Privacy Policy for Bidyapath.in

Effective Date: January 01, 2026

Last Updated: January 01, 2026

Bidyapath.in ("we," "us," "our," or the "Platform") is a dedicated online educational platform committed to delivering high-quality, accessible learning resources, courses, tutorials, quizzes, and interactive content to students, teachers, parents, and lifelong learners throughout India. Our mission is to democratize education by providing affordable and engaging digital learning experiences tailored to the Indian curriculum and beyond.

We place the utmost importance on protecting your privacy and handling your personal data with the highest standards of care and transparency. This Privacy Policy is designed in full compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Digital Personal Data Protection Rules, 2025, and other applicable Indian laws. It outlines how we collect, use, store, share, and protect your personal data when you access our website (bidyapath.in), mobile applications (if any), register an account, enroll in courses, participate in forums, submit assignments, or interact with our services in any way.

By using Bidyapath.in, you acknowledge and consent to the data practices described in this Policy. If you do not agree, please refrain from using our Platform.

1. Introduction and Scope

In an era where digital education is transforming learning, Bidyapath.in recognizes the critical need to safeguard user privacy. As an educational service provider, we process personal data to offer personalized learning paths, track academic progress, recommend relevant courses, facilitate teacher-student interactions, and enhance overall user experience.

This Policy applies to all individuals ("Data Principals" under the DPDP Act) who interact with our Platform, including students (minors and adults), parents/guardians, educators, and visitors. It covers the processing of digital personal data within India and extends to data processing related to services offered to individuals located in India.

We adhere strictly to the principles of the DPDP Act, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability. Processing occurs only for specified, legitimate purposes, with consent where required, or under legitimate uses permitted by law.

As of 2026, with the full operationalization of the DPDP Act and Rules, we have implemented robust mechanisms for consent management, data principal rights, breach notifications, and grievance redressal to ensure complete compliance.

2. Key Definitions

• Personal Data: Any data that can identify an individual, directly or indirectly, such as name, email, phone number, educational records, or IP address.
• Data Principal: You, the individual to whom the personal data relates.
• Data Fiduciary: Bidyapath.in, the entity that determines the purpose and means of processing personal data.
• Processing: Any operation on personal data, including collection, storage, use, disclosure, adaptation, or deletion.
• Consent: Free, specific, informed, unconditional, and unambiguous consent, often with the option to withdraw.
• Child: An individual under the age of 18 years, requiring verifiable parental consent for certain processing.

3. Information We Collect

We collect personal data in a minimal and purposeful manner to deliver our educational services effectively.

3.1 Information Provided by You

When registering, enrolling, or engaging with features:

• Basic profile details: Full name, email address, mobile number, date of birth, gender, location (city/state), and profile photo.
• Educational details: Class/grade level, school/college name, board (e.g., CBSE, ICSE, State Board), subjects of interest, academic goals, and performance metrics (quiz scores, completion rates).
• Parent/Guardian information: For users under 18, name, email, and phone number for verifiable consent.
• Payment information: Billing address, transaction details (processed via secure gateways like Razorpay or Paytm; we do not store full card numbers).
• User content: Forum posts, comments, assignment submissions, feedback, and support queries.
• Communication preferences: Subscription to newsletters or notifications.

3.2 Automatically Collected Information

• Device and log data: IP address, browser type/version, operating system, device identifiers, access times, and pages viewed.
• Usage analytics: Courses viewed, time spent on videos/lessons, quiz attempts, progress trackers, and interaction patterns.
• Cookies and tracking technologies: Essential cookies for session management, functional cookies for preferences, and analytical cookies (e.g., Google Analytics) for performance insights.

3.3 Information from Third Parties

• Social login providers (e.g., Google, Facebook): Profile data if you choose single sign-on.
• Educational partners: Aggregated data from schools or coaching institutes for collaborative programs.

We do not collect unnecessary or excessive data and avoid processing that could harm child well-being.

4. How We Use Your Personal Data

Your data enables us to provide a seamless, personalized educational experience:

• Account creation, authentication, and management.
• Delivering courses, assessments, certificates, and progress reports.
• Personalized recommendations (e.g., suggesting subjects based on performance).
• Facilitating interactions (forums, doubt-clearing sessions).
• Processing payments and issuing receipts/certificates.
• Sending transactional notifications, updates, and (with consent) promotional content.
• Improving services through anonymized analytics and research on learning trends.
• Detecting fraud, ensuring security, and complying with legal obligations.
• Conducting educational research (aggregated, non-identifiable form).

All uses are limited to the purposes disclosed at collection or compatible legitimate uses under the DPDP Act.

5. Legal Basis for Processing

Under the DPDP Act and Rules 2025:

• Consent: Primary basis for marketing, non-essential cookies, and optional features. Consent is granular, easy to withdraw, and verifiable for children.
• Legitimate Uses: For service delivery, legal compliance, employment, state functions, emergencies, or public interest (e.g., educational safety).
• Deemed Consent: For reasonable expectations, such as voluntary data sharing during enrollment.

For children under 18, we obtain verifiable parental/guardian consent for non-essential processing, prohibiting detrimental activities (e.g., behavioral tracking for advertising).

6. Sharing and Disclosure

We do not sell personal data. Sharing is limited:

• With service providers (e.g., cloud hosts like AWS India, analytics tools, payment gateways) under strict contracts ensuring equivalent protection.
• Educational partners for joint programs (anonymized where possible).
• Legal authorities for compliance, investigations, or court orders.
• During business transfers (mergers/acquisitions).
• With explicit consent for any other purpose.

Cross-border transfers use adequate safeguards (e.g., standard contractual clauses).

7. Data Security Measures

We employ industry-standard safeguards:

• Encryption (SSL/TLS for transit, AES-256 at rest).
• Access controls, multi-factor authentication, and role-based permissions.
• Regular security audits, vulnerability scans, and penetration testing.
• Employee training and data protection agreements.
• Breach response plan: Notification to Data Protection Board and affected users within stipulated timelines.

While no system is infallible, we prioritize reasonable security to prevent unauthorized access, loss, or alteration.

8. Data Retention

Data is retained only as long as necessary:

• Account data: Active + 3 years post-deletion for dispute resolution.
• Educational records: Duration of course + reasonable period.
• Financial records: 8 years (per tax laws).
• Anonymized analytics: Indefinitely.

Upon request or account deletion, data is erased or anonymized, subject to legal holds.

9. Your Rights as a Data Principal

Under the DPDP Act, you have:

• Right to access, confirmation, and copies of your data.
• Right to correction, completion, or update.
• Right to erasure (with exceptions for legal obligations).
• Right to withdraw consent.
• Right to data portability (where applicable).
• Right to nominate (for post-mortem handling).
• Right to grievance redressal.

Exercise rights via privacy@bidyapath.in. We respond promptly (within 30 days or as prescribed).

10. Children's Privacy

Our Platform welcomes learners of all ages but requires verifiable parental consent for users under 18 for non-essential features. We do not engage in detrimental processing (e.g., targeted ads harming well-being). Parents can access, correct, or delete child data anytime.

11. Cookies and Tracking

We use cookies for functionality, analytics, and (with consent) advertising. Manage preferences via our cookie banner or browser settings. Essential cookies cannot be disabled.

12. Third-Party Links

Links to external sites (e.g., YouTube embeds, partner portals) are not governed by this Policy. Review their privacy practices.

13. Changes to Policy

We may update this Policy. Material changes will be notified via email, in-app alerts, or prominent notices. Continued use implies acceptance.

14. Grievance Redressal

Contact our Grievance Officer:
Email: bidyapathofficialhandle12@gmail.com
Address: Nalbari, Assam, PIN - 781138
We aim to resolve grievances within 30 days. If unsatisfied, you may approach the Data Protection Board of India.

15. Contact Us

Bidyapath.in
Email: bidyapathofficialhandle12@gmail.com
Address: Nalbari, Assam, PIN - 781138, India

This Policy is governed by the laws of India. Thank you for trusting Bidyapath.in with your learning journey.