Last Updated: March 15, 2026 · Version 1.0 · Governed by DPDPA 2023
VidyaVriti (operated by Kalqore Ventures) is an AI-powered exam preparation platform designed to help students across India prepare for competitive examinations including JEE, NEET, UPSC, and other state and national level exams.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our platform, website, and mobile application. It also describes your rights as a data principal under applicable Indian law.
This policy is governed by the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and associated rules and regulations as amended from time to time.
Full name, email address, mobile number, date of birth, gender, and profile photograph (optional).
Target examination(s), current academic level, school or college name, subjects selected, coaching institute name (optional), and expected exam year.
Pages visited, features used, time spent on each module, practice test attempts, scores, answer patterns, and interaction logs with AI tutors.
IP address, device type and model, operating system, browser type and version, screen resolution, and session identifiers.
Transaction ID, payment method type (card, UPI, net banking), billing name and address. Full card numbers or UPI PINs are never stored by us — these are handled by our PCI-DSS compliant payment processors.
Messages sent to our support team, responses to surveys or feedback forms, and participation in community forums or doubt-clearing sessions.
City and state as provided during registration, and coarse location inferred from IP address. We do not collect precise GPS location without explicit permission.
See Section 11 for details on cookies, local storage, and tracking technologies.
We process your personal data for the following purposes:
We will not use your data for any purpose not listed above without obtaining fresh consent or notifying you in advance.
VidyaVriti is intended for users aged 13 and above. Users below the age of 18 are considered minors under Indian law.
We collect only the minimum data necessary for minors to use the platform. Behavioral advertising and profiling features are disabled for accounts identified as belonging to minors.
Where VidyaVriti is deployed through schools or coaching institutes, the institution acts as the data fiduciary for minor students under their care, and consent may be obtained through institutional agreements.
If you believe an account belongs to a child under 13, please contact our Grievance Officer immediately at privacy@vidyavriti.in.
Our practices for processing children's data comply with Section 9 of the DPDPA, 2023.
We retain your personal data for as long as your account remains active or as needed to provide services.
Transaction records are retained for 7 years as required under Indian tax and accounting regulations.
Data subject to ongoing legal proceedings, disputes, or regulatory investigation may be retained beyond standard retention periods.
Deleted data may persist in encrypted backup systems for up to 90 days before permanent removal.
Aggregated or anonymized data that cannot be linked back to any individual may be retained indefinitely for research and analytics purposes.
You can request deletion from Settings → Account → Delete Account, or by emailing privacy@vidyavriti.in.
All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256.
Access to personal data is restricted to authorized personnel on a need-to-know basis. All internal access is logged and audited.
Our infrastructure is hosted on ISO 27001 certified cloud providers. We conduct regular vulnerability assessments and penetration tests.
You are responsible for maintaining the confidentiality of your account credentials. Do not share your password with anyone. VidyaVriti will never ask for your password via email or phone.
Our AI systems analyze your performance data, answer patterns, and time-on-task metrics to generate personalized study plans, predict weak areas, and recommend practice content.
We do not make fully automated decisions that have legal or similarly significant effects on you without human oversight. All AI recommendations are advisory in nature.
Aggregated and anonymized performance data may be used to improve our AI models. We do not use identifiable personal data to train AI models shared with third parties.
You may opt out of AI-based personalization from Settings → Privacy → AI Preferences. Note that opting out may reduce the effectiveness of study recommendations.
We share data with carefully vetted third-party service providers (data processors) who act on our instructions. These include cloud hosting providers, payment gateways, SMS/email delivery services, analytics platforms, and customer support tools.
All third-party processors are bound by data processing agreements that require them to maintain confidentiality and implement appropriate security measures.
We use analytics tools (such as Google Analytics) that may collect usage data. These tools are configured to anonymize IP addresses and respect Do Not Track signals.
Payment processing is handled by RBI-authorized payment aggregators. We do not store full card details. Processors are PCI-DSS Level 1 compliant.
A current list of key data processors is available upon request by emailing privacy@vidyavriti.in.
User data is primarily stored on servers located within India.
Where data is transferred outside India (e.g., for third-party cloud services), such transfers occur only to countries or processors approved under the DPDPA framework or through Standard Contractual Clauses.
All cross-border transfers are protected by contractual safeguards ensuring equivalent data protection standards.
We comply with any restrictions or conditions on cross-border data transfers as notified by the Central Government under the DPDPA.
Sensitive personal data (as defined under DPDPA) is not transferred outside India without explicit consent.
You may request a summary of the personal data we hold about you and details of how it has been processed.
You may request correction of inaccurate or incomplete personal data. Most profile data can be updated directly from your account settings.
You may request deletion of your personal data, subject to legal retention requirements outlined in Section 5.
You have the right to have your grievances addressed in a timely manner. See Section 12 for our grievance process.
You may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal. Withdrawing consent may impact your ability to use certain features.
Submit requests via Settings → Privacy → My Data Requests, or email privacy@vidyavriti.in. We will respond within 30 days.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India.
We use browser local storage to persist authentication tokens and user preferences between sessions.
On your first visit, we display a cookie consent banner. You may accept all, reject non-essential, or customize your preferences. Essential cookies cannot be disabled.
You may manage cookie preferences at any time from Settings → Privacy → Cookie Preferences, or through your browser settings.
We honor browser Do Not Track (DNT) signals where technically feasible. Analytics tracking is disabled when DNT is detected.
In accordance with the DPDPA and IT Act rules, we have appointed a Grievance Officer for data protection matters.
Submit your complaint in writing via email or through the in-app feedback mechanism. Include your registered email, a description of the issue, and the resolution you seek.
If your complaint is not resolved to your satisfaction within 30 days, you may escalate to the Data Protection Board of India once it is constituted under the DPDPA.
Until the Data Protection Board is fully operational, disputes may be addressed through courts of competent jurisdiction in Bangalore, India.
Nothing in this policy restricts your right to approach consumer forums or other regulatory authorities under applicable Indian law.
We reserve the right to update this Privacy Policy at any time. Changes will be effective upon posting to our website.
For material changes, we will notify you via email or in-app notification at least 14 days before the changes take effect. For minor changes, we will update the "Last Updated" date at the top of this policy.
Your continued use of VidyaVriti after policy changes constitutes your acceptance of the updated policy. If you do not agree, you may delete your account before the changes take effect.
Previous versions of this policy are available upon request by emailing privacy@vidyavriti.in.
This policy is governed by the laws of India, including but not limited to the DPDPA 2023, IT Act 2000, and the Consumer Protection Act 2019.
Any disputes arising from this policy shall be subject to the exclusive jurisdiction of courts located in Bangalore, Karnataka, India.
We cooperate with competent regulatory authorities and comply with lawful orders for data disclosure, including orders under the IT Act, CrPC, and other applicable laws.
Certain processing activities are carried out on the basis of our legitimate interests, including fraud prevention, network security, and improving our services, provided such interests are not overridden by your rights.
We may process data to comply with legal obligations such as responding to court orders, law enforcement requests, or regulatory inquiries.
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations. You will be notified of any such transfer.
If any provision of this policy is found to be unenforceable, the remaining provisions shall continue in full force and effect.
Kalqore Ventures
[Registered Office Address]
Bangalore, Karnataka, India
We aim to respond to all privacy-related queries within 10 business days. Complex requests may take up to 30 days.
Participation in beta features or research programs may involve additional data collection. Specific consent will be sought for any such additional collection.
Where VidyaVriti is accessed through an institutional account (school, coaching institute, or employer), the institution may have access to aggregated performance data under a separate data sharing agreement. Individual personal data remains protected.
Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
We will not be liable for any failure to comply with this policy resulting from circumstances beyond our reasonable control, including natural disasters, government actions, or cyberattacks.
For the purposes of this Privacy Policy:
By creating an account on VidyaVriti or using our platform, you acknowledge that: