Data We Collect
- Email address — for login and important account emails
- Child's display name and class level (3, 4, or 5)
- AI explanations and voice questions from learning sessions (stored only with parental consent)
- Quiz answers and topic mastery progress
- Reading fluency scores and pronunciation logs (with consent)
- Streak and badge data for gamification
- Device type and approximate session duration (no precise location)
How We Use Your Data
- To personalise explanations to your child's class level
- To track learning progress and mastery across topics
- To send weekly learning digest emails (Max plan only, with consent)
- To send important account emails (password resets, alerts)
- Anonymous, aggregated analytics to improve content quality — no individual data shared
Third-Party Processors
- Groq (USA) — processes your child's questions to generate AI answers. Groq does not train models on your data.
- Google Gemini (USA) — used for AI-powered explanations. Governed by Google's Data Processing Addendum.
- Sentry (USA) — receives anonymised error reports. No personal data or question content is included.
- PostHog (EU) — receives anonymised usage events (e.g. "first lesson completed"). No names or question text.
- Razorpay (India) — processes payments. We do not store card details.
- Resend (USA) — sends transactional emails to parent accounts only.
- All third-party processors have signed Data Processing Agreements with Anvisha.ai.
Data Retention
- Voice questions and chat history: retained for 90 days, then automatically deleted
- Learning progress and mastery data: retained while account is active
- Payment records: retained for 7 years as required by Indian tax law
- Account data: deleted within 30 days of a deletion request
- Backups: purged within 90 days of account deletion
Data Storage & Security
Your data is stored on encrypted servers hosted in India (Neon PostgreSQL). We use hashed passwords (bcrypt), HTTPS-only connections, and secure session tokens. Access is restricted to authorised systems only. No support staff can read your child's conversation history without a specific access-logged request.
Your Rights
- Right to access: Download all your data from Profile → "Download my data"
- Right to correction: Update your profile from Profile settings at any time
- Right to deletion: Request full account deletion from Profile settings or email privacy@anvishaai.com
- Right to withdraw consent: Disable learning history storage from Profile → Privacy settings
- We respond to all rights requests within 30 days (India DPDP Act compliance)
Account Deletion
You can delete your account from Profile → "Delete account". We will send a confirmation email and process the deletion within 30 days. All associated data — profiles, learning history, chat history, progress, and badges — will be permanently deleted. Once deleted, data cannot be recovered.
Contact & Grievance Officer
For privacy questions, data requests, or DPDP Act grievances (India):
privacy@anvishaai.com