Privacy Policy & Data Protection
Effective Date: October 28, 2026 • Compliant with the Digital Personal Data Protection Act, 2023 (India)
Welcome to MyTextbookAI (operated by MyTextbookAI, “we”, “us”, or “our”). We respect your privacy and are committed to safeguarding personal data in accordance with the laws of India, specifically the Digital Personal Data Protection Act, 2023 (“DPDPA 2023”), the Information Technology Act, 2000 (“IT Act”), and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
For the purposes of the DPDPA 2023, MyTextbookAI acts as the Data Fiduciary that determines the purpose and means of processing personal data, and you (the student, parent, lawful guardian, or educator) are the Data Principal.
1. Categories of Personal Data We Collect
We only collect personal data that is necessary to provide our voice-first AI textbook companion and learning tools:
- Identity & Authentication Data: Name, email address, mobile phone number, and profile picture collected via Google OAuth authentication or direct sign-in.
- Academic Profile Data: Voluntary information regarding the student's grade or standard (Classes 1 through 12), school board (e.g., CBSE, ICSE, GSEB, State Boards), medium of instruction (English, Hindi, Gujarati), and school name.
- Interactive Learning & Educational Inputs: Textbook queries, voice dictations, audio prompts, doubt clearing requests, mock test responses, quiz scores, and student progress metrics.
- Technical & Usage Data: Internet Protocol (IP) address, browser type, device information, operating system, and application log timestamps collected automatically for system security and operational integrity.
2. Lawful Grounds and Purpose of Data Processing
Under Section 4 and Section 6 of the DPDPA 2023, we process personal data only based on your explicit, informed, and unambiguous consent, or for legitimate pedagogical purposes:
- To provide curriculum-locked AI textbook answers, chapter notes, and personalized voice explanations.
- To authenticate your student or parent account securely without storing plain-text passwords.
- To generate mock test evaluations, diagnostic quiz analytics, and revision materials.
- To process subscription payments and service requests via authorized payment gateways.
- To comply with statutory legal obligations and respond to grievance requests under Indian law.
3. Protection of Children's Personal Data (Section 9 Compliance)
Because MyTextbookAI caters to K-12 school students (Classes 1 through 12), we adhere strictly to Section 9 of the Digital Personal Data Protection Act, 2023:
- Verifiable Parental / Guardian Consent: For any user who is a child (under 18 years of age), account creation and data processing must be authorized by a parent or lawful guardian.
- No Behavioral Tracking or Profiling: We strictly do NOT track or monitor the behavioral patterns of children across third-party websites or services.
- Zero Targeted Advertising: We do NOT serve targeted advertisements to children. All learning experiences are non-commercial and strictly educational.
- Detrimental Effect Prohibition: We do not engage in any processing of personal data that could cause detrimental effects on the physical, mental, or moral well-being of a child.
4. Rights of the Data Principal
In accordance with Chapter III of the DPDPA 2023, you hold the following statutory rights regarding your personal data:
- Right to Access: You have the right to obtain a summary of your personal data being processed and the processing activities undertaken.
- Right to Correction & Erasure: You can request correction of inaccurate data, completion of incomplete data, or total erasure of personal data that is no longer necessary for educational purposes.
- Right to Withdraw Consent: You may withdraw your consent for future processing at any time through account settings or by emailing our Grievance Officer.
- Right of Grievance Redressal: You have the right to have your grievances addressed through our Grievance Redressal mechanism.
- Right to Nominate: You have the right to nominate any individual who shall, in the event of your death or incapacity, exercise your data rights.
5. Data Storage, Security & International Transfers
We maintain reasonable technical, operational, and organizational security standards in accordance with Rule 8 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
- All personal data and textbook interactions are encrypted in transit using industry-standard TLS/SSL encryption and stored in secure encrypted cloud infrastructure.
- We do not sell, rent, or trade student or user personal data to any third-party marketers or advertisers.
- Cross-border data transfers, if any, are conducted in strict compliance with Central Government regulations and restrictions formulated under the DPDPA 2023.
6. Third-Party Service Providers
We engage vetted third-party service providers (Data Processors) under strict confidentiality and data protection agreements:
- Cloud & Database Hosting: Secure cloud infrastructure to host textbooks, quizzes, and account data.
- AI Processing APIs: Multi-modal inference providers to generate textbook-grounded explanations without retaining your personal identity.
- Payment Processors: RBI-compliant payment gateways (e.g., Cashfree) to process subscription fees securely without storing your card or net-banking credentials on our servers.
7. Data Retention & Deletion Policy
We retain your personal data only for as long as your account remains active or as required to fulfill educational and analytical purposes. When an account is deleted or consent is withdrawn, personal data is irreversibly deleted or anonymized within 30 days, except where retention is mandated by applicable statutory laws of India.
8. Grievance Redressal Officer
In accordance with Section 10 of the DPDPA 2023 and the Information Technology Act, 2000, MyTextbookAI has appointed a designated Grievance Officer to address any data protection concerns, requests, or complaints:
Grievance Officer
Organization: MyTextbookAI
Email: mytextbookai@gmail.com
Country: India
Resolution Timeline: Within 30 days of receiving a verified request
If your grievance is not resolved satisfactorily by our Grievance Officer, you hold the statutory right to escalate your complaint to the Data Protection Board of India (DPBI) in the manner prescribed under the DPDPA 2023.
9. Updates to This Policy
We may periodically revise this Privacy Policy to reflect evolving regulations or modifications to our educational platform. Updated versions will be published on this page with an updated Effective Date. Continued use of MyTextbookAI constitutes your acknowledgment of the updated policy.
