Overview
Learning Panda AI ("we," "us," or "our") operates the website learningpanda.aiand related mobile/web applications (collectively, the "Service"). This Privacy Policy describes how we handle personal information when you use our Service, and it applies to all users, students, parents, teachers, and school administrators.
We never sell your personal data. We do not sell, rent, or trade any personal information to third parties for commercial purposes.
Information We Collect
Account Information
When you create an account, we may collect:
- Name and email address
- Date of birth, grade level, and board (CBSE, ICSE, State)
- Your town and state
- A parent/guardian's name, mobile number, and email
- Google account information, including your profile photo, if you use Sign in with Google
- Role, student, parent, or teacher
Usage Data
As you use the Service, we automatically collect:
- Questions asked, subjects studied, and sessions completed
- Progress data: XP, streaks, quiz scores, and time-on-task
- Device type, browser, operating system, and IP address
- Pages visited and features used within the app
Communications
If you contact us via email or a contact form, we retain the contents of your message and your contact details solely to respond to your inquiry.
How We Use Information
| Purpose | Lawful Basis |
|---|---|
| Provide and personalise the learning experience | Contract performance |
| Generate AI-powered answers aligned to your board | Contract performance |
| Track and display learning progress (streaks, XP) | Consent (parent/guardian for users under 18) |
| Send transactional emails (account, billing) | Contract performance |
| Improve and debug the Service | Legitimate interest |
| Comply with legal obligations | Legal obligation |
| Send product updates (with your consent) | Consent |
Learning Activity & Gamification
To keep learning motivating, the Service includes simple gamification features. This section explains exactly what activity data we record for them, and the limits we apply to it:
- Streaks: one record per calendar day noting that the student was active on the platform, used to show their current and longest streak.
- XP (experience points): a points total that increases with learning activity, such as starting a new conversation or sending a message to the AI tutor.
- Usage counts: daily and monthly counts of tutor messages, used only to apply the message limits of the applicable subscription plan.
This activity data:
- stays inside the platform, it is visible to the student, to their parent/guardian on request, and to authorised staff who need it to operate the Service;
- is never used for advertising, never shared or sold, and never used to build profiles for commercial purposes;
- for users under 18, is recorded in the child's interest as part of the learning experience and only after a parent/guardian has approved the account. If the parent/guardian withdraws consent, learning features lock and this activity data stops accruing.
If you are a parent or guardian and have concerns about how these features affect your child, see the wellbeing section of our Child Safety Policy or contact our Grievance Officer (details below).
Third-Party Services
We use the following third-party services to operate the platform. Each has its own privacy policy:
| Service | Purpose | Data Shared |
|---|---|---|
| Google OAuth | Authentication | Name, email, profile photo |
| Cloudflare Turnstile | Bot/spam protection | Browser signals (no personal data) |
| Amazon Web Services (AWS) | Cloud hosting & email delivery | Content of emails sent via SES |
| PostgreSQL (managed) | Data storage | All structured user data |
We require all third-party processors to handle data in accordance with applicable law and to implement appropriate technical and organisational security measures.
Children's Privacy (DPDP Act 2023)
Special protections apply to all users under 18.Under India's DPDP Act, 2023, a "child" means any person under 18 years of age. Learning Panda AI takes the safety of every young learner extremely seriously.
Our Service is directed at students of all ages, including young children. We comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act), which requires verifiable parental consent before processing personal data of anyone under 18.
For users under 18
- During onboarding we collect a parent/guardian's name, mobile number, and email, and immediately email the parent/guardian a consent request. Learning features (AI chat, doubts) stay locked until the parent/guardian explicitly approves.
- A parent/guardian can withdraw their consent at any time, as easily as giving it. Withdrawal locks the learning features again.
- We collect only the minimum data necessary for educational purposes.
- We do not show behavioural advertising to any user under 18.
- We do not use personal data of minors to build profiles for advertising or commercial purposes.
- Parents or guardians may request to access, correct, or erase their child's personal data at any time by contacting us at contact@learningpanda.ai.
Parental consent
If we discover that we have collected personal data from a user under 18 without verifiable parental consent, we will delete that data promptly. For full details, see our Child Safety Policy.
Data Retention & Deletion
- Delete your account yourself, instantly: go to Dashboard → Profile → Delete account. This immediately and permanently removes your profile, chat history, doubts, streaks, XP, usage records, consent records, and sessions from our database.
- Or email contact@learningpanda.ai with the subject line "Delete My Account".
- We will process deletion requests within 30 days.
- Some aggregated, anonymised usage data may be retained for product improvement purposes even after account deletion.
- We retain billing records for 7 years as required by Indian tax regulations.
Cookies & Tracking
We do not use analytics, advertising, or tracking cookies. Because our users are children, we do not run any third-party analytics or behavioural tracking anywhere on the Service. The only cookies we set are:
| Type | Purpose | Can be disabled? |
|---|---|---|
| Essential | Login sessions, security tokens | No, required for the Service |
| Security | Cloudflare Turnstile bot detection | No, required for security |
Data Security
- HTTPS/TLS encryption for all data in transit
- AES-256 encryption for data at rest in our database
- Role-based access control, staff only access data necessary for their role
- Regular security audits and vulnerability assessments
- AWS infrastructure with SOC 2 compliance
No system is 100% secure. In the event of a data breach that affects your personal data, we will notify you within 72 hours as required by applicable law.
Your Rights
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw Consent: Withdraw consent at any time where processing is consent-based.
To exercise any of these rights, email contact@learningpanda.ai. We will respond within 30 days.
Grievance Officer
In accordance with Section 13 of the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, our designated Grievance Officer is:
- Name: A. Akshay
- Email: akshay@learningpanda.ai
- Phone: +91 63017 03596
Grievances are acknowledged within 48 hours and resolved within 30 days. If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India established under the DPDP Act, 2023.
Contact Us
- Email: contact@learningpanda.ai
- Grievance Officer: A. Akshay, akshay@learningpanda.ai, +91 63017 03596
- Website: learningpanda.ai
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.