Privacy Policy

This Privacy Policy explains how Know Learn collects, uses, stores, shares, protects, and deletes personal data when users access the Know Learn website, PWA, mobile apps, student portal, teacher portal, parent portal, institute portal, admin portal, AI tutor, live classes, assessments, subscriptions, and related services.

This Privacy Policy is intended to comply with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025, which require clear consent notices, itemized descriptions of personal data, stated purposes, easy consent withdrawal, rights access, grievance redressal, security safeguards, and breach notification.

1. Data Fiduciary

For the purpose of applicable Indian data protection law, Expectation Walkers GenAI Research and Services Pvt. Ltd., operating Know Learn, is the Data Fiduciary for personal data collected through the Platform.

2. Users Covered by this Policy

This Policy applies to:

• Students
• Parents and lawful guardians
• Teachers
• Institute administrators
• Platform administrators
• Visitors
• Institutional representatives
• Users accessing paid or free services

For children below 18 years, consent may be required from a parent or lawful guardian. The DPDP Rules define an adult as an individual who has completed 18 years and require appropriate measures for verifiable parental consent before processing a child’s personal data.

3. Personal Data We Collect

Know Learn may collect the following categories of personal data, depending on user role and feature usage.

A. Account and Identity Data:

• Full name
• Email address
• Phone number
• Username or user ID
• Password authentication data
• Role, such as student, teacher, parent, admin, or institute admin
• Institution name
• Course, batch, semester, subject, and enrollment details
• Parent or guardian details where applicable
• Profile photo, if uploaded

B. Student Academic Data:

• Course enrollments
• Attendance records
• Assignment submissions
• Exam attempts
• Marks, grades, and feedback
• Progress percentage
• Learning streaks and XP points
• Doubts, messages, and support tickets
• Personalized learning level, such as beginner, intermediate, or advanced

C. Face Verification and Camera Data:

Know Learn may process face-related data for identity verification, login, attendance, and academic integrity. This may include:

• Face descriptors or mathematical face templates
• Camera verification status
• Attendance verification logs
• Device session verification data
• Face approval or pending verification status

Know Learn should avoid storing raw face images unless strictly necessary. Where face data is used, it should be protected with strong access controls and security measures.

D. Live Class and Communication Data:

• Live class participation records
• Poll responses
• Hand-raise activity
• Chat messages
• Questions and answers
• Reactions
• Waiting room approval status
• Teacher-student doubt communication

E. AI Usage Data:

• Prompts submitted to Atlas AI
• AI-generated responses
• Course context used for AI tutoring
• Notes generation requests
• Translation requests
• Text-to-speech requests
• AI grading inputs and outputs
• Token usage, cost logs, and generation records

F. Payment and Subscription Data:

• Plan type
• Subscription status
• Purchase status
• Entitlement details
• Transaction reference
• Payment provider response
• Refund, cancellation, renewal, or expiry status

Know Learn should not store complete card numbers, UPI PINs, CVV, or banking passwords. Such payment details should be processed only by authorized payment providers or app store billing systems.

G. Device and Technical Data:

• Device type
• Browser type
• Operating system
• IP address
• Login time
• Session status
• Active device records
• App version
• Crash logs
• Security logs
• Usage logs
• Cookies or similar technologies

H. Support and Communication Data:

• Support ticket content
• Emails and messages sent to support
• Feedback
• Complaint records
• Institute communication records

4. Purpose of Processing

Know Learn processes personal data for the following purposes:

• Creating and managing user accounts
• Authenticating users
• Enabling student, teacher, parent, institute, and admin portals
• Providing course access
• Managing institutional approvals
• Delivering live classes
• Recording attendance
• Verifying identity through face verification
• Preventing proxy attendance and account misuse
• Conducting exams and assignments
• Detecting exam integrity issues
• Generating AI notes, tutoring responses, translations, audio, and feedback
• Personalizing learning tracks
• Managing subscriptions and entitlements
• Processing payments and renewals
• Providing support
• Sending service notifications
• Maintaining security logs
• Preventing fraud, misuse, cheating, and unauthorized access
• Improving Platform performance and user experience
• Complying with legal obligations
• Responding to lawful requests from authorities

We do not process personal data for purposes unrelated to Know Learn services unless we obtain consent or have a lawful basis under applicable law.

5. Consent

By creating an account, using Know Learn, enabling camera permissions, submitting academic content, joining live classes, using AI tools, purchasing subscriptions, or accessing institutional services, you consent to the processing of your personal data for the purposes described in this Policy.

Where consent is required, it must be free, specific, informed, clear, and given through affirmative action. Under the DPDP Act, users also have the right to withdraw consent, and withdrawal should be as easy as giving consent.

You may withdraw consent by contacting us at knowlearn@expectationwalkers.tech or using available account settings. Withdrawal may affect your ability to use certain features, such as login, attendance, exams, AI tutoring, subscriptions, or institutional access.

6. Face Data and Biometric-Like Verification

Know Learn may use face verification for secure login, attendance, identity confirmation, and exam integrity.

Face verification data will be used only for Platform security and academic verification purposes.

We aim to follow these safeguards:

• Use face descriptors or templates instead of raw images where possible.
• Restrict access to authorized personnel only.
• Store face verification data securely.
• Avoid sharing face data except where needed for service delivery, legal compliance, or security.
• Allow deletion or re-verification requests where legally and technically possible.
• Avoid using face data for advertising, profiling, or unrelated commercial purposes.

7. AI Processing and Third-Party AI Providers

Know Learn may use AI service providers to generate tutoring responses, notes, translations, text-to-speech audio, exam questions, model answers, grading feedback, and personalized learning paths.

Data sent to AI systems may include academic prompts, course content, student answers, learning level, selected subject, module context, language preference, and related educational information.

Users should not enter highly sensitive personal information into AI chat unless necessary for learning support.

AI outputs are generated automatically and may require teacher or institutional review before being treated as final academic evaluation.

8. Data Sharing

Know Learn may share limited personal data with the following categories of recipients:

• Cloud hosting providers
• Authentication providers
• Database providers
• AI and language processing providers
• Payment gateways
• Subscription management providers
• App stores
• SMS, email, or notification providers
• Educational institutions
• Teachers and administrators
• Legal, regulatory, or law enforcement authorities where required
• Technical support and security service providers

We share data only for service delivery, legal compliance, security, payment processing, academic administration, or user support.

9. Third-Party Services Used

Know Learn may use services such as:

• Firebase Authentication and Cloud Functions
• Supabase database and realtime services
• OpenAI APIs
• Sarvam AI APIs
• RevenueCat subscription services
• Google Play Billing
• Apple App Store billing
• Payment gateways
• Cloud hosting and storage providers
• Email, SMS, and notification providers

Each provider may process data under its own terms and privacy policy. Know Learn will take reasonable steps to use reliable providers and apply contractual or technical safeguards where applicable.

10. Cookies and Similar Technologies

Know Learn may use cookies, local storage, device storage, or similar technologies to:

• Keep users logged in
• Maintain session security
• Remember preferences
• Improve performance
• Enable role-based access
• Detect suspicious sessions
• Support analytics and debugging

Users may control cookies through browser settings, but disabling them may affect Platform functionality.

11. Data Security

Know Learn will take reasonable technical and organizational security measures to protect personal data.

These may include:

• Encryption
• Access controls
• Role-based permissions
• Authentication controls
• Secure APIs
• Logging and monitoring
• Backups
• Database security policies
• Secure cloud function handling
• Audit trails
• Session management
• Limiting access to authorized users

The DPDP Rules, 2025 specify minimum reasonable security safeguards such as encryption, masking or tokenization where appropriate, access controls, logs, monitoring, backups, processor contracts, and technical and organizational safeguards.

No platform can guarantee absolute security. Users must also keep their passwords, devices, and accounts safe.

12. Data Breach Notification

If Know Learn becomes aware of a personal data breach, we will take reasonable steps to investigate, contain, and mitigate the incident.

Where legally required, we will notify affected users and the Data Protection Board of India. The DPDP Rules require affected users to be informed without delay in clear language and require notification to the Board, including detailed information within 72 hours of becoming aware of a breach, unless a longer period is allowed.

13. Data Retention

Know Learn will retain personal data only for as long as necessary for:

• Providing services
• Maintaining academic records
• Supporting institutional requirements
• Subscription and payment records
• Legal compliance
• Security and fraud prevention
• Dispute resolution
• Audit and reporting

Certain logs and processing records may be retained for at least one year where required by applicable rules or legal obligations. The DPDP Rules require retention of personal data, associated traffic data, and processing logs for a minimum period of one year for specified purposes, unless a longer legal requirement applies.

Academic records may be retained for longer if required by institutions, universities, legal obligations, audit needs, or certification requirements.

14. User Rights

Subject to applicable law, users may have the right to:

• Access their personal data
• Know how their data is used
• Correct inaccurate data
• Complete incomplete data
• Update outdated data
• Request erasure of personal data
• Withdraw consent
• Raise grievances
• Nominate another person to exercise rights where applicable

The DPDP Act provides rights relating to access, correction, completion, updating, erasure, grievance redressal, and nomination.

Requests may be submitted to:

We may verify your identity before processing the request.

15. Grievance Redressal

Users may raise privacy, data, account, security, or platform-related complaints through the contact details below.

We will aim to respond within the period required by applicable law. The DPDP Rules require Data Fiduciaries to publish contact details and provide a grievance response period not exceeding 90 days.

16. Data Transfer Outside India

Know Learn may use cloud, AI, payment, subscription, or technology providers located outside India. Where personal data is transferred outside India, we will follow applicable Indian law and any restrictions or requirements specified by the Government of India.

The DPDP Rules permit transfer of personal data outside India subject to requirements that may be specified by the Central Government.

17. App Store and Play Store Disclosure

For Android and iOS apps, Know Learn may be required to disclose data practices in Google Play Data Safety and Apple App Privacy sections.

Google Play requires developers to provide information on data collection, sharing, and security practices for display on the app listing. Apple requires disclosure of data collected from apps unless an optional disclosure exception applies.

Know Learn’s store disclosures should match this Privacy Policy.

18. Marketing and Communications

Know Learn may send service messages related to accounts, classes, attendance, exams, subscriptions, payments, support, security, and platform updates.

Promotional messages may be sent only where permitted by law and user preference. Users may opt out of non-essential marketing communications.

19. Deletion of Account

Users may request account deletion by contacting knowlearn@expectationwalkers.tech

Deletion may be subject to:

• Institutional requirements
• Pending payments
• Academic record retention
• Legal obligations
• Security logs
• Dispute resolution
• Audit requirements

After deletion, some records may be retained in anonymized, aggregated, archived, or legally required form.

20. Updates to this Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on the Platform with the revised date.

Where legally required, we may notify users through email, in-app notice, website notice, or other communication channels.

21. Contact Us

For privacy questions, consent withdrawal, account deletion, data access, correction, grievance, or legal requests, contact: