DhiXAILegal
DRAFT — review with legal counsel before publishing. Replace every[BRACKETED] placeholder with your final details.

Privacy Policy

Last updated: [DATE]

This Privacy Policy explains how [LEGAL ENTITY NAME] (“Lyceuma”, “we”, “us” or “our”) collects, uses, shares, and protects your personal information when you use Lyceuma. Because many of our users are students and minors, we take privacy seriously and design for parental involvement. By using the Service, you agree to this Policy.


1. Information We Collect

a. Account information

  • Name and email address
  • Phone number, and a parent or guardian phone number for students
  • Class/grade, target examination, and similar profile details you provide
  • Authentication data, such as one-time passwords (OTP) and, if you sign in with Google, basic profile information Google shares with us

b. Usage and telemetry data

  • Event-tracking and behaviour analytics — the pages and features you use, actions you take, time spent, and interaction patterns
  • Device and technical data such as browser type, device type, approximate location derived from IP, and log data

c. Academic data

  • Your practice attempts, test results, scores, and progress over time
  • Questions and messages you send to the AI tutor and the responses generated for you

d. Payment data

When you pay for a subscription, payment is processed by our payment gateway, Razorpay. Razorpay collects and processes your payment details (such as card, UPI, or bank information) directly. We do not collect or store your full payment card, UPI, or bank details on our servers. We receive limited transaction information such as a payment reference, status, and amount.

2. How We Use Your Information

  • To create and manage your account and provide the Service
  • To deliver AI tutoring, practice, tests, analytics, and rank/college guidance, and to personalise your learning experience
  • To send account, security, learning-progress, and (where a parent number is provided) parental-update notifications
  • To process subscriptions, payments, and renewals
  • To analyse usage, improve and secure the Service, prevent abuse and fraud, and develop new features
  • To respond to your requests and provide support
  • To comply with legal obligations and enforce our terms

3. Third Parties and Service Providers

We share personal information only as needed to run the Service, with providers who are bound to protect it. These include:

  • Payments — Razorpay: to process subscription payments and renewals securely.
  • Messaging & OTP providers: WhatsApp-based messaging services (including WAHA) and similar providers to send one-time passwords, alerts, and notifications.
  • AI service providers: third-party artificial- intelligence providers that process your prompts and academic context to generate tutoring responses and analytics. We may change AI providers over time to improve quality, reliability, or cost, and we take reasonable steps to ensure they handle data appropriately.
  • Sign-in — Google: if you choose Google sign-in, to authenticate you.
  • Infrastructure & analytics providers: hosting, storage, and analytics services that support the Service.

We do not sell your personal information. We may disclose information if required by law or to protect our rights, users, or the public.

4. Cookies and Local Storage

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences (such as your light/dark theme), operate the Service, and understand usage. You can control cookies through your browser settings, but disabling them may affect how the Service works.

5. Data Retention

We keep personal information for as long as your account is active and as needed to provide the Service, and afterwards only as long as necessary for legitimate business purposes such as legal compliance, dispute resolution, security, and enforcing our agreements. When information is no longer needed, we delete or anonymise it. Specific retention periods are set out in [INTERNAL RETENTION SCHEDULE].

6. Security

We use reasonable technical and organisational measures — such as encryption in transit, access controls, and restricted internal access — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your login credentials confidential.

7. Children’s Data and Parental Consent

Lyceuma is used by students, including minors under 18. Where a user is a minor, we collect and process their information on the basis of consent given by a parent or legal guardian. We collect a parent or guardian phone number to help confirm consent and to keep parents informed of the student’s account and progress. A parent or guardian may contact us at any time to review, correct, or delete their child’s information, or to withdraw consent, using the contact details below.

8. Your Rights

Subject to applicable law, you may:

  • access the personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of your account and information;
  • withdraw consent, where processing is based on consent; and
  • raise a concern or complaint about how we handle your information.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request.

9. Data Location

Your information is primarily stored and processed on servers located in India. Some of our service providers (for example, certain AI or infrastructure providers) may process limited data outside India; where that happens, we take reasonable steps to ensure a comparable level of protection.

10. Grievance / Contact

For any privacy questions, requests, or complaints, please contact our Grievance Officer (as required under applicable Indian law):

  • Grievance Officer: [GRIEVANCE OFFICER NAME & EMAIL]
  • [LEGAL ENTITY NAME]
  • Registered address: [REGISTERED ADDRESS]
  • Support email: [SUPPORT EMAIL]

We aim to acknowledge and resolve grievances within the timelines required by applicable law.

11. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Service. Your continued use of the Service after the changes take effect means you accept the updated Policy.

Privacy Policy — Lyceuma · DhiX Staging