Privacy Policy

Who we are

MathsGradeUp is operated by SelexIQ Education Private Limited, India ("we", "us", "our", the "Company"). Business/contact address: D 61, Galaxy Apartment, Sector 43, Gurugram, Haryana, India. This address is supplied for business correspondence and is not a representation that registered-office records have been verified. References to "the Platform" mean the MathsGradeUp website, applications and related services.

We determine the purposes and means of processing for our own service. Under India's Digital Personal Data Protection framework, this role is described as a Data Fiduciary when the relevant provisions apply. A school or organisation may separately determine purposes for records it supplies, with our responsibilities governed by the applicable law and its agreement with us; a tutor does not automatically obtain authority over a child's data.

Indian privacy law and phased commencement

As of this policy's review on 23 October 2026, India's DPDP framework is notified but its main processing duties and individual rights are not yet fully in force. Institutional and enabling provisions commenced on 14 November 2025; the Consent Manager phase commences on 14 November 2026; core notice, consent, security, breach, children's-data and individual-rights provisions are scheduled to commence on 14 May 2027 under the notified timetable. The IT Act/SPDI framework continues to apply where relevant during the transition. Any later amending notification takes precedence.

This policy is not a certification of DPDP compliance. Future duties must be supported by actual operational controls before they apply; a published policy, email code or account relationship is not proof of those controls.

Official DPDP commencement notification ↗Official Digital Personal Data Protection Rules, 2025 ↗

Data we collect

We do not ask for, and you should not submit, special category data such as health, biometric, religious or ethnicity information. We do not knowingly collect payment card numbers directly; where paid plans are introduced, card details are handled by a regulated payment provider and never stored by us.

• Account data: name or display name, email address, password (stored only as a salted hash), role (student, parent, tutor, school, administrator).
• Education profile: year or grade group, curriculum and exam board, subjects enrolled, school name where you choose to provide it.
• Learning data: questions attempted, answers and written working, marks and feedback, worksheets, mock papers, uploaded assignment files, time spent and progress statistics.
• Relationship data: links between a student and a parent or tutor, class or group membership, and messages sent through the Platform.
• Enquiry data: information you submit through contact, tutoring or support forms; where optional email verification is used, the associated verification record. Sending an enquiry does not itself verify parental authority.
• Technical data: IP address, device and browser type, approximate location derived from IP, pages viewed, referring URL, and error diagnostics.

Purposes, consent and permitted uses

Indian processing permissions are assessed under the law in force, including the Information Technology Act, 2000 and the applicable Sensitive Personal Data or Information Rules, 2011 during the transition, and the Digital Personal Data Protection Act, 2023 and Rules, 2025 as their provisions commence. The DPDP framework uses consent and specified certain legitimate uses; it does not create a general GDPR-style 'legitimate interests' ground. We do not treat an accepted contract or continued browsing as blanket consent to unrelated processing.

Where consent is required, the notice must identify the data and purposes and consent must be free, specific, informed, unconditional and unambiguous, obtained by clear affirmative action. Withdrawal may be requested through the same available consent control or our support email, without affecting processing lawfully completed before withdrawal. Mandatory rights for users in other jurisdictions remain applicable where the law requires them.

• Create and operate accounts, authenticate users and protect sessions.
• Deliver the requested teaching content, feedback and progress reports.
• Share relevant progress with authorised parents, tutors and schools through verified account relationships; a relationship link does not replace legally required parental consent.
• Respond to enquiries and support requests using the details supplied for that purpose.
• Diagnose faults, prevent abuse and measure service usage, with non-essential analytics subject to applicable consent requirements.
• Send account-verification, password-reset and other necessary service messages. Marketing requires a separate opt-in and an accessible withdrawal mechanism; it is not a condition of student access.
• To comply with legal, tax, safeguarding and regulatory obligations — compliance with a legal obligation.

Automated content and learning support

Study Coach, our learning companion, uses automated processing to generate hints, explanations, practice questions and estimated mark-scheme feedback from the work a student submits. This supports learning; it does not produce legal or similarly significant decisions about a person, and no official qualification grade is awarded by the Platform. Estimated marks are guidance only and may differ from marks awarded by an official examiner.

Submitted work may be sent to our model providers strictly to generate that response. We instruct providers not to use Platform content to train their models. Students should not paste personal information about themselves or others into learning conversations.

Sharing your data

We do not sell personal data, we do not rent contact lists, and we do not use student learning data for advertising or profiling for third parties.

• Service providers who host our infrastructure, database, storage, email delivery, error monitoring and model inference, acting on our instructions under written terms.
• Parents and tutors, limited to the students verifiably linked to their account through our relationship or class records.
• A school or organisation that provisioned the account, limited to its own users.
• Professional advisers, insurers and auditors where necessary and confidential.
• Authorities, regulators or safeguarding bodies where we are legally required to disclose, or where disclosure is necessary to protect a child or any person from harm.
• A buyer or successor in the event of a reorganisation, merger or sale of the business, subject to the protections in this policy.

International transfers

Our hosting, email and automated-learning providers may process data outside India. The operator's business address does not establish where each provider stores data. Transfers must comply with restrictions notified by the Government of India and any sector-specific rules in force; where the SPDI Rules apply, the required level of protection and transfer conditions must be satisfied. Additional safeguards required for overseas users also remain applicable. Contact us for current provider and transfer information; this policy does not claim Indian-only hosting or unverified contractual safeguards.

Security

Access to Platform data is controlled at row level so users can reach only the records their role permits. Traffic is encrypted in transit, passwords are stored only as salted hashes, uploaded files are served through short-lived signed links, and administrative access is restricted to named personnel on a need-to-know basis.

No online service can be guaranteed absolutely secure. You are responsible for keeping your login credentials confidential and for telling us promptly at support@mathsgradeup.com if you believe an account has been compromised.

How long we keep data

Retention periods are set out in full in our Data Deletion and Retention Policy. In summary, account and learning data are kept while the account is active and for a limited wind-down period afterwards, and records we must keep for legal, accounting or safeguarding reasons are kept for the period the relevant law requires.

Data Deletion and Retention Policy

Your rights

Rights under the DPDP Act apply as the relevant provisions commence; this notice does not present future statutory rights as already enforceable. We also offer account-information, correction and deletion requests through support, subject to lawful retention. To exercise a right, email support@mathsgradeup.com from the address registered to the account. Where a child holds the account, a parent or guardian may exercise these rights on the child's behalf after we have verified the relationship.

• Access a copy of the personal data we hold about you.
• Correct data that is inaccurate or incomplete — most profile fields can be edited in your account settings.
• Delete your account and associated personal data, subject to records we must retain by law.
• Request information about processing and sharing, subject to the applicable legal exceptions.
• Nominate another person to exercise rights in the event of death or incapacity when that DPDP right is in force.
• Withdraw consent at any time where processing relies on consent, without affecting processing already carried out.
• Use our grievance channel; when the relevant DPDP complaint provisions are in force, approach the Data Protection Board of India after exhausting the required grievance process. Other competent authorities and mandatory overseas rights remain available where applicable.

Children

The Platform is used by secondary school students, including children under 13 in some countries. Our Children's Privacy Notice and Parent/Guardian Consent Policy explain the additional protections that apply, including verified consent, default-private settings and restricted contact.

Children's Privacy NoticeParent/Guardian Consent Policy

Changes to this document

We review this document when the Platform, the law or our practices change. The effective date identifies this version. Material changes affecting your rights will be notified through email or an in-app notice. Changes do not retrospectively remove accrued rights or replace consent where fresh consent is required; a privacy-policy update is not itself consent to a new processing purpose.

How to contact us

Write to support@mathsgradeup.com or to our business/contact address: SelexIQ Education Private Limited, D 61, Galaxy Apartment, Sector 43, Gurugram, Haryana, India. Please include the account email and the nature of your request, but do not send passwords, verification codes or unnecessary identity documents. For privacy or consumer complaints, use the subject "Privacy grievance" or "Consumer grievance".

For consumer grievances covered by the Consumer Protection (E-Commerce) Rules, 2020, we will acknowledge the complaint within 48 hours and redress it within 1 month of receipt. Information-processing grievances covered by the SPDI Rules, 2011 must also be redressed expeditiously within one month. Any shorter applicable deadline takes precedence. Urgent safeguarding reports must also be made to the appropriate authorities. This support channel does not represent that a statutory Grievance Officer or Data Protection Officer has been designated.