Privacy Policy

This Privacy Policy explains how Sagar Kottagattu, operating as GurukulAI ("we", "us", "our"), collects, uses, shares and protects information when you use the GurukulAI website (gurukulai.in, app.gurukulai.in) and the GurukulAI Android app (together, the "Service"). By using the Service you agree to this policy.

1. Information we collect

• Account information — your name, email address and profile photo, received from Google when you sign in with Google, and any profile details you add (for example, your target exam year or optional subject).
• Content you submit — photos or PDFs of handwritten answer sheets, typed answers, questions you ask Guru AI, and your practice (PYQ) attempts.
• Results we generate — evaluation scores, feedback, annotated answer copies, and progress statistics.
• Payment information — plan, amount, transaction and subscription IDs and payment status. Card, UPI and bank details are entered directly with our payment partners (Razorpay or Google Play) and are never stored by us.
• Device and usage information — device model, operating system, app version, push-notification token, and basic logs (such as IP address and timestamps) needed to run and secure the Service.
• Camera and photos — the app uses your camera or photo library only when you choose to upload an answer sheet.

2. How we use your information

• To create and manage your account and sign you in.
• To evaluate your answers, generate feedback, answer your questions and track your progress.
• To process payments, manage subscriptions and credits, and prevent fraud.
• To send service messages such as evaluation-ready notifications and payment receipts.
• To fix problems, improve the Service and keep it secure.
• To comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Service providers we share data with

We share only the information each provider needs to perform its service for us:

• Google Firebase — sign-in and authentication.
• Google Gemini API — AI processing of your answers and questions to produce evaluations and responses.
• Amazon Web Services (S3) — secure storage of uploaded answer sheets.
• MongoDB Atlas and Render — database and application hosting.
• Razorpay and Google Play Billing — payment processing.

Some of these providers may store or process data on servers outside India. We may also disclose information if required by law or to protect the rights and safety of our users or the Service.

4. Data retention

We keep your account data and submissions for as long as your account is active. Payment records are kept for the period required under Indian tax and accounting laws. When you delete your account, we delete or anonymise your personal data within 30 days, except where we must retain it by law.

5. Your rights and account deletion

You can access and update your profile in the app. You may also request a copy, correction or deletion of your personal data, or withdraw consent, by emailing gurukulxai@gmail.com from your registered email address with the subject "Delete my account". We will respond within 30 days.

6. Security

Data is encrypted in transit (HTTPS), access to storage is restricted, and payments are handled by PCI-DSS compliant providers. No system is completely secure, but we take reasonable measures to protect your information.

7. Children

The Service is intended for users aged 18 and above. If you are under 18, you may use the Service only with the consent and supervision of a parent or guardian.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date above shows the latest version, and significant changes will be notified in the app or by email.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023, our Grievance Officer is:

We will acknowledge complaints within 48 hours and aim to resolve them within 30 days.