Privacy Policy

This policy explains how SARATech AI Solutions Private Limited ("SARATech", "we", "us") handles personal data in the QuizAttempt Parent Android application and the QuizAttempt platform it connects to.

CIN U62013JH2026PTC028520. Registered office: C/O Uttam Kumar, Uliyan, Govind Nagar, Kadma, East Singhbhum, Jamshedpur, Jharkhand 831005, India. Contact: hello@quizattempt.com.

It is governed by the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 with its rules. A separate policy covers the QuizAttempt Teacher application used by schools.

Every account in this app belongs to an adult — a parent or legal guardian. Children do not hold accounts, do not sign in, and have no profile of their own inside the app. Where a child uses a feature — a practice quiz or the daily puzzle — they do so on the parent's device, inside the parent's session, under the parent's supervision.

Because the account holder is the parent, consent for processing the child's data is given by the parent directly to us — at sign-up and when linking a child. This is the verifiable parental consent the DPDP Act requires for a child's data: the person consenting is the parent, identified by their own verified mobile number or email.

Two roles follow. For everything created in this app — the parent's account, home practice results, AI tutor requests, puzzle streaks — SARATech is the data fiduciary. For school records the app merely displays — quizzes assigned by the school, marks, attendance, the exam calendar — the school remains the data fiduciary and we process on its instructions; the app shows the parent their own child's slice of that record, where the school has enabled it.

What the app does not collect. No location data. No contacts, call logs or SMS — a co-parent or referral number is typed in, not read from the address book. No photographs or files. No biometric data and no health data. No payment card or banking data — the app takes no payments (section 8).

No advertising and no tracking. The app contains no advertising SDK, no analytics SDK, no attribution or fingerprinting library, and no third-party tracker of any kind. We do not build advertising profiles, and we do not permit behavioural advertising or tracking directed at children anywhere on the platform.

• To show the parent their child's school results: assigned quizzes, marks and analytics, attendance and the exam calendar.
• To generate AI tutor explanations and home practice quizzes for the topics the parent enters, and to keep practice history and puzzle streaks.
• To send push notifications the parent has enabled — a quiz assigned by a teacher, attendance recorded.
• To deliver a co-parent invitation or a referral the parent initiates.
• To operate the parent's plan: free-tier limits, AI usage allowances, and subscription status.
• To authenticate the parent, keep the account secure, investigate misuse, diagnose crashes and keep the service available.

Providers and training. We use established commercial AI providers on paid enterprise API tiers under terms that prohibit the use of submitted content to train their models, and we do not opt in to any training programme. We will name the providers in use, in writing, to anyone who asks — write to contact@quizattempt.com.

No automated decisions about a child. An AI explanation is reading material a parent requested; a practice score is feedback the family can act on or ignore. Nothing generated in this app becomes a mark of record, and no outcome affecting a child is finalised by a model.

Co-parent. A parent may invite the child's other parent or guardian by entering their mobile number and email. We use those details for one purpose: to deliver the invitation and, if accepted, create that person's own account with access to the same child. If the invitation is not accepted within 30 days, the details are deleted.

Referrals. A parent may refer another parent. We send the referred person a single invitation identifying who referred them, and do not contact them again if they do not respond. Referred details are used for no other purpose, are never sold or shared, and are deleted within 30 days if the invitation is not taken up. The referring parent should have the other person’s agreement before entering their details.

Each is bound by contract to confidentiality, to process only on instructions, and to security standards no lower than our own. We do not sell personal data, and we do not share it for advertising. We disclose personal data outside this list only where the law compels it, or to the school whose record the app displays.

Paid plans (Pro and Premium, billed annually) are purchased on our website through a licensed payment processor — the app itself contains no payment flow and collects no financial data. Card, UPI or banking details are entered on the processor’s page and never touch our servers; we store only the plan purchased, the transaction reference and the invoice we are required to keep under Indian tax law. Cancelling stops renewal; the data stays yours and the free tier continues.

All account and learning records are stored in India, in AWS's Mumbai region (ap-south-1) — databases, backups and application servers alike. Three things cross a border: AI learning requests (curriculum text only, section 5.1) may be processed by a provider outside India, push notifications travel through Google's delivery network, and page views and page-load timings on our website are recorded by our web front-end provider (section 7) from the route pattern and the campaign parameters of any marketing link. Any transfer is made under contractual safeguards, and we will cease transferring to any country the Central Government restricts by notification.

Where we must keep something longer to comply with law, we retain only what the law requires and nothing else.

Under the DPDP Act a parent may seek access to the personal data we hold on them and their linked child, its correction or completion, its erasure, and redress of a grievance, and may nominate another person to exercise these rights.

To delete your account and data, write to help@quizattempt.com from the email or mobile number on the account. We acknowledge within 3 working days, verify it is you, and complete deletion within 30 days — the parent account, home learning history, streaks and child link — confirming in writing when done.

What we cannot delete from here: the child's school record (marks, attendance) belongs to the school — the app only displays it. Ask the school, which instructs us under the Teacher-platform policy. What we must keep: payment invoices for the tax-law period, and nothing else.

• In transit: TLS on every connection; non-TLS traffic is refused rather than downgraded.
• On the device: credentials and session tokens are held in hardware-backed secure storage.
• At rest: databases and backups are encrypted; passwords are stored only as salted one-way hashes and cannot be recovered by us.
• Access control: a parent sees only their own linked child. A co-parent sees the same child only after accepting their own invitation and creating their own verified account.
• Internal access: restricted to the smallest number of engineers needed to operate the service, under confidentiality obligations.

No system is immune. In the event of a personal data breach we will notify the Data Protection Board of India and affected users without undue delay, in the manner the DPDP Act prescribes.

The app is offered to adults — parents and guardians — and is declared for adults in Google Play. A child may use learning features on the parent's device under the parent's supervision, and the design assumes exactly that: no child account, no child sign-in, no social features, no chat, and nothing a child can purchase.

Where a child's data is processed — the practice history, streaks and school results attached to the parent's account — it is processed with the parent's own verifiable consent (section 2). We do not track or behaviourally monitor children, do not direct advertising at them, and do not profile a child for any purpose other than the learning feedback the parent asked for. Streaks are a motivation device stored as a count against the parent's account, not a behavioural profile.

As required by the Digital Personal Data Protection Act, 2023 and the Information Technology Rules, our grievance officer is:

We acknowledge a grievance within 3 working days and resolve it within 30 days. If you remain unsatisfied you may approach the Data Protection Board of India.

We will post any change on this page with a new effective date and version. Where a change materially affects how a child's data is handled we will notify parents in the app before it takes effect. Continued use after the effective date constitutes acceptance.

SARATech AI Solutions Private Limited C/O Uttam Kumar, Uliyan, Govind Nagar, Kadma, East Singhbhum, Jamshedpur, Jharkhand 831005, India contact@quizattempt.com · +91 6207 225 395 · quizattempt.com