise rights on your behalf | Email support@eduyora.co.in with written nomination |
Response time: We will acknowledge your request within 3 working days and resolve it within 30 days. Complex requests may take up to 60 days — we will inform you if this applies.
11. Data Security
We implement reasonable and appropriate technical and organisational measures to protect your personal data, including:
- Encryption in transit – all data transmitted between your browser and our servers uses HTTPS/TLS
- Encrypted passwords – passwords are hashed using industry-standard algorithms; we cannot read your password
- Row-level security (RLS) – our database enforces strict access controls so that one school's data is never accessible to another school
- Two-factor authentication (2FA) – available and required for platform administrators
- Access controls – staff and system access to personal data is restricted to what is necessary for the role
- Signed, httpOnly cookies – authentication cookies are protected against client-side access
Despite these measures, no system can guarantee absolute security. In the event of a data breach that is likely to result in harm to Data Principals, we will notify affected users and the Data Protection Board of India as required by law.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify registered users via email or a prominent notice on the platform
- For significant changes affecting children's data, notify the relevant school administrators
Continued use of eduyora after changes are published constitutes acceptance of the updated policy.
13. Grievance Officer & Contact
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have designated a Grievance Officer to address complaints and concerns regarding your personal data.
| Name | Rahul Kumar & Yoginder Kumar |
| Designation | Co-Founders / Data Protection Officers |
| Organisation | eduyora technologies |
| Proprietor | Jyoti Verma |
| support@eduyora.co.in | |
| Address | Villa No-75, Green Residency, Kingson Green Villa, New SKS World School, Chipyana Buzurg, Gautam Buddha Nagar, Uttar Pradesh – 201009, India |
| Response Time | Within 30 days of receipt of complaint |
For general support queries, please contact: support@eduyora.co.in
14. Governing Law & Jurisdiction
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and all rules framed thereunder.
Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the courts at Greater Noida West, India.