Legal

Privacy Policy

In short: we collect only what we need to teach your child. We never sell personal data, and we never use children’s data for advertising.

Effective date: 20 October 2026 · Last updated: 20 October 2026

Educifly Infinity LLP (“Educifly”, “we”, “us”) runs educifly.ai, where children aged 5–18 learn AI, coding and computational thinking in live, one-to-one online classes. Families join us from many countries, so this policy is written to meet India’s Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025, the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, the US Children’s Online Privacy Protection Act (COPPA), US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA), and other local laws that apply to you.

In short: we collect what we need to teach your child and run our classes. We never sell personal data. We never use children’s data for advertising.

This policy covers educifly.ai and our AI & coding classes. Our tutoring website, educifly.com, has its own privacy policy. Please read this policy together with our Terms and Conditions.

1. Who we are

Educifly Infinity LLP is the “data controller” (under the GDPR and UK GDPR) and the “Data Fiduciary” (under India’s DPDP Act) for your personal data.

  • Entity: Educifly Infinity LLP

  • Registered office: WZ-151, 1st Floor, Sri Nagar Colony, Delhi – 110034, India

  • Email: richa@educifly.com

  • Phone / WhatsApp: +91 95993 32176

2. Whose data this policy covers

  • Parents and guardians who visit our website, book a free trial, contact us, or enrol a child. Our website is meant for adults.

  • Students — the children who take our classes. Most are under 18, so we apply the extra protections in Section 9.

  • Website visitors who browse educifly.ai.

Mentors and people who apply to teach with us receive a separate privacy notice when they apply.

3. Information we collect

What you tell us on our website

  • Free trial form: parent’s name, email address, phone or WhatsApp number, your child’s age group, your country (from your phone code), and anything else you choose to tell us.

  • Contact form: your name, email address, phone or WhatsApp number (optional), what your message is about, and your message.

Our forms are for parents and guardians. We do not ask children to fill in any form on this website.

When you enrol your child

  • Parent details: name, email, phone or WhatsApp number, country, time zone and billing details.

  • Child details: first name (or the name you’d like us to use in class), age or school grade, starting level, and any learning needs you choose to share.

  • Payment details: handled by our payment provider. We never see or store full card numbers.

During classes

  • Live class video, audio and screen-share, including class recordings (Section 8).

  • Your child’s work: the projects, code and files they create in class.

  • Progress information: level, projects completed, computational-thinking checks, mentor notes and the progress updates we send you.

  • Messages between you and our team, by email or WhatsApp.

Collected automatically when anyone visits our website

  • Device and browser type, IP address, approximate location (city or country), pages viewed, clicks, scrolling, the site that referred you, and the buttons and links you use.

  • Cookies and similar technologies (Section 5).

We do not need sensitive information such as health details, religion or government ID numbers. If you share a learning need so we can teach your child better, we use it only for that purpose.

4. How we use your information

Where the GDPR or UK GDPR applies, the last column shows our legal basis.

Why we use it

What we use

Legal basis (EU/UK)

Arrange and run your free trial class

Trial form details

Steps you asked for before a contract

Reply to your questions

Contact form details and messages

Legitimate interests

Teach your child: assign a mentor, schedule and hold live classes

Parent and child details, class data

Contract

Send progress updates and class reminders

Contact details, progress information

Contract

Record classes for safety, quality and review

Class recordings

Legitimate interests; consent where local law requires it

Take payment, send invoices, keep tax records

Billing details

Contract; legal obligation

Understand how our website is used and improve it

Usage data, cookies

Consent where required; otherwise legitimate interests

Measure and improve our ads, which are shown to parents

Cookie and pixel data, hashed parent contact details

Consent where required; otherwise legitimate interests

Send news and offers to parents who opt in

Email, phone or WhatsApp

Consent

Keep our services safe, prevent misuse, meet legal duties

Logs and records

Legal obligation; legitimate interests

Under India’s DPDP Act, we rely on your consent (including a parent’s or guardian’s consent for a child) and on the legitimate uses the Act allows, such as providing a service you have asked for. You can withdraw consent at any time (Section 10). Withdrawing consent may mean we can no longer provide the related service.

We do not make automated decisions that have legal or similarly significant effects on you or your child.

5. Cookies and tracking

Cookies are small files stored on your device. We use cookies and similar tools on our public website only — never inside live classes. They fall into three groups:

  • Strictly necessary: make the website and forms work and remember your cookie choices. Always on.

  • Analytics: show us how visitors use the website so we can improve it.

  • Advertising: measure our ads to parents and show them to people likely to be interested.

Tool

Provider

What it does

Group

Framer

Framer B.V.

Hosts our website and receives the forms you submit

Strictly necessary

Google Tag Manager

Google

Loads the other tools below, according to your cookie choices

Strictly necessary

Google Analytics 4

Google

Counts visits, pages viewed, clicks and trial bookings; we keep this data for 14 months

Analytics

Microsoft Clarity

Microsoft

Heatmaps and session replays showing how visitors click and scroll, so we can fix confusing pages; text typed into form fields is masked

Analytics

Meta Pixel

Meta Platforms

Tells us when someone who saw our Facebook or Instagram ads visits, views pricing, contacts us or books a trial

Advertising

Country lookup

country.is and ipapi.co

Looks up your approximate country from your IP address, so we can pre-fill your phone code and show prices in your currency. No cookies are set.

Functional

Google Ads tags

Google

When we run Google ads, shows which ads led to a trial booking

Advertising

Advanced matching. When you submit a form, the Meta Pixel turns the contact details you entered — such as your name, email address, phone number and country — into a scrambled code (a “hash”) on your device before sending it to Meta. Meta uses that code to match the booking to a Meta account, so we can measure our ads. Meta does not receive these details in readable form from us. It never receives your child’s details.

Your choices

  • EEA, UK and Switzerland: analytics and advertising cookies stay off until you agree to them in our cookie banner.

  • Everywhere: you can change your choice at any time through Cookie Settings at the bottom of every page, or block cookies in your browser settings.

  • You can also use the Google Analytics opt-out add-on and your Meta ad settings.

Blocking necessary cookies may stop parts of the website, such as our forms, from working.

Children and tracking. Our website is aimed at parents. We do not use these tools to build profiles of children or to show ads to children.

6. Who we share information with

We do not sell or rent personal data. We share it only as follows:

  • Your child’s mentor: your child’s first name, age, level, learning needs and class work — what they need to teach. Mentors are background-checked, bound by confidentiality, and must not contact families outside Educifly’s official channels.

  • Service providers who work for us under contract and only on our instructions:

    • Framer — website hosting and form submissions

    • Google — Analytics, Tag Manager, Google Ads, Google Workspace email and Google Meet classes

    • Zoom Video Communications — live classes and class recordings

    • Meta Platforms — Meta Pixel, ads on Facebook and Instagram, and WhatsApp conversations you start with us

    • Microsoft — Clarity website analytics

    • Payment gateways and billing providers — payments and billing

    • Scheduling, CRM, customer-support and messaging tools — managing enquiries and sending updates

    • Bunny.net (BunnyWay d.o.o.) — storing class recordings

    • country.is and ipapi.co — finding your approximate country from your IP address (phone code and local prices)

  • Professional advisers, such as lawyers, accountants and auditors, where needed.

  • Authorities, where the law, a court or a regulator requires it, or where we need to protect a child’s safety.

  • A new owner, if Educifly is merged, acquired or reorganised. This policy will continue to protect your data.

We require everyone we share data with to keep it secure and use it only for the purpose we set. A current list of our service providers is available on request.

7. International transfers

We are based in India and our service providers operate in several countries. Your data may therefore be stored or accessed in India, the United States, the European Union and other countries where they work.

When we transfer data from the EEA, the UK or Switzerland, we use recognised safeguards: the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or transfers to countries or certified companies recognised as giving adequate protection. You can ask us for a copy of these safeguards.

Transfers of personal data out of India follow the DPDP Act and any restrictions notified by the Government of India.

8. Class recordings

Every live class is recorded, to keep children safe and our teaching standards high.

  • What is recorded: the video, audio, shared screen and in-class chat. The class platform (Zoom or Google Meet) shows everyone that recording is on.

  • Why we record: safeguarding, checking and improving teaching quality, training mentors, resolving complaints, and letting you see any class you ask about.

  • Who can see recordings: you, on request, and designated members of the Educifly team. Recordings are never public and never used in marketing.

  • Where they are stored: with our recording storage provider, Bunny.net (BunnyWay d.o.o.), with access limited to authorised staff.

  • How long we keep them: up to 3 months after the class, then they are deleted automatically. We keep a recording longer only if it is needed for an open complaint, a safeguarding concern, or because the law requires it.

  • Your choices: you can ask to see any recording of your child’s class. If you have concerns about recording, talk to us before the class. Your child may keep their camera off at any time.

Families must not record classes themselves (see our Terms and Conditions).

9. Children’s privacy

Our classes are for children aged 5–18, so protecting their data comes first.

  • Our website is for parents. Children should not submit information through our website. If we learn that a child has sent us personal information without a parent’s consent, we will delete it.

  • One standard for every student under 18. Laws set different ages for a “child”: under 18 in India, 13 to 16 in EU countries, 13 in the UK, and under 13 for COPPA in the US. We treat every student under 18 as a child and require a parent’s or guardian’s consent, wherever they live.

  • Consent before the first class. A parent or guardian books every class, including the free trial, and gives consent for us to collect and use their child’s information as this policy describes, by ticking a consent box when they book. At the start of the free trial, the mentor confirms on camera that the parent is present and agrees, before recording starts. For enrolled students, the parent’s payment confirms consent again. Where the law requires, we may take extra steps to verify that you are the child’s parent or guardian and an adult.

  • Only what we need. From a child we collect only what we need to teach: first name, age or grade, level, their participation in live classes, their projects and their progress. We never ask children for their address, phone number, email, photos or social media accounts.

  • No advertising, no selling, no profiling. We never use children’s data for advertising, never sell it, and never profile children for any purpose other than following their learning progress.

  • Coding and AI tools. In class, children use learning tools such as Scratch, ScratchJr, block-based app builders, Python and child-appropriate AI tools. We choose tools that do not need a child account wherever possible. Where a tool needs an account, we ask the parent to create or approve it, and that tool’s own privacy policy applies. Children under 13 use generative AI tools only through their mentor’s shared screen, not through accounts of their own. Mentors teach every child never to type personal information into an AI tool.

  • Your child’s projects and image. We never publish your child’s projects, name, image or voice — for example on our website or social media — without your separate written permission. You can withdraw that permission at any time.

  • Your control. As a parent or guardian, you can review your child’s information, correct it, have it deleted, stop us collecting more, or withdraw consent at any time by contacting us (Section 15).

10. Your rights

Wherever you live, you can ask us to:

  • Access the personal data we hold about you or your child, and how we use it.

  • Correct data that is wrong or incomplete.

  • Delete your data, unless we must keep it by law.

  • Restrict or object to how we use your data. You can always object to direct marketing.

  • Move your data to you or another provider, where technically possible.

  • Withdraw consent at any time, as easily as you gave it. This does not affect what we did before.

We will not treat you differently for using these rights. Your local law may give you more, as below.

Where you live

Main law

Additional rights and timelines

Where to complain

India

DPDP Act, 2023 and DPDP Rules, 2025

Nominate someone to act for you if you die or cannot act; we reply within 90 days

Data Protection Board of India

EU / EEA

GDPR

We reply within one month (up to two more for complex requests)

Your national data protection authority

United Kingdom

UK GDPR and Data Protection Act 2018

We reply within one month

Information Commissioner’s Office (ICO)

United States

COPPA; state laws such as CCPA/CPRA

Parents of children under 13 can review, delete and stop further collection of their child’s data; opt out of advertising “sharing” through Cookie Settings

Federal Trade Commission; your state attorney general

United Arab Emirates

Federal Decree-Law No. 45 of 2021 (PDPL)

Access, correction, deletion and objection

UAE Data Office

Singapore

Personal Data Protection Act 2012

Access, correction, withdrawal of consent

Personal Data Protection Commission

Anywhere else

Your local data protection law

We honour the rights your law gives you

Your local regulator

A note for US residents. Some US state laws treat advertising pixels, such as the Meta Pixel, as “sharing” personal information for targeted advertising. We use them only for ads shown to adults, and you can opt out at any time through Cookie Settings or by emailing us.

How to ask. Email richa@educifly.com from the email address you gave us. We will verify your identity — and, for a child’s data, that you are the parent or guardian — and reply within the time your law sets. Using these rights is free in most cases.

11. How long we keep data

We keep data only as long as we need it, then delete or anonymise it securely.

Data

How long we keep it

Trial and contact enquiries that do not lead to enrolment

12 months after our last contact

Parent and child account details

While your child studies with us, plus 1 year

Class recordings

Up to 3 months after the class, then deleted automatically

Your child’s projects and progress records

While your child studies with us, plus 1 year (ask us for a copy anytime)

Billing and tax records

5 years, as Indian tax law requires

Website analytics (Google Analytics)

14 months

Microsoft Clarity session replays

Up to 30 days; summary reports up to 13 months

Server and security logs

At least 1 year, as India’s DPDP Rules require

Marketing permissions

Until you unsubscribe

We may keep data longer only where it is needed for a legal claim, a safeguarding concern, or because the law requires it.

12. How we protect your data

We use encrypted (HTTPS) connections, limit access to the staff who need it, keep class recordings in private storage that is never publicly linked, and bind every mentor and team member to confidentiality. Every mentor is background-checked before teaching.

No online service can be completely secure. If a personal data breach affects you, we will tell you and the relevant authorities as the law requires — including the Data Protection Board of India and, where the GDPR or UK GDPR applies, the data protection authority within 72 hours.

13. Other websites and tools

Our website may link to sites we don’t control, and classes run on Zoom or Google Meet. Those services have their own privacy policies, which apply when you use them.

14. Changes to this policy

We may update this policy as our services or the law change. We will post the new version here with a new “Last updated” date. For important changes, we will tell you by email or WhatsApp and, where the law requires, ask for your consent again before the change applies to your child’s data.

15. Contact us and Grievance Officer

For any question, request or complaint about your data or this policy:

  • Grievance Officer / Data Protection Contact: Richa Jain, Educifly Infinity LLP

  • Email: richa@educifly.com

  • Phone / WhatsApp: +91 95993 32176 (Mon–Sat, 10:00am–6:00pm IST)

  • Post: WZ-151, 1st Floor, Sri Nagar Colony, Delhi – 110034, India

We acknowledge complaints within 48 hours and aim to resolve them within one month, and always within the time your law requires.