Privacy Policy

This Privacy Policy applies to the Pragati AI educational ecosystem, mobile web interfaces, coding studios, and accompanying mascot companions operated by Vyomara Technologies Pvt. Ltd. ("Vyomara", "Company", "we", "us", or "our"), incorporated under the Companies Act of India.

We adhere strictly to the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, the Children's Online Privacy Protection Act (COPPA) of the United States, and international best practices for children's digital safety.

We practice strict data minimization and collect only the information required to deliver personalized educational curricula, track gamified mastery, and maintain student safety:

• Account Credentials: Guardian or student email address and authentication identifiers managed securely via Clerk Authentication. We do not store raw plaintext passwords.
• Academic Profile: Grade / Class selection (Classes 5 to 12), school or campus name, state, and district (used solely for campus cohort leaderboards and CBSE-aligned course personalization).
• Learning Progress & Telemetry: Course completion timestamps, quiz scores, daily learning streaks, code submitted inside our Python & Blockly sandbox, and companion pet evolutions.
• Parent Safety PIN: A 4-digit hashed security PIN configured by parents to restrict account settings and manage daily screen allowances.
• Payment Information: For Pro Student subscriptions, transactions are processed directly by our RBI-licensed payment gateway partner (Razorpay). Pragati AI never stores or handles credit/debit card numbers or bank account credentials.

Strict AI Non-Training Guarantee: Conversations between students and Pragati AI companions (such as Byte, Milo, Kumo, Rexi, or Advance Cyber Mentors) are never used to train, fine-tune, or calibrate public commercial AI models (e.g., OpenAI, Anthropic, Google, or open-source LLMs).

AI queries are passed through real-time semantic guardrails to prevent profanity, personal information leakage, or exposure to inappropriate web content. Prompts are evaluated strictly in real-time to generate instant Socratic hints and are not harvested for advertising.

Pragati AI operates on a transparent, subscription-supported educational model. We do not participate in advertising networks or programmatic behavioral data markets:

• We do not sell, rent, or lease student personal data to third parties under any circumstance.
• We do not display third-party advertisements or sponsored behavioral banners anywhere on the platform.
• We do not build behavioral commercial profiles or track student browsing activity across external websites.

We implement defense-in-depth infrastructure to secure student information:

• Encryption in Transit: TLS 1.3 enforced across all web interfaces and microservice APIs with HTTP Strict Transport Security (HSTS).
• Encryption at Rest: AES-256 bit encryption on persistent relational databases, Redis cache layers, and automated cold backups.
• Code Sandbox Isolation: Student code execution runs inside isolated, ephemeral container sandboxes with restricted network privileges.

Parents and legal guardians maintain comprehensive authority over their student's data at all times:

• Access & Review: Parents can view their student's activity, badges, quiz metrics, and saved projects via the dashboard.
• Parental PIN Protection: Sensitive controls and account modifications require the 4-digit Parent PIN set during onboarding.
• Account Deletion: Parents may request the complete deletion of their child's account, learning logs, and submitted work by emailing privacy@pragatilearn.com. Requests are permanently executed within 30 days.

In accordance with the Indian Information Technology Act and the DPDP Act 2023, you may contact our designated Grievance & Privacy Officer with any questions or formal notices: