Privacy Policy
Last updated 2026-08-17
Curiotutor is used by children, so this policy is written to be read by their parents. It says plainly what we collect, why we need it, who else sees it, and how to make us delete it.
Who is responsible for your data
QuikSync Technologies LLP is the data fiduciary for the information described here. That means we decide why and how it is processed, and we are accountable for it.
The short version
- We collect what the tutor needs to teach your child, and their progress so you can see it.
- We do not sell personal data, and we never will.
- We do not advertise to children, and we do not track them for advertising.
- We do not build behavioural profiles of children for any purpose other than teaching them.
- You can see, correct, export and delete your family's data at any time.
What we collect about you, the parent
- Your name and email address, so we can identify your account and contact you.
- Your sign-in details. If you sign in with Google or with a password, that is handled by our authentication provider and we never see your password.
- Your payment history: what you paid, when, and for which plan. Card details go to Razorpay and never reach us.
- Basic technical records such as IP address and browser type, kept to keep the service secure and to diagnose faults.
What we collect about your child
Only what teaching them requires. You give us most of it when you create their profile.
- A nickname. We ask for a nickname rather than a full name on purpose.
- Date of birth, used to pitch the tutor's language and content at the right age.
- School board, class, and optionally the school name, so lessons match what they are studying.
- The languages they read and speak in.
- Transcripts of tutoring sessions, which is what the tutor and the progress reports are built from.
- Photographs of schoolwork your child chooses to show the tutor.
- How long they studied, what they practised, and how they answered.
Session audio is streamed to the AI provider so the tutor can hear and reply. We do not keep recordings of your child's voice. What is stored is the text of the conversation.
Children, and the extra care the law requires
Under the Digital Personal Data Protection Act, 2023, a child's personal data may only be processed with verifiable consent from a parent or legal guardian. That is why an account belongs to an adult, why you confirm your relationship to each child when you create their profile, and why a child is never asked to agree to anything.
The Act also prohibits certain things outright, and we do them in no form:
- no advertising directed at children
- no tracking or behavioural monitoring of children
- no profiling of children except what is needed to teach them, which stays inside your account and is shown to you
You may withdraw your consent at any time. Doing so closes the child's profile and deletes their data, as described below.
Why we are allowed to hold it
We process this information on the basis of your consent, given when you create your account and each child profile, and to perform the contract between us when you subscribe. Some records, such as payment and tax records, we keep because the law requires it.
Who else sees it
We use a small number of providers to run the service. Each receives only what it needs, and none of them may use your data for their own purposes.
- Google (Gemini), for the tutor itself. Session audio and text are processed to generate replies.
- Clerk, which handles sign-in and holds your email address.
- Razorpay, which takes payments and holds the card details we never see.
- Amazon Web Services, for sending email.
- Render, which hosts the application and the database, in Singapore.
Some of these process data outside India. Where that happens we rely on the provider's contractual protections. We do not sell personal data, and we do not share it with advertisers or data brokers.
How long we keep it
- Session transcripts and progress records are kept while your account is open, because they are what makes the tutor useful over time.
- Photographs of schoolwork are deleted automatically after a short retention period. They exist to answer one question during one lesson.
- Payment records are kept for as long as tax and accounting law requires.
- When you close your account, personal data is deleted within 30 days, other than records the law requires us to retain.
Your rights
You may, at any time:
- ask what we hold about your family, and receive a copy
- correct anything inaccurate
- delete a child's profile, or close the account entirely, from your account settings
- withdraw consent, which has the same effect as deletion
- nominate someone to exercise these rights if you are unable to
- complain to the Data Protection Board of India
Most of this is available in the app without asking us. For anything else, write to the grievance officer below and we will respond within two working days.
Keeping it safe
Data is encrypted in transit. Access is limited to the people who need it, and administrative actions are recorded in a tamper evident log. Each family's data is isolated from every other family's at the database level rather than by application code alone.
No system is perfectly secure. If a breach affects your data we will tell you and the Data Protection Board, as the law requires.
Cookies
We use only what is necessary to keep you signed in and to remember a trusted device. We do not use advertising or analytics cookies, and there is no third party tracking on this site.
Grievance officer
Deepak Rai is our grievance officer. For any question or complaint about your data, write to grievance@quiksync.com, or by post to the address at the foot of this page. We will acknowledge you within two working days.
Changes
If we change this policy we will publish the new version here with its date, and tell you by email where the change is material. Our Terms of Service explain how consent to a new version works.