Privacy Policy

Account details. For School Admins and Site Admins: name, work email, and a securely hashed password. For students and teachers: name, phone number, a securely hashed PIN, class details (board, standard, medium), and whether the account was created directly or by a school. Phone numbers are used for sign-in and are never shared with other schools.

Learning activity (website and Android app): your Talk to SSCMitra messages and chat history, Knowledge Check and mock-test attempts and scores, progress, XP, streaks and badges, study sessions and study-calendar entries, any AI replies you report, and a record of actions such as chapters viewed. We use these to run SSCMitra and show your progress.

Study content: textbook and past-paper files uploaded by SSCMitra or a school, and the study material generated from them.

Notifications: if you turn them on, a device token so we can deliver them.

Payments: handled by Google Play (Android app) or Razorpay (website). We keep your plan status and the provider's purchase reference, never your card or bank details.

Contact form (website): if you write to us through the Contact Us form, your name, email address and message.

Website: the SSCMitra website uses no third-party analytics or advertising trackers.

Android app — Meta app events: the app includes Meta's App Events SDK. When the app is installed and opened, it sends Meta install and app-activation events, along with app-session timing and device information such as your device's advertising ID (if available), an app-specific anonymous ID, device model, Android version and app version. We do not send Meta your name, phone number, study material, chat messages, answers or scores, and automatic purchase logging and automatic advanced matching are turned off.

Android app — crash reports: if the app crashes, Google Firebase Crashlytics receives technical details of the crash, with basic device and app information (device model, Android version, app version). Meta's SDK may also report crashes involving its own code to Meta.

Android app — session reports: each time the app is opened, Google Firebase Sessions records an app session (session start, device model, Android version, app version) so we can measure how often the app runs without crashing.

To run the service: signing you in, generating study material, answering your questions, and delivering content to the right students.

Study material: textbook and past-paper content uploaded by SSCMitra or a school is sent to third-party AI model providers, through SSCMitra's own gateway, to generate chapters, summaries, quizzes, visual study cards and exam-prep tagging.

Talk to SSCMitra: the messages a student or teacher types are sent to a third-party AI model provider, through the same gateway, to check them for unsafe content and to generate a reply. Your name and phone number are not included in these requests. Your conversation is kept in your chat history.

Advertising measurement: Android app install and activation events are used only to measure how well our own advertising on Meta (Facebook and Instagram) brings new students to SSCMitra. We do not show ads inside SSCMitra, and we do not sell personal data.

Crash and session reports are used only to find and fix problems in the app.

We use these service providers, each only for the purpose shown:

AI model providers — currently Google (Gemini) for Talk to SSCMitra, and Google, Anthropic (Claude) and OpenAI for generating study material from textbook content.

MSG91: your phone number, to deliver sign-in and recovery codes by SMS.

Resend: email delivery — emails to School Admins and Site Admins, and messages sent through the Contact Us form.

Google (Firebase): push notifications, and crash and session reports from the Android app.

Meta Platforms (Facebook): app events from the Android app, as described above. Meta's use of this data is covered by Meta's own privacy policy.

Google Play (Android app) and Razorpay (website): subscription payments.

DigitalOcean: hosts our servers and databases.

Backblaze (B2): stores off-site backup copies of our databases and files.

We don't share personal data with anyone else, except where required by law.

Passwords and PINs are stored as one-way hashes — we cannot see or recover them ourselves.

Your account and learning activity, including chat history, are kept until you delete your account. Deleting your account removes them from our live systems straight away. After account deletion, backup copies may remain for a limited period while scheduled backups expire and older versions are removed by our backup provider. We aim to remove these copies within about three weeks, subject to the provider's version-retention process.

School-uploaded content and the study material generated from it are kept while the school's account is active, and removed on request.

SSCMitra runs on servers we manage ourselves, rented from a hosting provider (DigitalOcean), and access to them is restricted. Data you share with the providers listed above is also handled under their own retention policies.

SSCMitra is built for school students, most of whom are under 18. An account may be created on a parent's or guardian's phone, in which case the sign-in code is sent to that number.

SSCMitra does not currently verify a user's age, and does not collect verified parental consent. We ask that a parent or guardian review this policy and supervise their child's use of SSCMitra.

A parent or guardian can ask for a copy, correction or deletion of their child's data at any time by contacting us below.

Schools can request a copy of, correction to, or deletion of their data, and of student or teacher records they administer, by contacting us below.

A student or teacher can request a copy, correction or deletion of their own data, or ask their school's admin to do so, at any time.

A student can delete their account from Profile → Delete my account, or at sscmitra.com/delete-account. Teachers and admins can contact us below to request account deletion.

You can reset or delete your device's advertising ID, or opt out of ads personalisation, in your phone's settings (Settings → Privacy → Ads). This changes how your advertising ID can be used, but does not necessarily stop the Android app from sending install and activation events. Uninstalling the app stops them; the website sends none.