Privacy Policy

PEPP AI ("we", "us", "our") is an AI-powered educational platform that helps parents support their child's learning. We turn any topic, document, or textbook page into a personalised quiz, giving children a confident, gamified practice experience and giving parents the analytics to track real progress.

PEPP AI is an India-incorporated company. This policy is governed primarily by the Digital Personal Data Protection Act, 2023 (DPDPA 2023). If you access PEPP AI from another country, local privacy laws may also apply.

We collect information in three ways: information you give us directly, information generated through use of the platform, and information collected automatically.

2.1 Information you provide

When you create a PEPP AI account, you provide:

• Your name and email address
• Your password (stored encrypted, we cannot see it)
• Your child's chosen username and password for their profile
• Your child's grade level or age, if you choose to provide it
• Payment details, processed directly by our payment provider; we do not store card or banking numbers

2.2 Content you upload

To generate quizzes, you or your child may upload photos of textbook pages, worksheet scans, PDF documents, or typed topic descriptions. See Section 5 for important details on how this content is handled and stored.

2.3 Information generated by using PEPP AI

As your child uses the platform, we collect:

• Quiz results, scores, and individual answer patterns
• Streak data, badge achievements, and milestone completions
• Progress over time and performance trends by topic
• Time spent on quizzes and sessions

2.4 Information collected automatically

When you use our platform, we automatically receive:

• IP address and approximate location (country and city level only)
• Device type, operating system, and browser version
• Pages visited, features used, and session duration
• Crash reports and error logs to help us fix problems

We use your information only for the purposes described below. We do not use it for anything else without telling you first.

3.1 Delivering the service

Generating quizzes from your uploaded content, tracking your child's progress, and providing analytics in your parent dashboard.

3.2 Personalising learning

Adapting quiz difficulty to your child's current ability level on each topic, so practice is always appropriately challenging, never too easy, never discouraging.

3.3 Account and subscription management

Maintaining your account, processing subscription payments, and sending you essential service communications.

3.4 Improving PEPP AI

Understanding how the platform is used so we can make it faster, more accurate, and more useful. See Section 5 for how uploaded content may be used in this context.

3.5 Safety and security

Detecting and preventing fraud, unauthorised access, or abuse of the platform.

3.6 Legal compliance

Meeting our obligations under DPDPA 2023 and any other applicable law.

We do not use children's data for advertising, for comparison against other children, or for any purpose unrelated to their individual learning journey.

PEPP AI is designed for children of all ages, used entirely under the oversight of their parent or guardian.

4.1 How child accounts work

Parents create an account and, during onboarding, set up a named profile with a username and password for their child. The child uses these credentials to log in and access their quiz interface. The parent's account is the controlling account, the child's profile sits within it.

4.2 Parental consent

By creating a child profile on PEPP AI, you, as the parent or guardian, give consent for PEPP AI to collect and process your child's learning data as described in this policy. Children do not consent independently. We rely on you.

4.3 No advertising to children

We never show advertisements to children. We never use children's data for behavioural profiling, targeted marketing, or any commercial purpose beyond delivering the learning service.

4.4 Your control

As the account holder, you have full visibility into your child's activity. You can review their quiz history, edit their profile details, or delete their account at any time from your dashboard.

4.5 Account deletion

When you delete your account or your child's profile, all associated personal data is permanently deleted within 30 days.

When you upload documents, photos, or text to generate quizzes, here is what happens:

5.1 Processing

Your content is sent to our AI systems to generate quiz questions. This happens in seconds.

5.2 Storage

Uploaded content and the quizzes generated from it are retained on our platform for the life of your account. You can delete specific uploads from within your account at any time.

5.3 Platform improvement

PEPP AI may use uploaded content, in anonymised or aggregated form, to improve the quality of our quiz generation engine. Where we do this, the content is stripped of any information that identifies you or your child before it is used.

5.4 Sharing with other users

PEPP AI may make quiz questions generated from uploaded content available to other users on the platform, where we believe the content would benefit the wider learning community. We will not share content in a way that identifies your child personally.

Our recommendation: avoid uploading documents that contain your child's full name, school name, or other identifying personal details that are not needed for quiz generation.

PEPP AI does not sell your personal data. We share it only as described below, only with parties bound by appropriate data protection obligations.

6.1 Third-party AI providers

Quiz questions are generated using large language model (LLM) technology from third-party AI providers. Uploaded content is transmitted to these providers solely to generate quiz questions. They are contractually prohibited from using your content to train their own models or for any other purpose.

6.2 Analytics tools

We use analytics software to understand how our platform is used. These tools receive anonymised, aggregated data. We do not share personally identifiable information with analytics providers.

6.3 Payment processors

Subscription payments are handled by a third-party payment provider operating in India. We do not store your payment credentials. Please review your payment provider's own privacy policy for details.

6.4 Cloud infrastructure

Our platform and all data are hosted on secure cloud infrastructure. These providers act as processors under our instruction and are bound by data processing agreements that require them to protect your data.

6.5 Legal requirements

We may disclose your information if required by law, court order, or regulatory directive, or where necessary to protect the safety of any person.

6.6 Business transfers

If PEPP AI is acquired or merges with another company, your data may transfer to the new entity. We will notify you at least 30 days before any such transfer and explain your options, including the right to delete your account.

We retain personal data for as long as your account is active. When you close your account:

• Your personal data is permanently deleted within 30 days
• Anonymised, non-identifiable data (aggregate trends, platform performance metrics) may be retained for ongoing product improvement

You can request deletion of specific data at any time without closing your entire account, see Section 9.

PEPP AI uses cookies and similar technologies to keep the platform working and to understand how it is used.

8.1 Essential cookies

They are required for the platform to function, keeping you logged in, securing your session, and remembering your preferences. You cannot opt out of essential cookies while actively using PEPP AI.

8.2 Analytics cookies

They help us understand which features are most useful and where users encounter problems. You can opt out of analytics cookies in your account settings at any time.

8.3 No advertising cookies

We do not use cookies for advertising, retargeting, or tracking you across other websites. We do not allow third-party advertisers to place cookies on our platform.

You can also manage cookies in your browser settings. Disabling essential cookies may prevent parts of the platform from functioning correctly.

Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:

9.1 Right of access

You can request a summary of the personal data we hold about you and your child, and information about how it has been processed.

9.2 Right to correction

You can ask us to correct any personal data that is inaccurate or incomplete.

9.3 Right to erasure

You can request deletion of your personal data. We will comply unless we are required by law to retain it.

9.4 Right to grievance redressal

You can raise a complaint with us. We will acknowledge it within 2 business days and resolve it within 30 days.

9.5 Right to nominate

You can nominate another person to exercise your rights on your behalf in the event of death or incapacity.

To exercise any of these rights, contact us at support@peppai.com. We will respond within 30 days.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Data Protection Board of India once it is established under DPDPA 2023.

We apply appropriate technical and organisational measures to protect your data:

• All data is encrypted in transit using TLS and encrypted at rest
• Access to personal data is restricted to authorised personnel on a need-to-know basis
• Passwords are stored using industry-standard cryptographic hashing, no one at PEPP AI can see your password
• Our systems are reviewed regularly for security vulnerabilities

If we become aware of a data breach that is likely to affect your personal data, we will notify you promptly in accordance with DPDPA 2023.

No system is completely impenetrable. If you believe your account has been compromised, contact support@peppai.com immediately.

PEPP AI is based in India. Some third-party service providers, including AI providers and cloud infrastructure, may process data in other countries. Where data is transferred outside India, we ensure appropriate contractual safeguards are in place consistent with DPDPA 2023.

We may update this Privacy Policy from time to time. When we do:

• The "Last updated" date at the top of this page will change
• For changes that materially affect how we use your data, we will notify you by email at least 14 days before the change takes effect
• Your continued use of PEPP AI after the effective date constitutes acceptance of the updated policy

If you do not accept a material change, you may close your account before the effective date and we will delete your data in accordance with Section 7.

For any questions, requests, or concerns about this Privacy Policy:

Email support@peppai.com

We aim to respond to all privacy-related queries within 2 business days.