The users are children.

1. Who this policy covers

This policy is issued by MonsoonSafe School Private Limited (CIN: U46909BR2026PTC085434), registered office C/O Manoj Kumar Singh, Pan-Tarapur, Vill-Rajgur, Tarapur, Munger, Bihar 813221 — the company operating MonsoonSafe (“MonsoonSafe,” “we,” “us”). It covers:

• Visitors to monsoonsafe.com, including anyone using the public demo (Memory Missions, the sample chapter) or submitting the school enquiry form.
• Students, teachers, and administrators at a school that has signed a pilot or subscription agreement with MonsoonSafe and is using the product inside that school.

These are different data relationships and are described separately below, because the legal basis for each is different.

2. The short version

MonsoonSafe is a spaced-retrieval learning product used inside schools. The public website’s demo runs entirely in your browser and we never see it. Inside a paying school, we process the minimum data needed to tell a teacher which concepts a class is forgetting — never a diagnosis, never sold, never used for advertising, and never shown to anyone outside that school. The school controls what gets tracked and can ask us to export or delete its data at any time.

3. What we collect, and from whom

3.1 Public site visitors

• Demo usage (Memory Missions, chapter demo): stays entirely in your browser’s session storage. We do not receive it, store it, or have any way to see it. It disappears when you close the tab.
• School enquiry form (/pilot): school name, city, your name, your role, your email, and (optional) approximate student count and a message. We collect this to reply to your enquiry — nothing else. This is ordinary business-contact information about an adult, not a child’s personal data.
• Ordinary web server logs (IP address, browser type, pages visited) for security and to keep the site running, retained for a limited period and not linked to any identity beyond what’s needed for that.

3.2 Students at a school using MonsoonSafe

Only once a school has a signed agreement with us, and only for classes and chapters that school’s staff have chosen to track:

• A roll number or school-assigned identifier chosen by the school — never a child’s name, and never anything MonsoonSafe assigns or asks for directly.
• Answers, confidence ratings, and response timing on the specific concepts the school has chosen to track — this is what makes spaced retrieval scheduling work.
• Nothing else. We do not collect a student’s location, contacts, device identifiers, browsing behaviour outside the product, photos, or any biometric data.

We never ask a child who they are, and we never display student-level data to anyone outside that child’s own school.

3.3 Teachers and school administrators

Name, school email, and role, used to create their account and show them their own school’s dashboard.

4. Why we’re allowed to process this (legal basis)

For the public site, this is ordinary contract/legitimate-interest processing of adult business contact information — nothing unusual.

For student data, MonsoonSafe’s position is:

• The school is the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act). It has the direct relationship with the child’s parent or lawful guardian, and it obtains their consent through its own enrolment or ed-tech consent process — the same way it already does for other school activities involving a child’s information.
• MonsoonSafe acts only as a Data Processor / service provider, processing student data solely on the school’s documented instructions, under the Data Processing Agreement the school signs with us. We do not independently seek parental consent, contact parents directly, or process student data for any purpose the school hasn’t authorised.
• Per DPDP Act Section 9, no tracking, behavioural monitoring, targeted advertising, or profiling of children ever happens — this is not just policy, it’s a legal prohibition, and it’s also simply not part of the product.

If you are a parent and have questions about your child’s data, the correct first contact is your child’s school, since they hold the consent relationship; the school can reach us directly at any time.

5. What we never do

• We never sell, rent, or broker student data to anyone, for any reason.
• We never use student data for advertising — there is no ad product.
• We never state or imply that a student has ADHD, dyslexia, or any psychological or medical condition. MonsoonSafe reports what happened to an answer (faded, a specific misconception, a missing earlier step) — never a diagnosis. That is a clinical judgement outside this product’s scope, by design, not by omission.
• We never show one student’s data to another student, or to anyone outside that student’s own school.
• We never use student data to train models for any purpose outside improving that same school’s own retrieval scheduling, without the school’s separate, explicit agreement.

6. How long we keep data, and how it’s deleted

• School enquiry submissions are kept only as long as needed to follow up, and are deleted on request.
• Student and teacher data is kept for the life of the school’s agreement with us. On termination, the school can request a full export, after which we delete the underlying data within a period set out in the Data Processing Agreement.
• We do not keep data longer than the school’s agreement requires “just in case.”

7. Security

We use industry-standard measures appropriate to the sensitivity of this data (encryption in transit, access controls, and database-level Row Level Security restricting who can read what). A full technical security description is being finalised as the product moves from demo to school deployment and will be reflected here before that data starts flowing.

8. Data breach notification

If a breach affecting personal data occurs, we notify the affected school without undue delay so the school can meet its own regulatory notification obligations, and we notify any individual whose data was affected where the law requires it.

9. Your rights

• Adults contacting us via the public site: you can ask us to access, correct, or delete your enquiry data at any time — email hello@monsoonsafe.com.
• Students, teachers, and parents at a partner school: requests about a specific child’s data go through that school, since the school holds the consent relationship and the records of who is enrolled. The school can request export or deletion from us directly.

10. Contact

Questions about this policy, or a grievance about how your data is handled: hello@monsoonsafe.com. We aim to acknowledge within a few business days.

11. Changes to this policy

We’ll update the effective date above and note material changes here when anything changes. See also our Terms of Service.