1. Who We Are
NivShiksha is operated by NIVSHIKSHA NURTURE PRIVATE LIMITED (the “Data Fiduciary,” “we,” “our,” or “us”), which determines the purpose and means of processing your personal data. This Privacy Policy explains how we collect, use, share, and protect your personal data, and your rights under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the DPDP Rules, 2025, when you use our mobile application and website (the “Service”).
2. Personal Data We Collect
We practise data minimisation and collect only what is necessary to provide our educational services:
- Full name — to personalise your experience
- Email address — for account authentication
- Date of birth — to confirm age and apply child protections
- Parent/guardian email — to obtain consent and send progress reports
- Learning progress — scores, streaks, badges, and practice history
- Limited crash/diagnostic data — to keep the app reliable
We do not collect precise location, contacts, photos, microphone data, or advertising identifiers.
3. Purposes & Consent
We process your data on the basis of your consent (or your parent/guardian's consent, for children) to:
- Create and operate your account
- Track learning progress and award achievements
- Provide parent/teacher dashboards and progress reports
- Send important account and service notifications
- Keep the Service secure and free of abuse
You can withdraw consent for any non-essential purpose at any time — withdrawing consent is as easy as giving it. We do not use personal data for targeted advertising, sale to third parties, or behavioural profiling.
4. Children's Data & Verifiable Parental Consent
NivShiksha is built for school students. Under the DPDP Act, a child is anyone under 18 years of age. For every child's account, in line with Section 9, we:
- Obtain verifiable consent from a parent/guardian via a link sent to a parent-controlled email
- Collect only the minimum data necessary
- Never carry out behavioural tracking, profiling, or targeted advertising directed at children
- Let parents/guardians review, correct, or delete their child's data at any time
5. How We Share Data — Processors
We do not sell your data. We share it only with vetted Data Processors acting on our instructions:
- Supabase — database, authentication, and storage
- Razorpay — payment processing (data localised in India)
- Sentry — crash and error diagnostics
- Google — optional Sign-In
- Google Workspace — transactional and report emails
Some processors may process data outside India. Such transfers are permitted under Section 16 of the DPDP Act, except to territories restricted by the Central Government. Payment data is localised in India as required by the RBI.
6. Storage, Security & Retention
Your data is stored on secured cloud infrastructure with row-level security and is transmitted over encrypted HTTPS connections. Learning data may be cached on your device for offline use. We retain personal data only while your account is active or as required by law. On account deletion we permanently erase your data (and your child's) within 30 days, except where retention is legally required.
7. Your Rights as a Data Principal
Under the DPDP Act you have the right to:
- Access a summary of the data we process about you
- Correct, complete, update, or erase your data
- Withdraw consent for non-essential processing
- Raise a grievance with our Grievance Officer
- Nominate another person to exercise your rights in case of death or incapacity
You can exercise most rights in the app under Settings → Privacy & Data, or by contacting our Grievance Officer.
8. Grievance Redressal & Contact
For any privacy concern, or to exercise your rights, contact our Grievance Officer:
Grievance Officer
NIVSHIKSHA NURTURE PRIVATE LIMITED
[email protected]
We respond within the timelines prescribed under the DPDP Rules. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.