Privacy Policy

Last updated: 7/10/2026

StudyRealm Technologies (MSME Udyam registered, Bangalore, Karnataka) operates studyrealm.app. This policy explains how we collect, use, store, and protect personal data in accordance with India's Information Technology Act 2000, IT Rules 2011, and the Digital Personal Data Protection Act 2023 (DPDP Act).

Who We Collect Data From

We collect data from Students (Class 1–10) only through school partnerships. We also collect data from Teachers and Parents via the parent dashboard. We never collect data directly from children outside institutional access.

What We Collect

• Students: name, class, school ID, answers submitted, mastery scores (stored in user_progress table), stars earned, chapters attempted (daily_student_summary), quiz responses (quiz_submissions), and theme preferences (active_theme on users table).
• Teachers: name, email, school, subject assignments, and quiz content uploaded (ranked_quizzes table).
• Parents: email, linked student's progress data (read-only via parent_student_links).

How We Use It

We use data to deliver the platform, power teacher mastery heatmaps (student_chapter_mastery view), generate NCF 2023 compliance reports (student_attempt_details table), and enable parent progress monitoring (daily_student_summary). We do NOT use data for advertising or profiling.

Children's Data (DPDP Act 2023 Compliance)

All users under 18 are considered children under the DPDP Act 2023. Student accounts are created exclusively by schools under an institutional agreement (MOU) which requires the school to confirm parental consent. We do not knowingly collect data from children outside of school-mediated access. Parents may request access or deletion of their child's data at any time by contacting our Grievance Officer.

Data Storage & Security

Data is secured using Supabase PostgreSQL with Row Level Security policies. We use Cloudflare R2 for media assets, Vercel for application hosting, and DigitalOcean for backend services and Redis cache. We maintain automatic daily backups and role-based access control.

Data Retention

Student data is retained for the duration of the school partnership plus 90 days, then deleted. Parents may request earlier deletion.

Third-Party Services

We use Supabase (database), Cloudflare R2 (storage), Vercel (hosting), DigitalOcean (backend), Groq AI (answer evaluation — no personal data sent, only question text), and Google Fonts (typography). There are no advertising networks or data brokers involved.

Your Rights (DPDP Act 2023)

You have rights to access, correction, erasure, and grievance redressal. Contact our Grievance Officer for any requests.

Grievance Officer (required by IT Act 2000)

• Name: [YOUR NAME]
• Designation: Founder, StudyRealm Technologies
• Email: grievance@studyrealm.app
• Address: [YOUR BANGALORE ADDRESS]
• Response: 24 hours acknowledgement, 15 days resolution.

Changes

Material changes will be notified to partner schools via email.