Legal
Privacy Policy
In short: we collect only what we need to teach your child. We never sell personal data, and we never use children’s data for advertising.
Effective date: 20 October 2026 · Last updated: 20 October 2026
Educifly Infinity LLP (“Educifly”, “we”, “us”) runs educifly.ai, where children aged 5–18 learn AI, coding and computational thinking in live, one-to-one online classes. Families join us from many countries, so this policy is written to meet India’s Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025, the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, the US Children’s Online Privacy Protection Act (COPPA), US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA), and other local laws that apply to you.
In short: we collect what we need to teach your child and run our classes. We never sell personal data. We never use children’s data for advertising.
This policy covers educifly.ai and our AI & coding classes. Our tutoring website, educifly.com, has its own privacy policy. Please read this policy together with our Terms and Conditions.
1. Who we are
Educifly Infinity LLP is the “data controller” (under the GDPR and UK GDPR) and the “Data Fiduciary” (under India’s DPDP Act) for your personal data.
Entity: Educifly Infinity LLP
Registered office: WZ-151, 1st Floor, Sri Nagar Colony, Delhi – 110034, India
Email: richa@educifly.com
Phone / WhatsApp: +91 95993 32176
2. Whose data this policy covers
Parents and guardians who visit our website, book a free trial, contact us, or enrol a child. Our website is meant for adults.
Students — the children who take our classes. Most are under 18, so we apply the extra protections in Section 9.
Website visitors who browse educifly.ai.
Mentors and people who apply to teach with us receive a separate privacy notice when they apply.
3. Information we collect
What you tell us on our website
Free trial form: parent’s name, email address, phone or WhatsApp number, your child’s age group, your country (from your phone code), and anything else you choose to tell us.
Contact form: your name, email address, phone or WhatsApp number (optional), what your message is about, and your message.
Our forms are for parents and guardians. We do not ask children to fill in any form on this website.
When you enrol your child
Parent details: name, email, phone or WhatsApp number, country, time zone and billing details.
Child details: first name (or the name you’d like us to use in class), age or school grade, starting level, and any learning needs you choose to share.
Payment details: handled by our payment provider. We never see or store full card numbers.
During classes
Live class video, audio and screen-share, including class recordings (Section 8).
Your child’s work: the projects, code and files they create in class.
Progress information: level, projects completed, computational-thinking checks, mentor notes and the progress updates we send you.
Messages between you and our team, by email or WhatsApp.
Collected automatically when anyone visits our website
Device and browser type, IP address, approximate location (city or country), pages viewed, clicks, scrolling, the site that referred you, and the buttons and links you use.
Cookies and similar technologies (Section 5).
We do not need sensitive information such as health details, religion or government ID numbers. If you share a learning need so we can teach your child better, we use it only for that purpose.
4. How we use your information
Where the GDPR or UK GDPR applies, the last column shows our legal basis.
Why we use it
What we use
Legal basis (EU/UK)
Arrange and run your free trial class
Trial form details
Steps you asked for before a contract
Reply to your questions
Contact form details and messages
Legitimate interests
Teach your child: assign a mentor, schedule and hold live classes
Parent and child details, class data
Contract
Send progress updates and class reminders
Contact details, progress information
Contract
Record classes for safety, quality and review
Class recordings
Legitimate interests; consent where local law requires it
Take payment, send invoices, keep tax records
Billing details
Contract; legal obligation
Understand how our website is used and improve it
Usage data, cookies
Consent where required; otherwise legitimate interests
Measure and improve our ads, which are shown to parents
Cookie and pixel data, hashed parent contact details
Consent where required; otherwise legitimate interests
Send news and offers to parents who opt in
Email, phone or WhatsApp
Consent
Keep our services safe, prevent misuse, meet legal duties
Logs and records
Legal obligation; legitimate interests
Under India’s DPDP Act, we rely on your consent (including a parent’s or guardian’s consent for a child) and on the legitimate uses the Act allows, such as providing a service you have asked for. You can withdraw consent at any time (Section 10). Withdrawing consent may mean we can no longer provide the related service.
We do not make automated decisions that have legal or similarly significant effects on you or your child.
5. Cookies and tracking
Cookies are small files stored on your device. We use cookies and similar tools on our public website only — never inside live classes. They fall into three groups:
Strictly necessary: make the website and forms work and remember your cookie choices. Always on.
Analytics: show us how visitors use the website so we can improve it.
Advertising: measure our ads to parents and show them to people likely to be interested.
Tool
Provider
What it does
Group
Framer
Framer B.V.
Hosts our website and receives the forms you submit
Strictly necessary
Google Tag Manager
Loads the other tools below, according to your cookie choices
Strictly necessary
Google Analytics 4
Counts visits, pages viewed, clicks and trial bookings; we keep this data for 14 months
Analytics
Microsoft Clarity
Microsoft
Heatmaps and session replays showing how visitors click and scroll, so we can fix confusing pages; text typed into form fields is masked
Analytics
Meta Pixel
Meta Platforms
Tells us when someone who saw our Facebook or Instagram ads visits, views pricing, contacts us or books a trial
Advertising
Country lookup
country.is and ipapi.co
Looks up your approximate country from your IP address, so we can pre-fill your phone code and show prices in your currency. No cookies are set.
Functional
Google Ads tags
When we run Google ads, shows which ads led to a trial booking
Advertising
Advanced matching. When you submit a form, the Meta Pixel turns the contact details you entered — such as your name, email address, phone number and country — into a scrambled code (a “hash”) on your device before sending it to Meta. Meta uses that code to match the booking to a Meta account, so we can measure our ads. Meta does not receive these details in readable form from us. It never receives your child’s details.
Your choices
EEA, UK and Switzerland: analytics and advertising cookies stay off until you agree to them in our cookie banner.
Everywhere: you can change your choice at any time through Cookie Settings at the bottom of every page, or block cookies in your browser settings.
You can also use the Google Analytics opt-out add-on and your Meta ad settings.
Blocking necessary cookies may stop parts of the website, such as our forms, from working.
Children and tracking. Our website is aimed at parents. We do not use these tools to build profiles of children or to show ads to children.
6. Who we share information with
We do not sell or rent personal data. We share it only as follows:
Your child’s mentor: your child’s first name, age, level, learning needs and class work — what they need to teach. Mentors are background-checked, bound by confidentiality, and must not contact families outside Educifly’s official channels.
Service providers who work for us under contract and only on our instructions:
Framer — website hosting and form submissions
Google — Analytics, Tag Manager, Google Ads, Google Workspace email and Google Meet classes
Zoom Video Communications — live classes and class recordings
Meta Platforms — Meta Pixel, ads on Facebook and Instagram, and WhatsApp conversations you start with us
Microsoft — Clarity website analytics
Payment gateways and billing providers — payments and billing
Scheduling, CRM, customer-support and messaging tools — managing enquiries and sending updates
Bunny.net (BunnyWay d.o.o.) — storing class recordings
country.is and ipapi.co — finding your approximate country from your IP address (phone code and local prices)
Professional advisers, such as lawyers, accountants and auditors, where needed.
Authorities, where the law, a court or a regulator requires it, or where we need to protect a child’s safety.
A new owner, if Educifly is merged, acquired or reorganised. This policy will continue to protect your data.
We require everyone we share data with to keep it secure and use it only for the purpose we set. A current list of our service providers is available on request.
7. International transfers
We are based in India and our service providers operate in several countries. Your data may therefore be stored or accessed in India, the United States, the European Union and other countries where they work.
When we transfer data from the EEA, the UK or Switzerland, we use recognised safeguards: the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or transfers to countries or certified companies recognised as giving adequate protection. You can ask us for a copy of these safeguards.
Transfers of personal data out of India follow the DPDP Act and any restrictions notified by the Government of India.
8. Class recordings
Every live class is recorded, to keep children safe and our teaching standards high.
What is recorded: the video, audio, shared screen and in-class chat. The class platform (Zoom or Google Meet) shows everyone that recording is on.
Why we record: safeguarding, checking and improving teaching quality, training mentors, resolving complaints, and letting you see any class you ask about.
Who can see recordings: you, on request, and designated members of the Educifly team. Recordings are never public and never used in marketing.
Where they are stored: with our recording storage provider, Bunny.net (BunnyWay d.o.o.), with access limited to authorised staff.
How long we keep them: up to 3 months after the class, then they are deleted automatically. We keep a recording longer only if it is needed for an open complaint, a safeguarding concern, or because the law requires it.
Your choices: you can ask to see any recording of your child’s class. If you have concerns about recording, talk to us before the class. Your child may keep their camera off at any time.
Families must not record classes themselves (see our Terms and Conditions).
9. Children’s privacy
Our classes are for children aged 5–18, so protecting their data comes first.
Our website is for parents. Children should not submit information through our website. If we learn that a child has sent us personal information without a parent’s consent, we will delete it.
One standard for every student under 18. Laws set different ages for a “child”: under 18 in India, 13 to 16 in EU countries, 13 in the UK, and under 13 for COPPA in the US. We treat every student under 18 as a child and require a parent’s or guardian’s consent, wherever they live.
Consent before the first class. A parent or guardian books every class, including the free trial, and gives consent for us to collect and use their child’s information as this policy describes, by ticking a consent box when they book. At the start of the free trial, the mentor confirms on camera that the parent is present and agrees, before recording starts. For enrolled students, the parent’s payment confirms consent again. Where the law requires, we may take extra steps to verify that you are the child’s parent or guardian and an adult.
Only what we need. From a child we collect only what we need to teach: first name, age or grade, level, their participation in live classes, their projects and their progress. We never ask children for their address, phone number, email, photos or social media accounts.
No advertising, no selling, no profiling. We never use children’s data for advertising, never sell it, and never profile children for any purpose other than following their learning progress.
Coding and AI tools. In class, children use learning tools such as Scratch, ScratchJr, block-based app builders, Python and child-appropriate AI tools. We choose tools that do not need a child account wherever possible. Where a tool needs an account, we ask the parent to create or approve it, and that tool’s own privacy policy applies. Children under 13 use generative AI tools only through their mentor’s shared screen, not through accounts of their own. Mentors teach every child never to type personal information into an AI tool.
Your child’s projects and image. We never publish your child’s projects, name, image or voice — for example on our website or social media — without your separate written permission. You can withdraw that permission at any time.
Your control. As a parent or guardian, you can review your child’s information, correct it, have it deleted, stop us collecting more, or withdraw consent at any time by contacting us (Section 15).
10. Your rights
Wherever you live, you can ask us to:
Access the personal data we hold about you or your child, and how we use it.
Correct data that is wrong or incomplete.
Delete your data, unless we must keep it by law.
Restrict or object to how we use your data. You can always object to direct marketing.
Move your data to you or another provider, where technically possible.
Withdraw consent at any time, as easily as you gave it. This does not affect what we did before.
We will not treat you differently for using these rights. Your local law may give you more, as below.
Where you live
Main law
Additional rights and timelines
Where to complain
India
DPDP Act, 2023 and DPDP Rules, 2025
Nominate someone to act for you if you die or cannot act; we reply within 90 days
Data Protection Board of India
EU / EEA
GDPR
We reply within one month (up to two more for complex requests)
Your national data protection authority
United Kingdom
UK GDPR and Data Protection Act 2018
We reply within one month
Information Commissioner’s Office (ICO)
United States
COPPA; state laws such as CCPA/CPRA
Parents of children under 13 can review, delete and stop further collection of their child’s data; opt out of advertising “sharing” through Cookie Settings
Federal Trade Commission; your state attorney general
United Arab Emirates
Federal Decree-Law No. 45 of 2021 (PDPL)
Access, correction, deletion and objection
UAE Data Office
Singapore
Personal Data Protection Act 2012
Access, correction, withdrawal of consent
Personal Data Protection Commission
Anywhere else
Your local data protection law
We honour the rights your law gives you
Your local regulator
A note for US residents. Some US state laws treat advertising pixels, such as the Meta Pixel, as “sharing” personal information for targeted advertising. We use them only for ads shown to adults, and you can opt out at any time through Cookie Settings or by emailing us.
How to ask. Email richa@educifly.com from the email address you gave us. We will verify your identity — and, for a child’s data, that you are the parent or guardian — and reply within the time your law sets. Using these rights is free in most cases.
11. How long we keep data
We keep data only as long as we need it, then delete or anonymise it securely.
Data
How long we keep it
Trial and contact enquiries that do not lead to enrolment
12 months after our last contact
Parent and child account details
While your child studies with us, plus 1 year
Class recordings
Up to 3 months after the class, then deleted automatically
Your child’s projects and progress records
While your child studies with us, plus 1 year (ask us for a copy anytime)
Billing and tax records
5 years, as Indian tax law requires
Website analytics (Google Analytics)
14 months
Microsoft Clarity session replays
Up to 30 days; summary reports up to 13 months
Server and security logs
At least 1 year, as India’s DPDP Rules require
Marketing permissions
Until you unsubscribe
We may keep data longer only where it is needed for a legal claim, a safeguarding concern, or because the law requires it.
12. How we protect your data
We use encrypted (HTTPS) connections, limit access to the staff who need it, keep class recordings in private storage that is never publicly linked, and bind every mentor and team member to confidentiality. Every mentor is background-checked before teaching.
No online service can be completely secure. If a personal data breach affects you, we will tell you and the relevant authorities as the law requires — including the Data Protection Board of India and, where the GDPR or UK GDPR applies, the data protection authority within 72 hours.
13. Other websites and tools
Our website may link to sites we don’t control, and classes run on Zoom or Google Meet. Those services have their own privacy policies, which apply when you use them.
14. Changes to this policy
We may update this policy as our services or the law change. We will post the new version here with a new “Last updated” date. For important changes, we will tell you by email or WhatsApp and, where the law requires, ask for your consent again before the change applies to your child’s data.
15. Contact us and Grievance Officer
For any question, request or complaint about your data or this policy:
Grievance Officer / Data Protection Contact: Richa Jain, Educifly Infinity LLP
Email: richa@educifly.com
Phone / WhatsApp: +91 95993 32176 (Mon–Sat, 10:00am–6:00pm IST)
Post: WZ-151, 1st Floor, Sri Nagar Colony, Delhi – 110034, India
We acknowledge complaints within 48 hours and aim to resolve them within one month, and always within the time your law requires.