Overview
Learning Panda AI ("we," "us," or "our") operates the website learningpanda.aiand related mobile/web applications (collectively, the "Service"). This Privacy Policy describes how we handle personal information when you use our Service, and it applies to all users — students, parents, teachers, and school administrators.
We never sell your personal data. We do not sell, rent, or trade any personal information to third parties for commercial purposes.
Information We Collect
Account Information
When you create an account, we may collect:
- Name and email address
- Date of birth, grade level, and board (CBSE, ICSE, State)
- Your town and state
- A parent/guardian's name, mobile number, and email
- Google account information — including your profile photo — if you use Sign in with Google
- Role — student, parent, or teacher
Usage Data
As you use the Service, we automatically collect:
- Questions asked, subjects studied, and sessions completed
- Progress data: XP, streaks, quiz scores, and time-on-task
- Device type, browser, operating system, and IP address
- Pages visited and features used within the app
Communications
If you contact us via email or a contact form, we retain the contents of your message and your contact details solely to respond to your inquiry.
How We Use Information
| Purpose | Lawful Basis |
|---|---|
| Provide and personalise the learning experience | Contract performance |
| Generate AI-powered answers aligned to your board | Contract performance |
| Track and display progress (streaks, XP, leaderboards) | Legitimate interest |
| Send transactional emails (account, billing) | Contract performance |
| Improve and debug the Service | Legitimate interest |
| Comply with legal obligations | Legal obligation |
| Send product updates (with your consent) | Consent |
Third-Party Services
We use the following third-party services to operate the platform. Each has its own privacy policy:
| Service | Purpose | Data Shared |
|---|---|---|
| Google OAuth | Authentication | Name, email, profile photo |
| Google Analytics | Usage analytics | Anonymised usage data, cookies |
| Cloudflare Turnstile | Bot/spam protection | Browser signals (no personal data) |
| Amazon Web Services (AWS) | Cloud hosting & email delivery | Content of emails sent via SES |
| PostgreSQL (managed) | Data storage | All structured user data |
We require all third-party processors to handle data in accordance with applicable law and to implement appropriate technical and organisational security measures.
Children's Privacy (DPDP Act 2023)
Special protections apply to all users under 18.Under India's DPDP Act, 2023, a "child" means any person under 18 years of age. Learning Panda AI takes the safety of every young learner extremely seriously.
Our Service is directed at students of all ages, including young children. We comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act), which requires verifiable parental consent before processing personal data of anyone under 18.
For users under 18
- Students can sign up directly. During onboarding we collect a parent/guardian's name, mobile number, and email, and offer an email verification step so a parent/guardian can confirm their details and oversee the account.
- We collect only the minimum data necessary for educational purposes.
- We do not show behavioural advertising to any user under 18.
- We do not use personal data of minors to build profiles for advertising or commercial purposes.
- Parents or guardians may request to access, correct, or erase their child's personal data at any time by contacting us at contact@learningpanda.ai.
Parental consent
If we discover that we have collected personal data from a user under 18 without verifiable parental consent, we will delete that data promptly. For full details, see our Child Safety Policy.
Data Retention & Deletion
- Email contact@learningpanda.ai with the subject line "Delete My Account".
- We will process deletion requests within 30 days.
- Some aggregated, anonymised usage data may be retained for product improvement purposes even after account deletion.
- We retain billing records for 7 years as required by Indian tax regulations.
Cookies & Tracking
| Type | Purpose | Can be disabled? |
|---|---|---|
| Essential | Login sessions, security tokens | No — required for the Service |
| Analytics | Google Analytics — usage patterns | Yes — via browser settings |
| Security | Cloudflare Turnstile bot detection | No — required for security |
You can manage or disable analytics cookies via your browser settings or the Google Analytics Opt-out Browser Add-on.
Data Security
- HTTPS/TLS encryption for all data in transit
- AES-256 encryption for data at rest in our database
- Role-based access control — staff only access data necessary for their role
- Regular security audits and vulnerability assessments
- AWS infrastructure with SOC 2 compliance
No system is 100% secure. In the event of a data breach that affects your personal data, we will notify you within 72 hours as required by applicable law.
Your Rights
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw Consent: Withdraw consent at any time where processing is consent-based.
To exercise any of these rights, email contact@learningpanda.ai. We will respond within 30 days.
Contact Us
- Email: contact@learningpanda.ai
- Website: learningpanda.ai
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.