Global Privacy Policy
Last updated June 2026
1.Introduction and Global Applicability
This Privacy Policy is a legally binding document between the User and Ekkagra. By clicking "I accept," accessing the Website, or using our AI-assisted learning tools, you agree to these terms.
To serve a global audience, this policy is construed in consonance with India’s Information Technology Act, 2000, the Digital Personal Data Protection (DPDP) Act of 2023, the European Union General Data Protection Regulation (GDPR), and the US Children’s Online Privacy Protection Act (COPPA). Depending on the context, Ekkagra acts as a "Data Processor" handling information on behalf of the educational institution or independent educator, who acts as the "Data Fiduciary" or "Data Controller".
2.Collection of Information (Data Minimization)
We collect only the data strictly necessary to operate our educational platform.
Account Data: Name, email, phone number, and institutional affiliation.
Deep Educational Telemetry: As part of our service, we collect precise behavioral data. This includes exact video watch durations down to the second, drop-off timestamps, skipping behavior, and progression through "Guided" video paths.
AI Assessment Data: We collect student responses to quizzes, question-level accuracy metrics, and multi-modal assignment submissions (text, uploaded images, audio, and video files) for evaluation by our Large Language Model (LLM) grading system.
3.Strict Compliance for Children's Data
We acknowledge that children require heightened digital protection. Under India's DPDP Act, any individual under the age of 18 is classified as a child. We also comply with the GDPR (under 16) and COPPA (under 13).
Verifiable Parental Consent: We mandate that the subscribing Data Fiduciary (the educator or school) obtains verifiable parental consent before creating an account for, or processing the data of, any minor.
Zero-Exploitation Rule: Ekkagra explicitly prohibits the behavioral tracking, profiling, or targeted advertising of children for non-educational commercial purposes. Analytics are used solely for academic intervention.
4.Purpose and Use of Information
Collected information is used exclusively to:
Power our AI auto-grading systems to evaluate assignments and calculate partial-credit scores.
Generate granular analytics dashboards for educators to track student attention and identify learning gaps.
Implement security practices to prevent fraud, prompt injection attacks, and unauthorized platform access.
5.Cross-Border Data Transfers and Sharing
Ekkagra does not sell or monetize student data. To ensure efficient global management, we may transfer data to secure, third-party cloud infrastructure and LLM API providers located outside your home country. All international data transfers comply with GDPR Standard Contractual Clauses (SCCs) and DPDP regulations regarding permitted overseas processors.
6.Data Security and Breach Notification
We employ industry-standard AES-256 encryption and HTTPS protocols. However, in the event of a personal data breach, Ekkagra will notify the Data Protection Board of India (DPBI) and the affected Data Fiduciaries within 24 hours, as the DPDP Act mandates breach reporting regardless of the breach’s size or minimum threshold.
7.Rights of the Data Principal
Under the DPDP Act and GDPR, users (or their legal guardians) possess absolute rights over their data. You have the right to:
Access a summary of your personal data and assessment records.
Request the correction of inaccurate data or the erasure of outdated data.
Withdraw consent for data processing at any time.
8.Limitation of Liability and Force Majeure
While we employ rigorous security practices, transmissions over the internet cannot be guaranteed as absolutely secure. To the maximum extent permitted by global law, Ekkagra excludes liability for indirect damages, lost profits, or data loss caused by third-party cloud providers. Our total liability is strictly capped at the fees paid by the user in the twelve months preceding the claim. Ekkagra is not liable for data loss attributable to events beyond our control (Force Majeure).
9.Grievance Redressal
Users may report privacy violations, identity theft, or grievances to our designated Grievance Officer:
10.Governing Law and Jurisdiction
This Policy shall be governed by the laws of Singapore. Any disputes arising out of or in connection with them, shall be governed by and construed in accordance with the substantive laws of Singapore, without regard to conflict of law principles.
Questions about this policy? Reach our Grievance Officer at support@ekkagra.com.