Privacy Notice
Pravachak is built for schools across Bharat and the students in them - most of whom are minors. This notice explains, in plain words, what information we handle, why, and the rights students and parents have under the Digital Personal Data Protection Act, 2023 (DPDP).
Who is responsible for your data
Pravachak is provided to students through their school. Under the DPDP Act, the school is the Data Fiduciary for its students' personal data - it decides what is collected and why. Pravachak is the Data Processor: we handle data only on the school's instructions and only to run the learning platform.
What we collect and why
Your account
Name, school email, class and preferred language - so your teacher and the AI tutor know who you are and which language to answer in.
Your learning activity
Tutor conversations, quiz answers, flashcard reviews and progress - so the platform can adapt practice to you and show your teacher aggregate class insight (never your private chat transcripts).
Technical data
Basic device and session information needed to keep the service secure and working on your network. We do not build advertising profiles.
What we never do
No advertising, no selling of data, no profiling beyond learning mastery, and no use of personal data to train third-party AI models. Personal identifiers are masked before any question leaves your school's environment for an AI provider.
Consent and your DPDP rights
Parental consent
Because students are typically under 18, your school obtains verifiable parental or guardian consent and records it on Pravachak before AI features unlock. Without a granted consent record, AI surfaces stay blocked while lesson content remains readable.
Right to access
A parent or student can ask the school to export everything Pravachak holds about the student. The school admin generates this export from the Governance console, delivered as machine-readable files.
Right to correction
If any account detail is wrong, ask your school to correct it - the change flows through the platform.
Right to erasure
You can ask your school to delete a student's data. Deletion removes learning history, conversations and personal identifiers; statutory audit records (event type and timestamp, with no personal content) are retained as required by law.
Right to grievance redressal
You may raise a concern with your school first; the school can escalate to Pravachak. You also retain the right to complain to the Data Protection Board of India.
Data residency
Student data is stored in India. Your school remains the Data Fiduciary; Pravachak processes data only on its instructions.
How we protect data
- PII masking at the AI gateway. Personal identifiers are detected and masked before any prompt is sent to an AI model provider.
- Role-based access. Students, teachers and admins each see only what their role permits. Teachers see aggregate class signals, not individual chat transcripts.
- Immutable audit logs. Sensitive actions - provisioning, role changes, exports, deletions - are logged for accountability.
- Data minimisation. We collect only what the learning platform needs, and retain it only as long as the school's agreement requires.
Retention and deletion
Personal data is retained for the duration of the school's subscription. When a school's licence ends, data enters a time-boxed window during which the school can export it, after which it is deleted, except for the non-personal audit-log skeleton retained for our own compliance record. Chat transcripts are visible to the student for a limited period, then archived (not visible to teachers) for the audit trail.
Questions and contact
Students should ask their class teacher or school admin first - they can raise anything with the Pravachak team on your behalf. For data questions, schools and parents can reach us at hello@pravachak.com.
Last updated: July 2026. This notice will be reviewed by legal counsel before public launch. Where this notice and the school-facing Data Processing Agreement differ, the Data Processing Agreement prevails.