Privacy Policy

We collect only what running the academy needs:

• Account details: email, password (stored hashed), phone if you share it.
• For school learners: learner name, grade and age, plus the parent's recorded consent.
• Billing details: billing state, optional GSTIN, and invoice records.
• Learning activity: lesson progress, batch assignment, Anbu AI questions (counted daily for fair-use limits) and device sessions.
• Anbu answers you choose to share: after you mark an answer “Needs work”, Anbu asks whether to share that one question and answer with our team. Only if you tap Share do we keep it, with your account, to improve Anbu; it is deleted after 90 days.
• Enquiries: whatever you type into our contact and enquiry forms.

Under India's Digital Personal Data Protection Act, we process a child's data only with a parent's verifiable consent, taken at signup. We never target advertising at children, and we never sell any personal data. Parents may review, correct or delete their child's data — or withdraw consent entirely — by writing to hello@thiranaiacademy.com. Withdrawing consent ends the child's access.

• Supabase — account hosting, database and sign-in.
• Razorpay — payments (they handle card/UPI data; we never see it).
• Google (Gmail) and Brevo — transactional emails such as receipts and batch links.
• OpenRouter — routes Anbu AI tutor questions to the AI models that generate answers (DeepSeek, MiniMax and Meta models, and Exa when you turn web search on). Your chats stay in your browser: we keep only daily counts, plus any answer you choose to share (deleted after 90 days). Files you attach are never stored. “Delete my Anbu data” in Anbu's settings removes your settings and everything you shared.

Each processor handles data under its own terms and only for the job above. We do not sell personal data to anyone.

You may ask for a copy of your data, corrections, or deletion at any time by emailing us. Deletion ends your access (we must keep invoices for tax law). We respond within a reasonable time, usually under 7 working days.

Accounts are password-protected and limited to 2 signed-in devices. Payment records and invoices are kept as tax law requires; learning data is kept while your account exists and removed on verified deletion requests.

For privacy questions or requests: hello@thiranaiacademy.com.