Skip to Content

Privacy Policy

IntroductionInformation We CollectHow We Use InformationParental ConsentData ProcessorsData SecurityData RetentionRights of Parents and GuardiansData Breach NotificationGrievance RedressalChanges to This Policy

Introduction

Amaatra Education Foundation is a registered non-profit organization committed to improving student learning outcomes in under-served communities. PractEZ is its sole program — a WhatsApp-based practice platform for school students. This Privacy Policy describes how PractEZ collects, uses, stores, and protects the personal data of students who use the platform, and the rights of their parents and guardians in relation to that data. Amaatra Education Foundation is committed to complying with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, and to handling children's data with the highest standards of care.

Information We Collect

PractEZ collects only the data strictly necessary to deliver the practice service. This includes:

  • Phone number: the WhatsApp number through which the student accesses the platform; in most cases this is a parent or guardian's number, consistent with the shared-device households the program is designed for
  • Class and school information: the grade, curriculum, and school the student is enrolled in, as provided during teacher-led onboarding
  • Practice responses: the answers a student submits during practice sessions, used to score submissions, generate class analytics for the teacher, and award gamification rewards
  • Engagement data: session timing and completion records, used to compute streaks, XP, and leaderboard rankings

No sensitive personal data is collected — including health data, biometric data, religion, caste, or financial information. No data is collected for advertising or marketing purposes.

How We Use Information

PractEZ uses the data it collects solely for the following purposes:

  • To deliver curriculum-aligned practice questions to the student over WhatsApp
  • To score submissions and provide immediate feedback to the student
  • To generate class analytics for the teacher — completion rates, correctness summaries, and leaderboard rankings — scoped to their class and academic year
  • To compute and award XP, streak badges, monthly achievements, and leaderboard positions
  • To support the teacher in setting assignments and monitoring class engagement
  • To improve the platform based on aggregated, anonymized usage patterns

Student data is never sold, shared with advertisers, or used for any purpose beyond the delivery of the practice service. 

Parental Consent

PractEZ serves students who are minors. The program operates a two-stage consent model for the teacher-led program:

  1. School-level consent: the school adopts PractEZ for participating classes, placing the institution on record as having sanctioned the program's use
  2. Teacher-mediated parental consent: before enrolling any student, the teacher collects a signed consent form from the student's parent or guardian. The form captures the parent or guardian's name, their relationship to the student, and the WhatsApp number being registered for the student's use. This form is the primary consent record.

The WhatsApp opt-in message the student receives at activation is the confirmation step that follows from enrollment — it is not the consent mechanism itself. The consent record is the signed form held by the teacher.

Parents and guardians have the right to withdraw consent at any time by contacting info@practez.app. Upon withdrawal, the student's data will be removed from the platform and practice access will be discontinued.

Data Processors

In delivering the PractEZ service, student data passes through the following third-party platforms. Each operates under its own privacy policy and data processing terms.

  • WhatsApp: all messages between the student and the PractEZ chatbot transit WhatsApp's infrastructure. The student's phone number and message content pass through WhatsApp as part of normal message delivery.
  • Glific: the chatbot platform that routes messages between WhatsApp and PractEZ. Glific receives student messages, forwards them to the PractEZ service, and delivers responses back to the student over WhatsApp.
  • Google Cloud: the infrastructure on which PractEZ's service is hosted and where student data is stored, subject to Google Cloud's security and data processing standards.

PractEZ does not control how these platforms handle data beyond what is governed by their respective terms. Parents and guardians are encouraged to review the privacy policies of WhatsApp and Google Cloud for further information.

Data Security

Amaatra Education Foundation takes appropriate technical and organizational measures to protect student data from unauthorized access, disclosure, alteration, or destruction. Student data is stored securely and is accessible only to authorized personnel with a legitimate operational need. No method of electronic storage or transmission is completely secure, and the program cannot guarantee absolute security — but it is committed to maintaining industry-appropriate safeguards and reviewing them regularly.

Data Retention

Student data is retained only for as long as necessary to deliver the practice service and fulfil the program's operational and accountability obligations. Data associated with a completed academic year is retained for a period of one year following the close of that year, after which it is securely deleted. A parent or guardian may request earlier deletion by writing to info@practez.app.

Rights of Parents and Guardians

Parents and guardians have the following rights in relation to their child's data:

Right to access — to request a summary of the data PractEZ holds about their child
Right to correction — to request that inaccurate data be corrected
Right to deletion — to request that their child's data be deleted from the platform
Right to withdraw consent — to withdraw consent for data processing at any time, after which the student's data will be deleted and access discontinued

To exercise any of these rights, write to info@practez.app. Requests will be acknowledged within 48 hours and resolved within a reasonable time-frame.

Data Breach Notification

In the event of a data breach affecting student personal data, Amaatra Education Foundation will:

Immediately assess the scope and nature of the breach
Take all necessary steps to contain it and prevent further unauthorized access
Notify affected parents and guardians as soon as practicable, describing the nature of the breach, the data involved, and the steps being taken
Report to relevant authorities as required under applicable law
Review and strengthen security measures following the incident

Grievance Redressal

For any concerns, complaints, or questions relating to this policy or the handling of student data, parents and guardians may contact the program directly:

Abhineeth Akkasale,
Executive Director
Amaatra Education Foundation
info@practez.app
+91 7066617904

Grievances will be acknowledged within 48 hours.

Changes to This Policy

This policy may be updated from time to time to reflect changes in the program's practices or applicable law. Material changes will be communicated to schools and teachers, who will notify parents and guardians through the same channels used for initial consent. The most current version of this policy will always be available at https://www.amaatra.org/privacy.