Privacy Policy

Welcome to IGNIYTE, a product of R.K. Study Hub, located in Gujarat, India. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the IGNIYTE platform — including our web application, mobile application, and any related services.

This policy applies to all users of IGNIYTE: students, parents/guardians, teachers, administrators, and visitors. We are committed to full compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000 of India.

We collect information across four categories depending on your role:

Your data is used strictly for the following purposes:

✅ We never sell your data to third parties or use it for targeted advertising.

• Parental consent is mandatory before any student under 18 can use IGNIYTE.
• Students under 18 cannot self-register — enrollment must be done by a parent/guardian or institute staff.
• We do not perform behavioral tracking or ad targeting on minors.
• We do not create marketing profiles or engage in profiling of children.
• Mood and emotion data is private and used only to support student wellbeing — never shared externally.
• Parents can request full deletion of their child's data at any time by emailing privacy@gyaniq.in.

We share limited data with the following trusted service providers:

We never sell your data to any third party. We may share data with government authorities only when compelled by a valid court order.

We retain your data only as long as necessary for its intended purpose:

• Student academic records: 3 years after last enrollment
• Fee & payment records: 7 years (as required by Indian accounting laws)
• Parent data: 1 year after account deletion request
• Teacher records: 5 years after employment ends
• System logs: 90 days
• Deleted accounts: Fully purged within 30 days of deletion confirmation

As a data principal under the DPDP Act, you have the following rights:

To exercise any of these rights, email us at privacy@gyaniq.in. We will respond within 30 days.

We employ industry-standard security measures to protect your data:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• OTP-based login — no passwords stored
• Role-Based Access Control (RBAC) — users only see data relevant to their role
• Parameterized queries to prevent SQL injection attacks
• Razorpay PCI-DSS compliance for payment processing
• Audit logs for all administrative actions
• 72-hour breach notification to affected users and authorities

We use the following types of cookies:

We may update this Privacy Policy from time to time. When we make changes:

• We will notify you via in-app notification and/or SMS/email.
• The updated policy will be posted on this page with a new "Last Updated" date.
• Continued use of the platform after 30 days of notification constitutes acceptance of the updated policy.
• For any changes affecting children's data processing, we will seek fresh parental consent.

We recommend reviewing this policy periodically to stay informed about how we protect your data.