Legal

Privacy Policy

Last updated: April 23, 2026 · Effective for all schools and users of LexiGuid

LexiGuid, operated by Kruthak Technology Pvt. Ltd., is committed to protecting the privacy of students, teachers, and schools. This policy describes what data we collect, why, and how we protect it in compliance with the DPDP Act 2023 (India).

1. Who We Are

LexiGuid is an AI-powered K-12 education platform operated by Kruthak Technology Private Limited, registered in Bengaluru, Karnataka, India. Our products — LexiGuid (AI Study Companion) and LexiQues (Assessment Engine) — are available exclusively to registered schools and educational institutions.

2. Data We Collect

We collect only the minimum information necessary to provide our services:

·School & institution details (name, address, board affiliation).
·Principal / administrator contact information (name, email, phone).
·Student and teacher profiles (name, grade, role — no government IDs).
·Learning activity data: questions asked, answers viewed, quiz attempts, and session timestamps.

3. How We Use Your Data

Your data is used exclusively to:

·Provide curriculum-accurate, personalised AI tutoring and assessments.
·Generate teacher and principal analytics dashboards.
·Improve the accuracy of our AI models — only using aggregated, anonymised signals.
·Communicate service updates and critical security notices.

We do not sell, rent, or trade your personal data. We do not use student data for advertising or commercial profiling.

4. Data Security

We implement industry-standard protections:

·AES-256 encryption at rest; TLS 1.3 in transit.
·HTTP-Only session cookies inaccessible to JavaScript.
·Row-Level Security (RLS) in our database — one school's data is invisible to any other school.
·Automated PII Redaction strips personally identifiable information before any external AI model processes it.
·All infrastructure (GCP Cloud Run, PostgreSQL, Qdrant) is hosted in MeitY-empanelled India regions.

5. Compliance with DPDP Act 2023

Kruthak Technology complies with the Digital Personal Data Protection (DPDP) Act, 2023 (India). Schools act as Data Fiduciaries; we act as the Data Processor. Our obligations are formalised in a Data Processing Agreement (DPA) signed by each school's principal inside the principal portal after onboarding.

6. Parental Consent

Under the DPDP Act 2023, processing personal data of students under 18 requires verifiable parental/guardian consent. Schools are responsible for obtaining and maintaining this consent.

7. Your Rights

Parents, guardians, and adult students may:

·Request access to data we hold about a student.
·Request correction of inaccurate data.
·Request erasure of data — we will delete all personal data within 30 days of a valid request.
·Withdraw consent, which terminates platform access for that student.

Submit requests through your school administrator or directly to grievance@kruthaktech.com.

8. Data Retention

We retain personal data only for as long as the school's subscription is active, plus 30 days after termination. Learning analytics may be retained in anonymised, aggregated form for research purposes.

9. Third-Party AI Providers

LexiGuid uses third-party AI APIs to generate educational content. Before any query reaches an external provider, our Privacy Shield layer removes all student PII. External providers receive only anonymised educational context.

10. Breach Notification

In the event of a personal data breach, we will notify affected schools within 24–48 hours. Schools are responsible for notifying parents and reporting to the Data Protection Board of India as required by law.

11. Contact & Grievance

For privacy concerns, data requests, or to reach our Grievance Officer:

·Email: grievance@kruthaktech.com
·Company: Kruthak Technology Private Limited, Bengaluru, Karnataka, India.