Privacy policy
How Lingsaa Edu collects, uses and protects information about students, parents and teachers — in plain words.
Last updated: 4 November 2026 · Version 2026-11-04
1. Who we are
Lingsaa Edu (https://edu.lingsaa.com, and the Lingsaa Edu app) is a learning app for school students in India, run by LINGSAA Technologies Private Limited, 6-13-8, Arundelpet, Guntur, Andhra Pradesh 522002, India, CIN [Corporate Identity Number] ("we", "us"). It teaches each topic in short steps, in English or Telugu, picks up where class left off, and lets parents follow their child's progress.
For accounts that students and parents create themselves, we are the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and its Rules. When a school or tuition centre uses Lingsaa Edu for its own students, the school decides what it records about them (attendance, marks, fees and similar) and we process those records on the school's instructions; you can ask the school or us about them.
This policy covers everyone who uses Lingsaa Edu: students, parents and guardians, teachers and school staff, and our own staff.
2. What we collect
We collect what each feature needs, and most features are optional or switched on by a school. In detail:
Account details
- Name, username, password (stored only as a one-way "hash" — nobody, including us, can read it), and — if you give them — email and mobile number.
- Students: date of birth (to know whether a parent must consent first), board, class, the language you learn in, and optionally school, town and district. For a student under 18: the parent's mobile and/or email and name, to ask for consent.
- Parents: which children you follow and your relation to them (mother, father, guardian), and your language.
- Teachers and staff: name, work email, role and the school or classes you belong to.
Learning activity
- Lessons and steps opened, where you stopped, quick-check and practice answers, tests and mock exams, scores and mastery, study time per day, streaks, goals, badges and points, revision cards, flashcards, notes, words looked up, focus-timer sessions and minutes the app was open each day (screen time, which a parent can limit).
- Things you write or create: doubts and their answers, chats with the AI tutor and assistant, explanations in your own words, code you write, posts on a class doubt wall, wellbeing check-ins (when a school turns them on).
Photos, files and voice
- Photos you choose to take or upload: a question or your working ("Snap a question"), handwritten answers, exam papers, homework, home-activity photos, doubt-wall pictures, and photos or PDFs in messages. We remove the hidden location and camera details (EXIF) from photos we keep for others to see.
- Voice, only when you press a microphone button or start an AI voice call. We keep no recording of anyone's voice except the two kinds at the end of this list. What each speech service receives:
- Voice typing (the microphone next to a typing box) uses your browser's own speech recognition: the browser sends the sound to its maker to be turned into words — Google, in Chrome and on Android phones — and only the words reach us. You see them, and can change them, before anything is sent.
- AI voice calls with the tutor: what the child says is streamed to Sarvam AI (India) to be recognised as words, and the tutor's replies — which can use the child's first name — go to Sarvam as text to be spoken. We keep the call's written transcript, which the child and their parent can read; the sound is not recorded.
- Where our server listens (spoken-English practice, the voice tutor and spoken viva answers, when this server has a speech service): the recording is sent to Sarvam AI or Bhashini (Government of India) to be turned into words and is then discarded — we keep only the words, and for a reading its score. The voice tutor's spoken answer, made by Bhashini, is kept so it can be played again.
- Class notes: when a teacher turns a recording of their own class into notes for absent students, the recording goes to Sarvam AI in short pieces to be turned into text, and is deleted once the notes are made, or after 24 hours.
- Read aloud uses your device's own voices; Chrome's "Google" voices are spoken on Google's servers, which then receive the text being read. Where this server has a voice service, Telugu is read in its voice instead, and English too if the student chooses: the sentence being read (lesson or answer text) goes to Bhashini or Google Cloud Text-to-Speech, and the sound is kept to be reused — on our server, and for up to two weeks on the phone, until sign-out. The weekly voice summary to parents, which names the child, is spoken the same way.
- Kept as they are: voice notes you send in parent–teacher messages (up to 90 seconds), and recordings a teacher makes of their own live class or lesson (the teacher's voice and board, never the students').
Location — only for these features, and never in the background
- School bus (when a school uses bus tracking): the driver's phone sends its position about every 15 seconds only while a trip is running and the driver's page is open, so parents can see where the bus is. Positions are kept 7 days.
- Child safety card (optional hardware a family or school buys): the card's position, battery and SOS button presses, so linked parents can see where the child is. Location history is kept 30 days and SOS alerts 90 days.
- Bus pickup point: a parent may tap "use my location" once, or tap the map; we store that one point until it is changed.
- Staff check-in at school: the phone's position is checked once on our server; we store only how far from the school it was, not the position itself.
- The student app never asks for the device's location.
School records (when a school uses Lingsaa Edu)
- Attendance, marks, report cards and progress cards, homework, timetables, fees and receipts, library and hostel records, transport, canteen wallet, admission applications, ID card details (photo, blood group, address, emergency phone), health-room records (allergies, medicines, check-ups, vaccinations, visits), support plans for children with special needs, event photos (with the family's photo consent and faces blurred on request), and details for government reports (gender, social category, disability status, PEN and APAAR ID — APAAR only with a parent's consent).
- School teachers see the learning of the students in their sections only — never a child's doubts, notes, parents or location, and never a child whose parent has not approved the account.
Payments
- Payments go through Razorpay. We keep the order and payment reference numbers, the amount and the result — never your card, UPI or bank details. A school may record a cash or bank fee payment with its reference.
Devices, security and usage
- When you sign in: the time, the kind of device and browser, and the IP address; failed sign-in attempts (what was typed as the username, and the IP address). When a parent approves or declines consent: the time, IP address and device.
- If you turn on phone notifications: the address your browser gives us to deliver them.
- Usage statistics, our own and pseudonymous: which screens and buttons are used, by role — no names. A student under 18 gets a pseudonym that changes every day. You (or a parent, for a child) can turn this off on Account → Usage statistics, and we respect your browser's "Global Privacy Control" and "Do Not Track".
- In the Android app from Google Play only: app health reports to our own monitoring server — when the app is opened, which screen is shown (the path only), error messages from the app, the app and Android version, and a random number for the installation that is not linked to your account or name. The same Usage statistics switch, "Global Privacy Control" and "Do Not Track" turn these off. Google Play also gives us crash and review statistics for the app, without identifying anyone.
- We use no advertising, no third-party analytics or tracking, and no tracking cookies. The app keeps your sign-in and preferences in your browser's own storage on your device.
3. Why we use it
- To run your account and show the right lessons for your board, class and language, and continue exactly where you stopped.
- To work out what needs more practice, plan revision, and show progress to the student, linked parents, and (for school students) their teachers — including weekly summaries, letters and report cards.
- To answer doubts and run the AI features you use (section 5).
- To run school features a school has switched on: attendance, homework, marks, fees, bus tracking, notices, parent–teacher messages and the rest.
- To keep children safe where a family or school chose a safety feature (bus tracking, safety card, SOS).
- To send what you asked for or need: sign-in codes, consent requests, password and security notices, and notifications by email, phone notification, SMS or WhatsApp (WhatsApp only if a parent opts in).
- To protect accounts, stop misuse, keep an audit trail of important actions, and meet our legal duties.
- To improve lessons: our content team sees doubts, ratings and the steps students get stuck on, without the child's identity.
We do not show advertisements. We do not sell, rent or trade personal data. We do not track children or monitor their behaviour for advertising, and we do not build profiles of children for marketing.
4. Children under 18 and parental consent
The DPDP Act treats everyone under 18 as a child. When a student under 18 signs up, the account stays locked until a parent or lawful guardian agrees.
We send the parent a link by SMS and/or email. On that page the parent reads this policy, receives a one-time code on the same phone or email, and approves or declines. We record the decision: date and time, the policy version, the phone or email it was confirmed on (partly hidden), and the device and IP address it came from.
If the parent declines, the child's data is deleted and the account closed. If nobody approves within 7 days, the account and its data are deleted automatically.
A parent can withdraw consent at any time, from the parent's account (the child's page) or from the original consent link. Withdrawing deletes the child's data and closes the account. Accounts a school creates for its students are covered by the school's own consent process.
5. AI features
Some features use AI models made by Anthropic (Claude). When you use one, what that feature needs is sent to Anthropic to produce an answer:
- Doubt solver, "Snap a question", "Solve it with me", "Explain it back", word meanings, GK questions, the voice tutor, spoken-English practice and viva practice: your question, explanation, photo or spoken words (as text), the lesson it is about, and your class, board and language. Not your name, username, phone or school.
- Marking help: photos of answers, exam papers or answer sheets that a student or teacher uploads to be read and marked. A name written on the paper is visible in the photo.
- The assistant chat (for students, parents and staff) includes the signed-in person's name and the records it looks up for them; for a teacher or parent that can include a child's name and marks.
- AI voice calls with the tutor use the child's first name; the WhatsApp assistant for parents uses the child's name and records to answer the parent.
- Short texts we write for people — a weekly coach note, a tip in the parents' weekly letter, a draft progress-card comment for a teacher, class notes from a teacher's recording — are written without the child's name, which we add afterwards.
- Our content team also uses AI to draft lessons and questions from the syllabus. That uses no student or parent data, and a person reviews every lesson before students see it.
Anthropic may process this data outside India, including in the United States, to provide the answer. Under Anthropic's commercial terms, data sent through its API is not used to train its models. AI answers can be wrong: please check important things with a teacher. Ask your child not to type personal details into a doubt or chat.
7. How long we keep it
- Your account and learning data: while the account exists. When it is deleted, the data is deleted (section 9).
- Accounts that never got a parent's consent: deleted after 7 days.
- Bus positions: 7 days. Safety-card location history: 30 days; SOS alerts: 90 days.
- Assistant chats: 90 days after the last message. Photos of written answers for practice: 90 days. Teachers' photos of answer sheets: 30 days after marking (up to a year if the school chooses), 120 days at most if never marked. Home-activity photos: 180 days. Event photo albums: until the date the school sets (a year by default). A teacher's class audio: deleted once turned into notes, or after 24 hours.
- Wellbeing check-ins: 52 weeks (closed alerts: 2 years). Admission enquiries: a year (a school may change it). Records of phone calls to parents: 180 days.
- One-time codes: work for 10 minutes and are stored only as hashes. Sign-in attempts and ended sessions: 30 days. Raw usage events: 90 days; anonymous totals: 13 months.
- Consent records and the audit trail: kept after an account is deleted, without its learning data, because the law asks us to be able to prove what consent was given or withdrawn, and when. Payment and fee records: as long as tax and accounting laws require. Certificates a school issued: as the school's record.
- Backups: copies in our encrypted backups are overwritten within [backup retention period].
8. How we protect it
Passwords and one-time codes are stored only as hashes, and connections are encrypted. Sign-ins and codes are rate-limited, a password change signs the account out everywhere, and sessions end on their own. Each role sees only what it needs (a parent only their own children; a teacher only their own students), and important actions are recorded in an audit log. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board of India as the law requires.
9. Deleting your account
You can delete your account at any time: in the app on Account settings → "Delete my account", or without the app on our Delete account page, with a one-time code sent to the account's phone or email. A parent can delete a child's account too. Your profile, learning activity, uploads, messages and location history are deleted straight away; we keep only the records listed in section 7. Accounts a school created are removed by the school; staff accounts are switched off by their administrator.
10. Your rights
You — or a parent, for a child — can:
- Access: ask for a summary of the personal data we hold about you and how we use it, and who we shared it with. Much of it is already on your progress screens.
- Correct and update: fix wrong or incomplete details — most can be changed in the app (My Profile, Account settings).
- Erase: delete your account (section 9), or ask us to delete particular data we no longer need.
- Withdraw consent: at any time, as easily as it was given. It does not make what we did before unlawful, but the app can no longer be used without it.
- Grievance: complain to our Grievance Officer (section 11) and get an answer. If you are not satisfied, you can complain to the Data Protection Board of India.
- Nominate: name someone to exercise these rights for you if you die or cannot act.
For records a school keeps about its students, you can also ask the school. We may need to confirm who you are before acting on a request.
11. Grievance Officer and contact
Grievance Officer: Lingsaa Support Team, LINGSAA Technologies Private Limited, 6-13-8, Arundelpet, Guntur, Andhra Pradesh 522002, India. Email: support@lingsaa.com. We will acknowledge your message and answer within the period the DPDP Act and its Rules set.
Contact
- Email: support@lingsaa.com
12. Changes to this policy
If we change how we use information, we will update this policy, its version and the date above, tell you in the app, and ask again for consent where the law requires it.