Overview
Learning Panda AI ("we," "us," or "our") operates the website learningpanda.ai and related mobile/web applications (collectively, the "Service"). This Privacy Policy describes how we handle personal information when you use our Service, and it applies to all users — students, parents, teachers, and school administrators.
We never sell your personal data. We do not sell, rent, or trade any personal information to third parties for commercial purposes.
Information We Collect
Account Information
When you create an account, we may collect:
- Name and email address
- Google account information (if you use Sign in with Google)
- Grade level, board (CBSE, ICSE, State), and school name
- Role — student, parent, or teacher
Usage Data
As you use the Service, we automatically collect:
- Questions asked, subjects studied, and sessions completed
- Progress data: XP, streaks, quiz scores, and time-on-task
- Device type, browser, operating system, and IP address
- Pages visited and features used within the app
Communications
If you contact us via email or a contact form, we retain the contents of your message and your contact details solely to respond to your inquiry.
How We Use Information
| Purpose | Lawful Basis |
|---|---|
| Provide and personalise the learning experience | Contract performance |
| Generate AI-powered answers aligned to your board | Contract performance |
| Track and display progress (streaks, XP, leaderboards) | Legitimate interest |
| Send transactional emails (account, billing) | Contract performance |
| Improve and debug the Service | Legitimate interest |
| Comply with legal obligations | Legal obligation |
| Send product updates (with your consent) | Consent |
Third-Party Services
We use the following third-party services to operate the platform. Each has its own privacy policy:
| Service | Purpose | Data Shared |
|---|---|---|
| Google OAuth | Authentication | Name, email, profile photo |
| Google Analytics | Usage analytics | Anonymised usage data, cookies |
| Cloudflare Turnstile | Bot/spam protection | Browser signals (no personal data) |
| Amazon Web Services (AWS) | Cloud hosting & email delivery | Content of emails sent via SES |
| PostgreSQL (managed) | Data storage | All structured user data |
We require all third-party processors to handle data in accordance with applicable law and to implement appropriate technical and organisational security measures.
Children's Privacy (DPDP Act 2023)
Special protections apply to all users under 18. Under India's DPDP Act, 2023, a "child" means any person under 18 years of age. Learning Panda AI takes the safety of every young learner extremely seriously.
Our Service is directed at students of all ages, including young children. We comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act), which requires verifiable parental consent before processing personal data of anyone under 18.
For users under 18
- Students under 18 must be enrolled by a school administrator, teacher, or parent/guardian — independent sign-up requires verifiable parental consent under the DPDP Act.
- We collect only the minimum data necessary for educational purposes.
- We do not show behavioural advertising to any user under 18.
- We do not use personal data of minors to build profiles for advertising or commercial purposes.
- Parents or guardians may request to access, correct, or erase their child's personal data at any time by contacting us at contact@learningpanda.ai.
Parental consent
If we discover that we have collected personal data from a user under 18 without verifiable parental consent, we will delete that data promptly. If you believe this has occurred, please contact us immediately. For full details, see our Child Safety Policy.
Data Retention & Deletion
We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time:
- Email contact@learningpanda.ai with the subject line "Delete My Account".
- We will process deletion requests within 30 days.
- Some aggregated, anonymised usage data may be retained for product improvement purposes even after account deletion.
- We retain billing records for 7 years as required by Indian tax regulations.
Cookies & Tracking
We use the following types of cookies:
| Type | Purpose | Can be disabled? |
|---|---|---|
| Essential | Login sessions, security tokens | No — required for the Service |
| Analytics | Google Analytics — usage patterns | Yes — via browser settings |
| Security | Cloudflare Turnstile bot detection | No — required for security |
You can manage or disable analytics cookies through your browser settings or by using a browser extension such as the Google Analytics Opt-out Browser Add-on.
Data Security
We implement industry-standard security measures including:
- HTTPS/TLS encryption for all data in transit
- AES-256 encryption for data at rest in our database
- Role-based access control — staff only access data necessary for their role
- Regular security audits and vulnerability assessments
- AWS infrastructure with SOC 2 compliance
No system is 100% secure. In the event of a data breach that affects your personal data, we will notify you within 72 hours as required by applicable law.
Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw Consent: Withdraw consent at any time where processing is consent-based.
To exercise any of these rights, email contact@learningpanda.ai. We will respond within 30 days.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: contact@learningpanda.ai
- Website: learningpanda.ai
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.