Privacy Policy

This Privacy Notice describes how MindTrace Education Private Limited ("MindTrace", "we", "us") collects and processes personal data when you or your child use the MindTrace learning platform (the "Service"). MindTrace is the data controller for personal data processed through the Service.

1. Data we collect

• Account data: name, email address, login credentials, role (student, parent, teacher, admin).
• Learner profile data: subject enrolment, grade/curriculum context, study preferences.
• Learning telemetry: practice attempts, mock exam responses, timings, evidence signals used to compute the Academic Twin, predictions, and recommendations.
• Parent link data: parent–child relationships, invitation records, report views.
• Support data: messages you send us and correspondence metadata.
• Device and log data: IP address, device identifiers, browser type, session logs, error traces.

2. Purposes and legal bases

• Providing the Service, creating your account, and delivering personalised learning — performance of contract.
• Security, fraud prevention, and platform integrity — legitimate interests.
• Product improvement and analytics — legitimate interests.
• Compliance with tax, accounting, and legal obligations — legal obligation.
• Marketing communications, where applicable — consent (you may withdraw at any time).

3. Children's data

The Service is designed for learners including those under 18. Where a learner is a minor, we require verifiable parental consent before processing their personal data, in line with the Digital Personal Data Protection Act, 2023 (India). Parents may review, correct, or request deletion of their child's data at any time by contacting us at mindtrace.platform@gmail.com.

4. Data sharing and subprocessors

We share personal data only with the following categories of recipients:

• Paddle.com Market Ltd — Merchant of Record for all orders. Paddle processes payments, subscription lifecycle, tax, invoicing, and customer refund handling.
• Supabase — managed database, authentication, and storage infrastructure.
• Cloudflare — hosting, edge delivery, and DDoS protection.
• Lovable AI Gateway — AI inference for supported learning features.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

5. Retention

We retain account and learning data for as long as your account is active and for a reasonable period afterwards to meet legal, tax, and dispute-resolution obligations. You may request deletion at any time; learning data associated with a deleted account is anonymised or erased within 90 days unless retention is required by law.

6. Security

We apply appropriate technical and organisational measures including encryption in transit, access controls, role-based permissions with row-level security, and audit logging for privileged operations. No system is perfectly secure; we work to reduce risk continuously.

7. Your rights

Subject to applicable law, you have the right to access, correct, erase, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. Contact us at mindtrace.platform@gmail.com to exercise these rights.

8. Cookies

We use strictly necessary cookies for authentication and session integrity, and limited analytics cookies to improve the Service. You can manage cookies in your browser settings.

9. Contact

MindTrace Education Private Limited
Email: mindtrace.platform@gmail.com