Version 2026-11-07. Written for India's Digital Personal Data Protection Act, 2023 (DPDP Act).
Phone number - your account identity and login (one-time codes).
Email address (when given) - delivering login codes.
Study profile - university/board, branch, semester, exam date, display name: to scope the tutor to your syllabus and build your study plan.
Learning data - your questions, tutor replies, checks, mastery scores, plans, flashcards, notes and files/photos you upload for doubt-solving: to teach you, track progress and plan revision.
Parent/guardian email (optional; required for under-18 consent) - weekly progress reports and consent. Reports contain study metadata only, never your private chats.
Safety and audit logs - the integrity guardrail logs decisions (not extra content) so misuse can be reviewed.
Technical logs - basic request logs for reliability and abuse prevention.
Your questions are answered by a language model that we host ourselves (an open-weight Qwen model on infrastructure we control). Photos you submit for doubts are read with OCR or a vision model so the text can be tutored. Your uploads are used only for your own answers - never to teach other students, and never sold.
We do not sell personal data. Limited processors handle specific jobs: Brevo (email delivery for login codes and reports), our hosting provider (the servers the service runs on), and Meta's WhatsApp - only if you choose to study over WhatsApp and only once that channel is enabled. Teachers using class codes see aggregate, pseudonymous class mastery only - never a student's chats, uploads or identity.
Account and learning data are kept while your account exists. Login codes expire in minutes; session tokens in 30 days. Nightly backups rotate within 7 days, so deleted data leaves backups within that rotation. If you delete your account, your data is erased immediately from the live service.
Access - export everything we hold about you, in the product (Profile - Export my data).
Correction - edit your profile in the product, or write to us.
Erasure - delete your account in the product; it is immediate and permanent.
Consent withdrawal - stop any time by deleting your account or writing to us.
Grievance - write to support@snuhilearn.com; we aim to acknowledge within 48 hours and resolve within 30 days. You may also approach the Data Protection Board of India.
We require verifiable parent/guardian consent before a student under 18 uses the study features. We do not run advertising, and we do not track or behaviourally monitor children for marketing.
Login codes and session tokens are stored only as hashes; traffic is encrypted with TLS; owner-only pages are password-gated; production data sits on access-controlled servers.
If this policy changes materially, the version at the top changes and we will note it in the product.