Expertpedia Privacy Policy

Effective Date: November 28, 2025

1. Introduction

Expertpedia ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our AI-enabled educational platform (the "Platform"), accessible through WhatsApp, web application, or mobile application.

We are a privacy-first learning platform designed for students in Classes 1-10 across India. We follow assessment-free, curiosity-driven learning principles and we design our data practices to align with the DPDP Act, 2023.

2. Information We Collect

2.1 Personal Information

When you register for or use our Platform, we collect the following minimal personal information:

• Mobile phone number (for account creation and communication)
• Student's class/grade (Classes 1-10)
• School name and location (optional)
• Syllabus type (e.g., CBSE, ICSE, State Board)
• Preferred language for content delivery

2.2 Query Data

When you submit questions or requests through WhatsApp or our web application:

• We process your queries in real-time using third-party AI service providers
• Query content is NOT stored or retained by Expertpedia
• We do NOT build individual learning profiles or query histories at this time
• Images, voice notes, or documents shared for educational purposes are processed but not permanently stored
• We do NOT use your queries to train or improve AI models
• We do NOT share your queries with any parties other than the AI service provider necessary for real-time processing

2.3 Usage Data

We may collect limited technical information:

• Device type and operating system (for compatibility)
• Browser type (for web application users)
• Access times and general geographic location (city/state level only)
• WhatsApp Business API interaction metadata (message sent/received timestamps)

3. Legal Basis for Processing Personal Data

Under the Digital Personal Data Protection Act, 2023, we process your personal data based on the following legal grounds:

You have the right to withdraw consent at any time, which will result in termination of your account and deletion of personal data.

4. How We Use Your Information

We use the collected information for the following purposes:

• To provide personalized educational content aligned with your class and syllabus
• To process and respond to your learning queries through AI assistance
• To communicate service updates, educational tips, and platform improvements
• To ensure platform security and prevent misuse
• To comply with legal obligations under applicable Indian laws

Important: We do NOT use your data for:

• Training or improving AI models
• Advertising or behavioral profiling
• Marketing to third parties
• Monetization purposes beyond our direct educational services
• Sharing with data brokers or analytics companies

5. AI Processing and Third-Party Services

5.1 Query Processing

To provide AI-powered educational assistance, student queries are processed by third-party AI service providers. Here's how this works:

• When you submit a question, only the query text itself is transmitted to AI service providers
• No personal information (name, phone number, or identifiable data) accompanies these queries
• Queries are processed in real-time and are not stored by Expertpedia
• AI providers process queries in accordance with their own privacy policies
• We do NOT use your queries to train AI models or share them with any other parties
• AI-generated responses are not stored by Expertpedia after delivery to you

5.2 WhatsApp Integration

We use WhatsApp Business API to enable communication through WhatsApp. Important clarifications:

• We use the WhatsApp Business API via approved providers.
• Messages are encrypted in transit between your device and WhatsApp.
• Our providers deliver those messages to our systems so we can respond.

WhatsApp/Meta and our providers have their own privacy policies, which may involve limited storage and logging of message data. We do not control or guarantee their independent data practices.

Users are responsible for any personal information they choose to share through WhatsApp messages beyond the required registration information

We recommend not sharing sensitive personal information beyond what is necessary for educational assistance

6. Data Storage and Security

6.1 Storage Location

Your personal information (mobile number, class, school, syllabus) is stored on secure servers located in India. We implement industry-standard security measures including:

• Encrypted data transmission (SSL/TLS)
• Access controls and authentication mechanisms
• Regular security audits and updates
• Data backup and disaster recovery procedures
• Role-based access control for authorized personnel only

6.2 Cross-Border Data Processing

To provide AI-powered educational assistance, student queries are processed by third-party AI service providers located outside India. Specifically:

• Only the query text itself crosses borders; no personal identifying information is transmitted
• AI service providers process queries in real-time without retaining personal information
• These transfers are necessary for service delivery and are conducted with appropriate safeguards
• Personal data (mobile number, class, school) remains stored exclusively in India

6.3 Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Account information is retained while your account is active
• Query data is NOT retained (processed and discarded immediately)
• After account deletion, personal information is removed within 30 days
• Backups may retain data for up to 90 days for disaster recovery purposes
• Legal compliance records may be retained longer if required by law

7. Children's Data and Parental Rights (DPDP Act Compliance)

7.1 Children's Data

Our Platform is designed for students in Classes 1-10, which typically includes children under the age of 18. Under the DPDP Act 2023, we recognize special protections for children's data.

7.2 Parental Consent

For users under 18 years of age:

• We require verifiable parental consent before collecting or processing any personal information
• Parents or guardians must register the account using their own mobile number
• By registering a student account, the parent/guardian confirms they have authority to provide consent
• Parents retain the right to review, modify, or delete their child's information at any time
• Consent verification may include additional authentication steps

7.3 Parental Rights

Parents and guardians have the right to:

• Access all information collected about their child
• Request correction of inaccurate information
• Request deletion of their child's account and all associated data
• Withdraw consent at any time, resulting in account termination
• Receive information about how their child's data is used
• Prevent sharing of child's data with third parties (we don't share anyway)

To exercise these rights, parents can contact us at privacy@expertpedia.io.

8. Duties of Data Principals (Your Responsibilities)

Under the DPDP Act 2023, as a Data Principal (user), you have certain duties when providing personal data:

8.1 Provide Accurate Information

You must provide complete, accurate, and up-to-date personal information during registration and use of the Platform.

8.2 Do Not Impersonate

You must not impersonate another person or provide false information about your identity, class, or school.

8.3 Protect Your Account

You are responsible for maintaining the confidentiality of your account credentials and for all activities under your account.

8.4 Report Inaccuracies

If you become aware that your personal information is inaccurate or incomplete, you must promptly inform us to enable correction.

8.5 Lawful Use

You must not use the Platform for any unlawful purpose or in violation of these terms and applicable laws.

8.6 Parental Responsibility

If you are a parent/guardian registering a child under 18, you must ensure the child understands how to use the Platform safely and appropriately.

9. Future Data Collection and Analytics

Currently, we do not store individual query history or build learning profiles. However, we may introduce the following features in the future:

• Anonymized, aggregated statistics about platform usage (e.g., "Students asked 10,000 math questions this month")
• Subject-wise interaction patterns to improve content quality
• Optional personalized learning recommendations based on past queries (requires separate opt-in consent)

If we introduce such features:

• We will update this Privacy Policy and notify all users at least 30 days in advance
• For features requiring personal data beyond current collection, we will obtain fresh explicit consent
• Users will have the option to opt-out while continuing to use basic services
• Any analytics will comply with DPDP Act requirements for children's data
• We will still NOT use data to train AI models or for advertising

10. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

• Service Providers: With AI service providers solely for query processing (query text only, no personal identifiers)
• Legal Requirements: When required by law, court order, or government authorities in India
• Safety and Security: To protect the rights, property, or safety of Expertpedia, our users, or others
• Business Transfers: In the event of a merger, acquisition, or sale of assets, with appropriate notice to users and compliance with DPDP Act

We do NOT share data with:

• Advertisers or marketing companies
• Data brokers or analytics companies
• Other educational institutions (unless explicitly consented by parent/guardian)
• Social media platforms
• AI model training companies

11. Your Rights Under DPDP Act 2023

You have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your account and all personal data
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw consent at any time (will result in account termination)
• Right to Nominate: Nominate another person to exercise your rights in case of death or incapacity
• Right to Grievance Redressal: File complaints with our Data Protection Officer or the Data Protection Board of India

To exercise any of these rights, contact us at privacy@expertpedia.io. We will respond within 30 days of receiving your request.

12. Cookies and Tracking Technologies

Our web application uses minimal cookies and tracking technologies:

• Essential Cookies: Required for login, session management, and platform functionality
• Performance Cookies: To understand how users interact with the platform (anonymized)

We do NOT use:

• Third-party advertising cookies
• Cross-site tracking mechanisms
• Social media tracking pixels
• Behavioral profiling cookies

You can control cookie preferences through your browser settings.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our data practices
• New features or services
• Legal or regulatory requirements

When we make material changes:

• We will notify users via WhatsApp message, email, and/or in-app notification
• We will provide at least 30 days' notice before changes take effect
• We will update the "Effective Date" at the top of this policy
• For material changes affecting children's data, we will obtain fresh parental consent
• Continued use of the Platform after the notice period constitutes acceptance of changes
• If you do not agree with changes, you may terminate your account before they take effect

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

For grievances under DPDP Act 2023, you may also contact the Data Protection Board of India.

We are committed to resolving privacy concerns promptly and will respond to all inquiries within 30 days.