Privacy Policy

This Privacy Policy explains how Shreeyanshi Katre, operating as a sole proprietor under the brand name “ANKA by Shree” (“ANKA”, “we”, “us”) collects, uses, shares, and protects personal data when a Parent or Student uses the ANKA by Shree mobile application, the website at https://ankabyshree.in, and related services (the “Service”).

This policy is issued under, and is to be read consistently with, the Digital Personal Data Protection Act, 2023 (“DPDP”). It applies to all Personal Data we process about Indian Parents and Students.

1. Who we are

The Service is delivered primarily by Shreeyanshi Katre, the lead instructor of ANKA by Shree.

• Data Fiduciary: Shreeyanshi Katre (sole proprietor, ANKA by Shree)
• Data Protection Officer: Shreeyanshi Katre, privacy@ankabyshree.in
• Grievance Officer: Shreeyanshi Katre, support@ankabyshree.in

2. The fact that every user is a child

Every Student using the Service is a minor under DPDP (under 18). We therefore process Student data only with the verifiable consent of a Parent or legal guardian, given by the Parent in person at first login to the App.

Specifically, when an Account is created for a Student, the Parent receives the credentials and is required to log in first, review this Policy and the Terms of Service in full, and tick to confirm consent. That action is recorded as verifiable parental consent under DPDP §9.

3. The data we collect

From the Parent (you), at enrolment

• Full name
• WhatsApp number
• Email address
• City of residence
• Relationship to the Student
• Payment confirmation reference (we do not collect card numbers or bank details — payment is via direct UPI / bank transfer and the bank handles those details)

About the Student

• Name (first name preferred)
• Class group (4–6 / 7–9 / 10+) or age group
• Class schedule and attendance
• Practice answers, scores, accuracy, streak, level, achievements
• Lesson watch progress
• A bcrypt hash of the Parent's PIN (used to gate parent-only screens in the App; we never store the plain PIN)

Automatically, on use

• Device type, operating system version, and App version
• App crash logs (if any)
• IP address at the time of login and at the time of consent acceptance
• Session timestamps

From the Site

• Form submissions on the reservation form (same fields as enrolment, captured before Account creation)
• Standard server logs (IP, user-agent, request paths)

We do not collect: precise location, contacts, photos, microphone or camera streams, device advertising identifiers, or any biometric data.

4. Why we collect it (purposes)

• To create and operate the Student's Account.
• To deliver Live Classes, lessons, practice, and progress feedback.
• To communicate with the Parent about classes, payments, results, and important notices.
• To improve the Service (anonymised, aggregated analysis only).
• To comply with legal obligations (e.g. tax records, retention required by law, response to lawful requests).
• To prevent fraud, abuse, and safety incidents.

We do not use Student data for advertising, profiling for marketing, behavioural tracking, or any decision likely to cause detrimental effect to the Student's wellbeing. This restriction is required by DPDP §9(3) for child data, and we apply it without exception.

5. Legal basis

For Students (all minors): verifiable parental consent under DPDP §9, given by the Parent at first login.

For the Parent: consent (form submission, first-login acceptance) and performance of contract (Terms of Service).

6. With whom we share

We share Personal Data only with the following processors and only for the listed purposes:

We do not sell Personal Data. We do not share Student data with advertisers, data brokers, or any party not listed above.

7. Cross-border transfers

Some of our processors are located outside India (United States, Ireland). DPDP §16 permits transfers to countries not on a Central Government restricted list. We remain responsible under DPDP for Personal Data transferred to our processors and bind them to confidentiality and security obligations through contracts.

8. How long we keep data

• Active Account data: while the Account is active.
• After Account termination: anonymised within 90 days, except where retention is required by law (e.g. tax records — 6 years, as per Indian Income Tax Act).
• Consent records and audit logs: 3 years after consent withdrawal or Account termination, for compliance evidence.
• Live Class recordings (if made): 90 days.
• Lead-form submissionsthat don't convert to an Account: deleted from the Google Sheet within 12 months.

9. Security

We use:

• TLS in transit for all App ↔ server traffic.
• Bcrypt password and PIN hashing.
• Token-based authentication with rotation.
• Role-based admin access on the backend.
• Daily encrypted backups of the database.
• Reasonable physical, technical, and administrative measures proportionate to our scale.

No system is perfectly secure. If we become aware of a breach affecting Personal Data, we will notify the affected Parent and the Data Protection Board of India as required by DPDP, without undue delay.

10. Your rights

The Parent (acting for the Student) has the following rights under DPDP:

• Access — request a copy of the Personal Data we hold about the Student and the Parent.
• Correction & completion — request that inaccurate or incomplete data be corrected.
• Erasure — request deletion of Personal Data, subject to lawful retention exceptions.
• Grievance redressal — raise a complaint with the Grievance Officer (see §1). If unresolved within 30 days, escalate to the Data Protection Board of India.
• Nomination— nominate a person to exercise these rights on the Student's behalf in case of the Parent's incapacity or death.
• Withdraw consent — at any time, in writing to support@ankabyshree.in. Withdrawal results in Account deactivation and data deletion per §8.

To exercise any right, email support@ankabyshree.infrom the Parent's email address on file. We respond within 30 days.

11. Special protections for children

Because every Student is a minor, we apply the following protections — required by DPDP §9 and as a matter of policy:

• No behavioural tracking of the Student.
• No targeted advertising to the Student.
• No profilingthat affects the Student's wellbeing.
• No third-party analytics SDKs that build advertising profiles. Crash reporting and aggregate usage counts are permitted, with no identifiers.
• The “Quest”, “Streak”, and “XP” systems in the App are gamification of learning progress, used only to reinforce the Student's own learning. They are not, and will never be, used to target the Student or anyone in their household with advertising.

12. Cookies (Site only)

The Site uses minimal cookies — essential cookies for session and a single first-party cookie to remember if a visitor has dismissed the intro animation. We do not use third-party advertising cookies. We do not use Google Analytics.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated at least 15 daysin advance via the App, email, or WhatsApp. On the next login after a material change, the Parent will be asked to re-accept the updated Policy. The “ Effective date” and “Version” at the top reflect the current version; older versions are archived and available on request.

14. Contact

For any privacy question, complaint, or right exercise:

• Email: support@ankabyshree.in
• Phone / WhatsApp: +91 6266817362

For unresolved complaints, the Parent may escalate to the Data Protection Board of India once it becomes operational.