Privacy Policy

1. Introduction

MindShiksha EdTech Private Limited (“MindShiksha”, “Company”, “we”, “us” or “our”) is committed to protecting the privacy, confidentiality and security of personal data entrusted to us.

This Privacy Policy explains how MindShiksha collects, receives, uses, processes, stores, shares and protects personal data when you:

• visit or use our website at https://mindshiksha.com;
• create or use an account on the MindShiksha platform;
• use our educational, assessment, cognitive-skills, life-skills or leadership-skills services;
• participate in assessments, questionnaires, learning programmes or interventions;
• use our services through an educational institution, organisation, employer, parent/guardian or other authorised entity;
• communicate with us through email, forms, telephone, social media or other channels; or
• otherwise interact with MindShiksha.

This Privacy Policy should be read together with our Terms and Conditions, Terms of Use, Cookie Policy and other applicable policies or notices published by MindShiksha.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

2. About MindShiksha

MindShiksha provides technology-enabled educational and human-skill development services, including cognitive-skills assessment, life-skills assessment, leadership-skills assessment, learning resources, skill development interventions, institutional learning programmes and related technology services.

3. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed by MindShiksha through:

1. the MindShiksha website;
2. MindShiksha web applications and digital platforms;
3. assessment and questionnaire systems;
4. institutional or organisational deployments;
5. learning and training programmes;
6. communications with users, parents, guardians, institutions and professionals; and
7. other digital or offline interactions where this Privacy Policy is expressly referenced.

This Privacy Policy does not apply to third-party websites, applications or services that may be accessed through links available on our website. Such third parties may have their own privacy policies.

4. Categories of Personal Data We May Collect

Depending upon how you use MindShiksha, we may collect the following categories of personal data.

4.1 Identity and Profile Information

This may include:

• full name;
• date of birth or age;
• gender, where voluntarily provided or necessary for a service;
• photograph/profile image;
• educational or professional information;
• institution, organisation, school, college or employer details;
• class, grade, designation or professional level; and
• other information necessary to establish and manage an account.

4.2 Contact Information

This may include:

• email address;
• mobile/telephone number;
• postal address;
• communication preferences; and
• emergency or authorised contact details where specifically required.

4.3 Account and Authentication Information

This may include:

• username;
• account identifier;
• encrypted or otherwise protected authentication credentials;
• login records;
• role and access permissions;
• account status; and
• authentication and security information.

MindShiksha will not ordinarily require users to provide passwords to us through email, telephone or other unsecured communication channels.

4.4 Educational and Learning Information

Where applicable, we may process:

• class/grade;
• academic or learning information;
• course participation;
• learning progress;
• assessment participation;
• training records;
• skill-development records;
• completion records; and
• performance-related information generated through use of our services.

4.5 Assessment and Psychometric-Related Information

MindShiksha provides assessment-based services involving cognitive skills, life skills and leadership skills. Accordingly, information generated through assessments may include:

• responses to questions;
• questionnaire responses;
• assessment scores;
• performance patterns;
• competency indicators;
• skill-level classifications;
• assessment history;
• time taken to answer questions;
• learning or assessment progression;
• derived scores and indicators; and
• other results generated by the MindShiksha assessment and scoring systems.

Such information may be used to provide assessment results, learning recommendations, skill-specific interventions and related services.

MindShiksha will not represent assessment results as a medical diagnosis or clinical psychological diagnosis unless a separate service expressly provides such functionality through appropriately qualified professionals.

4.6 Payment and Transaction Information

Where paid services are used, we may process information relating to:

• subscription or purchase;
• transaction reference;
• amount paid;
• payment status;
• invoice information; and
• billing information.

Where payment processing is performed by a third-party payment service provider, payment card, banking or other sensitive payment credentials may be processed directly by that provider in accordance with its applicable policies.

4.7 Technical and Usage Information

When you access our website or platform, certain information may be automatically collected, including:

• IP address;
• browser type;
• device type;
• operating system;
• device identifiers;
• approximate location derived from technical information;
• pages or services accessed;
• date and time of access;
• session information;
• referral information;
• error logs;
• security logs; and
• interaction and usage information.

4.8 Communication Information

If you contact us, we may retain:

• your name;
• email address;
• telephone number;
• correspondence;
• support requests;
• feedback;
• complaints; and
• information necessary to respond to your communication.

5. Information Relating to Children and Minors

MindShiksha recognises that educational services may be used by children and students.

Where a user is a child or otherwise requires parental/guardian involvement under applicable law, MindShiksha will seek and process parental or lawful guardian consent through appropriate mechanisms where required.

Parents or lawful guardians may contact MindShiksha regarding personal data associated with a child for whom they are legally responsible.

MindShiksha does not knowingly seek unnecessary personal information from children.

Where assessments or learning programmes are provided through a school, institution or organisation, the relevant institution may provide or administer the service in accordance with its own legal and administrative responsibilities.

6. How We Collect Personal Data

We may collect personal data:

1. directly from you;
2. from your parent or lawful guardian;
3. from your educational institution;
4. from your employer or organisation;
5. from an authorised administrator;
6. automatically through your use of our website or platform;
7. through assessment and questionnaire responses;
8. through customer-support interactions;
9. through payment or subscription transactions; or
10. from other lawful sources.

7. Purposes for Processing Personal Data

MindShiksha may process personal data for the following purposes:

7.1 Providing Services

To:

• create and manage user accounts;
• provide access to educational content;
• administer assessments;
• generate assessment results;
• provide learning recommendations;
• provide skill-development interventions;
• manage subscriptions;
• provide institutional services; and
• otherwise deliver contracted or requested services.

7.2 Assessment and Learning

To:

• evaluate responses;
• calculate scores;
• determine assessment levels;
• identify learning or skill-development areas;
• provide personalised learning recommendations;
• track progress; and
• improve the effectiveness of our educational programmes.

7.3 Account Administration

To:

• authenticate users;
• maintain user profiles;
• manage permissions and roles;
• provide customer support;
• maintain account security; and
• communicate important service information.

7.4 Communication

To communicate with you regarding:

• account activities;
• assessment results;
• service updates;
• subscription information;
• security notifications;
• customer support;
• policy changes; and
• other communications necessary for providing our services.

Marketing communications will be sent in accordance with applicable law and applicable consent or preference mechanisms.

7.5 Security and Fraud Prevention

To:

• detect suspicious activities;
• prevent unauthorised access;
• protect users and our systems;
• investigate security incidents;
• maintain audit logs; and
• enforce our terms and policies.

7.6 Legal and Regulatory Compliance

We may process personal data where necessary to:

• comply with applicable law;
• respond to lawful governmental or regulatory requests;
• comply with court or statutory orders;
• establish, exercise or defend legal claims; or
• protect the rights, property or safety of MindShiksha, users or other persons.

7.7 Improvement of Services

We may use information to:

• understand how users interact with our services;
• improve platform functionality;
• improve assessment design;
• identify technical problems;
• develop new features;
• improve learning experiences; and
• conduct internal analytics and quality assurance.

Where reasonably practicable, information used for analytical or product-development purposes will be aggregated, anonymised or de-identified.

8. Legal Basis for Processing

MindShiksha will process personal data only for lawful purposes and in accordance with applicable data-protection laws. Depending upon the circumstances, processing may be based on:

• consent;
• provision of a service requested by the user;
• performance of a contract;
• compliance with a legal obligation;
• legitimate or lawful uses permitted by applicable law; or
• other lawful grounds recognised under applicable legislation.

Under India's Digital Personal Data Protection framework, personal data may generally be processed for a lawful purpose based on consent or specified legitimate uses. MindShiksha will apply the applicable legal basis to the relevant processing activity.

9. Consent

Where processing is based on consent, MindShiksha will seek consent in a clear and appropriately informed manner. Consent may be obtained through:

• account registration;
• electronic consent mechanisms;
• institutional onboarding;
• parental/guardian consent;
• subscription or service forms; or
• other appropriate mechanisms.

Where applicable, the consent request will identify the personal data being processed and the purpose of processing.

The Digital Personal Data Protection Rules, 2025 require notices to be understandable independently and to provide clear information about the personal data and purposes of processing.

10. Withdrawal of Consent

Where processing is based on consent, you may withdraw your consent, subject to applicable law and the consequences of such withdrawal.

Withdrawal of consent will generally be provided through a mechanism that is as easy to use as the mechanism through which consent was given.

Withdrawal of consent may affect our ability to continue providing certain services that require the relevant personal data.

Requests may also be submitted to: contact@mindshiksha.com

11. Data Sharing and Disclosure

MindShiksha does not sell personal data of users as a commercial commodity.

We may share personal data with appropriate parties where necessary for lawful and legitimate purposes, including:

11.1 Educational Institutions and Organisations

Where a service is provided through a school, educational institution, employer or other organisation, relevant information may be shared with authorised administrators of that institution in accordance with the applicable service arrangement and legal requirements.

11.2 Parents or Lawful Guardians

Where applicable, information relating to a minor may be made available to the child's parent or lawful guardian through appropriate mechanisms.

11.3 Service Providers

We may use third-party service providers for functions such as:

• cloud infrastructure;
• hosting;
• database services;
• communications;
• email delivery;
• payment processing;
• analytics;
• security;
• customer support; and
• technical maintenance.

Such service providers will receive only information reasonably necessary to perform their functions and will be subject to appropriate contractual or legal obligations where applicable.

11.4 Government and Legal Authorities

We may disclose personal data where required by:

• applicable law;
• court order;
• governmental authority;
• regulatory authority;
• law-enforcement authority; or
• other lawful process.

11.5 Business Transfers

In connection with a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, personal data may be transferred as part of the relevant business assets, subject to applicable law and appropriate safeguards.

12. Data Retention

MindShiksha will retain personal data only for as long as reasonably necessary for:

• providing the relevant service;
• fulfilling the purpose for which the data was collected;
• maintaining business and transaction records;
• complying with legal or regulatory requirements;
• resolving disputes;
• enforcing agreements; and
• maintaining security and audit records.

When personal data is no longer required for a lawful purpose, MindShiksha will take reasonable steps to delete, anonymise or otherwise dispose of it in accordance with applicable law and its retention practices.

Different categories of information may have different retention periods.

13. Data Security

MindShiksha takes reasonable technical and organisational measures to protect personal data against:

• unauthorised access;
• unauthorised disclosure;
• accidental loss;
• destruction;
• alteration;
• misuse; and
• other unlawful processing.

Depending on the nature of the information and risks involved, security measures may include:

• access controls;
• authentication mechanisms;
• encryption or equivalent safeguards where appropriate;
• secure transmission protocols;
• logging and monitoring;
• role-based permissions;
• backup and recovery procedures;
• vulnerability management; and
• organisational security controls.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

14. Data Breach and Security Incidents

If MindShiksha becomes aware of a personal-data breach requiring notification under applicable law, we will take appropriate steps to investigate, contain, mitigate and report the incident as required by applicable law.

Where legally required, affected individuals and/or relevant authorities will be notified in the prescribed manner.

15. Cookies and Similar Technologies

MindShiksha may use cookies, local storage, session technologies and similar technologies to:

• maintain user sessions;
• remember preferences;
• improve website functionality;
• analyse website usage;
• improve security; and
• understand service performance.

Some cookies may be essential for the operation of the website.

Where required, non-essential cookies or similar technologies will be deployed in accordance with applicable law and the user's choices.

Users may control cookies through their browser settings, although disabling certain cookies may affect website functionality.

A separate Cookie Policy provides additional information regarding the cookies used by MindShiksha.

16. Analytics

MindShiksha may use analytics technologies to understand:

• website traffic;
• platform usage;
• feature utilisation;
• technical performance;
• user journeys; and
• general engagement patterns.

Where third-party analytics providers are used, their processing may be subject to their own privacy policies and contractual obligations. MindShiksha will seek to avoid using analytics information in a manner inconsistent with the purposes disclosed to users.

17. Personalised Learning and Automated Processing

MindShiksha may use software-based scoring, analytical and recommendation systems to process assessment responses and generate:

• scores;
• assessment levels;
• competency indicators;
• learning recommendations;
• skill-development recommendations; and
• other educational outputs.

Such outputs are intended to support learning and skill development and should not automatically be treated as medical, psychiatric, clinical or employment decisions unless expressly stated and legally supported.

Where applicable law provides rights concerning automated decision-making, MindShiksha will comply with those requirements.

18. Accuracy of Personal Data

Users are responsible for providing accurate, complete and up-to-date information.

You should notify MindShiksha if information associated with your account becomes inaccurate or outdated.

MindShiksha may take reasonable steps to maintain the accuracy of information in its possession.

19. User Rights

Subject to applicable law, users may have rights relating to their personal data, including:

• the right to access information regarding processing;
• the right to correction of inaccurate or incomplete personal data;
• the right to erasure of personal data where legally applicable;
• the right to withdraw consent where processing is based on consent;
• the right to grievance redressal;
• the right to nominate another individual where provided by applicable law; and
• other rights available under applicable data-protection legislation.

Requests may be submitted to:

MindShiksha may require reasonable information to verify the identity or authority of the person making a request.

20. Rights of Parents and Guardians

Where personal data relates to a child, a parent or lawful guardian may contact MindShiksha to:

• request information regarding processing;
• request correction of information;
• request deletion where legally applicable;
• withdraw consent where applicable; or
• raise a privacy-related complaint.

MindShiksha may request appropriate documentation or verification to establish parental or legal-guardian authority.

21. Grievance Redressal

If you have a concern regarding the processing of your personal data, you may first contact MindShiksha:

We will endeavour to review and respond to privacy-related complaints within the time period prescribed under applicable law.

Where applicable law provides for escalation to a regulatory authority or the Data Protection Board of India, users may exercise such rights in accordance with the applicable statutory framework.

22. International Data Transfers

Depending on the technology infrastructure and service providers used by MindShiksha, personal data may be processed or stored in India or another jurisdiction.

Where personal data is transferred outside India, MindShiksha will comply with applicable legal requirements concerning such transfer and will implement appropriate contractual, technical and organisational safeguards where required.

23. Third-Party Links and Services

The MindShiksha website or platform may contain links to third-party websites, applications or services.

MindShiksha is not responsible for the privacy practices, security, content or policies of such third parties. Users should review the privacy policies of third-party services before providing personal data to them.

24. Institutional Accounts

Where MindShiksha services are provided to a school, college, company, training organisation or other institution, the institution may act as an administrator of the relevant user accounts.

Institutional administrators may have access to information necessary to administer the service, subject to the applicable agreement, user rights and applicable law.

MindShiksha will process such information in accordance with its contractual obligations and applicable data-protection requirements.

25. Marketing Communications

MindShiksha may send service-related communications necessary for operating your account.

Where permitted by law, we may also send promotional or marketing communications regarding:

• MindShiksha products;
• educational programmes;
• assessments;
• training;
• events;
• offers; and
• related services.

You may opt out of promotional communications using the unsubscribe mechanism provided in the communication or by contacting us at contact@mindshiksha.com.

Opting out of marketing communications will not prevent us from sending essential service, security, transaction or account-related communications.

26. Data Used for Research and Product Improvement

MindShiksha may conduct internal research and analysis to improve:

• assessment methodology;
• question quality;
• learning programmes;
• scoring systems;
• recommendation systems;
• platform performance; and
• educational outcomes.

Where research or analytics can reasonably be performed using aggregated, anonymised or de-identified information, MindShiksha will seek to use such information instead of directly identifiable personal data.

Personal data will not be used for unrelated purposes merely because it is available to MindShiksha.

27. No Sale of Personal Data

MindShiksha does not intend to sell personal data of students, parents, professionals or other users to third parties for their independent commercial exploitation.

Where third-party service providers process data on behalf of MindShiksha, such processing is intended to support the services provided by MindShiksha and will be governed by applicable contractual and legal requirements.

28. Changes to this Privacy Policy

MindShiksha may update this Privacy Policy from time to time to reflect:

• changes in our products or services;
• changes in technology;
• changes in data-processing practices;
• changes in applicable law; or
• regulatory requirements.

When material changes are made, MindShiksha may provide appropriate notice through the website, application, email or other suitable means.

The “Last Updated” date at the beginning of this Privacy Policy indicates when the policy was most recently revised.

29. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws applicable in India.

Any dispute arising in relation to this Privacy Policy shall be subject to the jurisdiction of courts and competent authorities having jurisdiction over the relevant matter, subject to applicable law.

30. Contact Us

For questions, requests, complaints or concerns regarding this Privacy Policy or the processing of personal data, please contact: