Privacy notice

1. Who we are

QuestLens is an exam-prep service with parent-controlled accounts. Navriti Solutions decides why and how personal data is processed for the service. We are the data fiduciary.

Navriti Solutions
Near UKF Engineering College, Meenambalam, Mailavila, Kollam, Kerala 691302, India
Email: contactus@navriti.in

Questions about this notice, a request to exercise a right, or a grievance go to the Grievance Officer at the same email. Details are in section 10.

2. Personal data we process

We process the following personal data, and only what the service needs.

Parent account

• Name, email address, and mobile number.
• Address (street, PIN code, city, state, and country).
• A record that you confirmed you are 18 or older, and the version and time of the User Agreement you accepted.
• Payment records: plan, amount, exam coverage, student seats, Razorpay order and payment identifiers, and subscription status. We do not store your full card or UPI PIN. Razorpay collects payment credentials.

Student account

• Name, email, and a password you choose. Students cannot self-register.
• Date of birth. We use it to check that the student is between 5 and 21.
• Your confirmation that you are the student’s parent or legal guardian, the purposes you allow, and whether AI tutoring is paused.
• Learning data: practice and mock attempts, scores, mastery and a daily study path, Doubt Lens session summaries, improvement reports, and AI usage totals (model, token counts, day, and exam). We do not keep the full text of tutoring prompts in usage logs.

Device and security

• Sign-in session data, your language choice, and the last exam you opened, stored on the device so the app can sign you in and remember those settings.
• Abuse-prevention checks (Google reCAPTCHA Enterprise / App Check). These do not include the student’s answers or chats.

We do not ask for Aadhaar, PAN, or other government identity numbers. If a student types an email, a long phone number, an identity-number pattern, or “my name is …” into a study message, we strip those patterns before the message is stored or sent to the tutor.

3. Why we process it

Each purpose below is tied to a service you can see in the product.

• Account and security. Create the parent login, verify email and phone, save the address, and keep the account from being misused.
• Student login. Create the student you add, check age, and let that student practise under your account.
• Payments. Take payment, apply a plan to the students you choose, issue receipts, and keep accounting records.
• AI tutoring (you can turn this off). Explanations, Doubt Lens, similar questions, and improvement reports. Study text is sent to Google Gemini. The student’s name and email are not put in those prompts.
• Adaptive practice (you can turn this off). Mastery scores and Today’s path, calculated on our systems from the student’s own attempts. This does not use Gemini. It is used to choose what to practise next. It is not used for advertising.
• Parent progress (you can turn this off). Show you scores, weak topics, and coaching reports.
• Photo doubts (off unless you turn it on, and off in the product until we enable the feature). A picture of a question would be sent to Google Gemini only after both are on.
• Safety and legal duties. Block unsafe tutor output, investigate misuse, and keep records we must retain.

We do not sell personal data. We do not show advertisements to students, and we do not use student data for targeted advertising or for marketing by other companies. We do not send promotional email.

4. Children and consent

Only an adult can register. You must confirm that you are 18 or older, verify your email and mobile number with a one-time code, and save an address before you add a student or pay. When you add a student you confirm that you are that student’s parent or legal guardian, and you choose the purposes in section 3. We record the choice, the time, and this notice’s version.

For a student under 18, you exercise the rights in this notice for that student. You can change a purpose, pause all AI tutoring, export learning data, or delete the student account from Students in the parent account. Turning a purpose off is the same kind of step as turning it on.

A student aged 18 to 21 is still created by you and sits on your account. That student may also write to us to exercise the rights in section 9 for their own data.

Practice scores, viva scores, and improvement reports are study feedback. They are not official marks, ranks, or admission decisions. Tests themselves do not call Gemini. Questions shown to students come from a bank a person has approved, or from a published previous-year paper.

5. Who else processes data

We use these processors to run the service. They process data on our instructions.

• Google Firebase (Authentication, Firestore, Cloud Storage, Cloud Functions, and hosting). Account, learning, and file data. Our Cloud Functions run in Mumbai (asia-south1).
• Google Gemini (the Gemini API). Study text for explanations, Doubt Lens, similar-question search, and improvement reports, and a question image if photo doubts are later enabled and you allow them. Google may process that content outside India. We use it to generate the study reply. We do not use it to advertise to the student.
• Razorpay. Parent contact details needed for checkout, and payment status. Razorpay’s terms apply to the payment.
• Google reCAPTCHA Enterprise. A check that the request comes from our app, to reduce abuse.

Our operators can access data to support the account, moderate the question bank, or investigate a safety incident. They do not use student chats for any other purpose.

6. How long we keep it

• Account, attempt, mastery, and report data are kept while the student account is active, so practice history and progress stay available.
• Completed Doubt Lens chat messages are deleted after 90 days. Session summaries may remain with the learning record until you delete the student account.
• AI usage logs are deleted after 13 months.
• When you delete a student account, we delete the student login, profile, attempts, mastery, Doubt Lens sessions and messages, reports, and AI usage for that student, and we remove that student from plan seats.
• We keep payment records for accounting and tax. We keep a consent history and a parent–student link marked deleted, so we can show what was allowed and when. Those records are not used to keep tutoring the student.

7. Security

We use access controls so student attempts, chats, and consent records are not readable from the browser directly, encryption in transit, rate limits, and checks on tutor output. No method of storage or transmission is perfectly secure. If a breach of personal data is likely to affect you, we will tell you and the Data Protection Board of India as required by law.

8. Related documents

The User agreement is the contract for using QuestLens. The AI tutor notice explains how generated explanations and Doubt Lens work.

9. Your rights

You can ask for the following. For a student under 18, the parent or guardian asks.

• Access. On the Students page, open the child and use Export data for a JSON copy of the student profile, consents, recent attempts, mastery, Doubt Lens session summaries, recent reports, and recent AI usage totals. Email us if you need records that export does not include, including older history or chat text we still hold.
• Correction. Update the parent address on the profile page, and the student’s date of birth under Privacy and AI on that student’s page. Email us to correct a name, phone number, or other detail you cannot edit there.
• Erasure. Use Delete student account on that student’s page. Email us to close the parent account. Section 6 describes what we still keep.
• Withdraw consent. Untick a purpose, or pause AI tutoring, under Privacy and AI. Withdrawal stops that processing going forward. It does not undo processing already done, and it does not cancel a payment.
• Nomination. You may nominate another adult to exercise these rights for your data if you die or become unable to do so. Email the Grievance Officer with the nominee’s name and contact details.

10. Grievance and the Board

Grievance Officer
Navriti Solutions
Near UKF Engineering College, Meenambalam, Mailavila, Kollam, Kerala 691302, India
Email: contactus@navriti.in

Write “Grievance” in the subject line, and include the parent email on the account and what you want us to do. We will acknowledge the request and respond within 90 days. You may also use the Contact us page.

If we do not respond within that period, or you are not satisfied with the response, you may complain to the Data Protection Board of India.

We have not been notified as a Significant Data Fiduciary. If that changes, we will publish the Data Protection Officer’s contact in this notice.

11. Changes

When we change this notice we will update the date and the version above. New purpose consents, and later changes you save on the dashboard, are stored against the version then in effect. If you do not agree to an update, stop using the service and ask us to close the account.