Your privacy on Study Lab

In short

Who we are

Study Lab is run by Pravastu, Mumbai, India ("we", "us"). For the family version of Study Lab we decide how personal data is used, which makes us the data fiduciary under India's Digital Personal Data Protection Act, 2023 (the DPDP Act). Write to us at cd-admin@pravastu.com about anything on this page; that address also reaches the person who handles privacy questions and grievances.

Study Lab is an independent learning app and is not affiliated with NCERT, CBSE or any school board.

What we collect

We do not ask for a child's surname, date of birth, photo, address or phone number, and we do not collect payment details.

Children and parents

Study Lab is for school children in Classes 6 to 12, used with a parent or guardian involved. Under the DPDP Act, processing a child's data needs the permission of a parent or lawful guardian, so:

• Setting up a child's Study Lab asks for at least one parent or guardian with a mobile number and email, and confirms one of them with a one-time code sent to that phone or email.
• A parent or guardian can see the child's progress and activity, change or remove the family contacts, and delete the child's Study Lab or the whole account at any time (see Your choices).
• If you are a parent and believe your child is using Study Lab without your permission, write to us and we will delete the child's data.

We do not track children's behaviour for advertising, show them ads, or build profiles for anyone else. Points, streaks and badges exist only to encourage study and are not shared outside the family.

How we use it

• To run Study Lab: show books, explanations, read-aloud, quizzes and progress, and keep them in step across devices.
• To pitch explanations: the study buddy's replies use the child's first name, class, city and state, so the answer sounds right for that child.
• To send progress updates by email to the grown-ups who asked for them, at the frequency they chose.
• To check a grown-up's phone or email with a one-time code.
• To answer schools' enquiries.
• To keep Study Lab safe and working: limit abuse, investigate errors, and plan capacity, using counts rather than personal details.

We do not use your data for advertising, sell it, or use it to train AI models.

Who else sees it

These companies process data for us, each only to do its part of Study Lab. They are not allowed to use it for anything else.

Inside the family, a child's Study Lab can be shared with another grown-up's account (for example a tutor) by the account that owns it; that grown-up then sees the child's name, progress and the sharers' names and emails. The Parents page also gives an activity link: anyone who has that link can see the child's activity record, so share it only with people you trust. A link works for 90 days, and "Turn off this link" on the Parents page stops every link to that record at once.

We share data with the police, courts or government only when Indian law requires it, and we will tell you unless the law forbids it.

Where and how long we keep it

Study Lab's data is stored with Amazon Web Services in Mumbai, India. Some of the companies above work from outside India (mostly the USA) and receive only what is listed for them.

Your choices and rights

• See and correct: the profile, family contacts and progress are all shown in the app and can be edited there.
• Remove a child: from the account menu. The child's Study Lab, activity record and progress emails are deleted, unless another account it was shared with still has it.
• Delete everything: "Delete account" in the account menu deletes the account and every child's Study Lab it owns, with their activity records and progress emails.
• Stop emails: every progress email has a one-click "Stop these emails" link; you can also turn updates off on the Parents page.
• Stop sharing: remove a grown-up from a child's Study Lab in the account menu.
• Anything else: under the DPDP Act you may ask for a summary of the data we hold about you, its correction or erasure, name someone to act for you, and raise a grievance. Write to cd-admin@pravastu.com; we reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Your device and cookies

Study Lab sets no cookies and uses no analytics or advertising trackers. It keeps the child's Study Lab in your browser's own storage so it works quickly and offline, and copies it to your account when you are signed in. Signing out removes it from that device. Google's sign-in button may set Google's own cookies; see Google's privacy policy. If you allow it, the browser may show an "audio ready" notification; the microphone button uses your browser's own speech recognition, which we do not control.

Security

All traffic is encrypted (HTTPS), stored data is encrypted by Amazon Web Services, account numbers, IP addresses and one-time codes are kept only in coded form, and only the people who run Study Lab can reach the stored data. No system is perfectly safe; if a breach affects your data, we will tell you and the Data Protection Board as the law requires.

Schools

When a school gives its students Study Lab for Schools, the school decides how its students' data is used and is the data fiduciary; we process that data for the school under a written agreement, in a separate store kept only for that school. The school's own privacy notice applies, and requests about that data go to the school first.

Changes and contact

If we change this policy in a way that matters, we will say so in the app before the change takes effect, and update the date at the top. Questions, requests and grievances: cd-admin@pravastu.com, Pravastu, Mumbai, India.