Privacy Policy

Last updated: April 2026

Schooh ("we", "us", "our") is built and operated by Schooh ("the company") for CBSE students in India, classes 9 to 12. We take privacy seriously, especially because most of our users are minors. This policy explains, in plain language, what we collect, why, and how we protect it.

1. What we collect

From you, with your knowledge:

• Google sign-in profile: your name, email, profile photo (provided by Google when you sign in).
• Onboarding info: your class, stream, study goal, preferred study time, and (optionally) your school name and parent's email.
• Study activity: chapters you mark as studying / completed, time you spend in study sessions, your custom subjects/books/chapters.
• Career assessment: your answers to our 12-question career quiz, plus any open-ended notes.
• Waitlist signups: name, email, optional phone, and any reason you share when you ask for the Full Report or a Career Counsellor.
• AI conversations: the questions you ask our AI Tutor and the responses, so you have a history.

Automatically:

• Anonymized usage events (page views, button clicks) to improve the product.
• Anonymized error reports when something breaks.
• Standard server logs (IP, user agent, referrer) for security and debugging — retained for 30 days.

2. How we use it

• To run the app: show your progress, sync your data across devices, generate reports.
• To personalize: power the Today screen, AI Tutor responses, and Career insights using your specific data.
• To improve Schooh: anonymized aggregate data tells us what books/chapters/features are popular so we can build better experiences.
• To communicate: respond to your waitlist signup, send your Full Report, notify you of meaningful product changes.
• For safety: detect abuse, fraud, or scraping.

3. Children & parents (DPDP Act 2023)

India's Digital Personal Data Protection Act (2023) requires that data of users under 18 be processed with verifiable parental consent. We honor this:

• During onboarding for Class 9-11 students (typically 14-17 years old), we ask for a parent's or guardian's email.
• We send the parent a one-time email letting them know their child has joined Schooh, and providing instructions to opt out or request data deletion.
• If a parent emails us at help@schooh.com requesting deletion of their child's account, we delete all associated data within 7 days.
• We never sell data of minors. Period.
• We do not show third-party advertising to minors.

4. Aggregated curriculum data ("crowd intelligence")

When students add custom subjects, books, or chapters to their tracker, we record this in an aggregated, de-identified form (no name, no email, no school) so we can suggest popular materials to other students with the same class and stream. Example: "12 other Class 10 PCM students added R.D. Sharma — use their chapter list?"

You can opt out of contributing to this aggregate data anytime in Settings → Privacy. Opting out doesn't affect your access to suggestions from other students.

5. Who we share with

• Google Firebase: stores your account, study data, and customizations. Data is encrypted at rest and in transit.
• Google Gemini API: processes your AI Tutor questions and Career assessment to generate responses. Google does not train its models on your inputs.
• Vercel: hosts our app and serves API requests.
• Resend / email providers: sends transactional email (welcome, payment receipts, parent notifications).
• Razorpay (when payments go live): handles ₹199 Full Report payments. Razorpay is RBI-regulated and PCI-DSS compliant.

We do not sell or rent your personal data to anyone. Ever.

6. Where data is stored

Your data lives on Google Cloud Firestore (asia-south1 region, India). Some derived data may transit US-based Google Gemini API endpoints during AI generation but is not retained there.

7. Security

• HTTPS everywhere.
• Firebase Authentication for sign-in (no password storage on our side).
• Firestore security rules restrict who can read/write what.
• Anonymous error tracking via Sentry (no PII in error reports).

8. Your rights

You can:

• Access your data — visible in the app at any time.
• Export your data — email help@schooh.com, we'll send a JSON dump within 7 days.
• Correct your data — edit in the app (Profile / You tab).
• Delete your account — Settings → Delete My Account, or email us.
• Opt out of crowd intelligence — Settings → Privacy.

9. Cookies & local storage

We use browser local storage to keep your study data available offline. We use a service worker for caching. We don't use third-party tracking cookies. Analytics is privacy-respecting (PostHog, self-hosted-friendly) and does not use cross-site cookies.

10. Changes to this policy

We'll update this page as the product evolves. Material changes will be flagged on your dashboard and emailed to your registered address.

11. Contact

Privacy questions, deletion requests, or anything else: help@schooh.com