Privacy Policy
BigGuruAI is an AI-based learning platform operated by Durva AI Private Limited. Most of the people whose information passes through this platform are school and coaching students, many of them children. We have written this policy in plain language so that a parent, a teacher or a school owner can read it once and know exactly what we hold, why we hold it, and how to have it removed.
1. Who we are
BigGuruAI is a product of Durva AI Private Limited, a company incorporated in India and recognised as a startup by DPIIT, with its registered office at B-19, Sainik Colony, Near Jhajhria Hospital, Rajgarh (Sadulpur), District Churu, Rajasthan — 331023, India.
For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Durva AI Private Limited is the Data Fiduciary for the personal data described in this policy. Any questions about this policy may be sent to contact@durvaai.com.
2. How our platform is accessed
BigGuruAI is not an open public app. A student or a parent can log in only if a school or coaching institute that has subscribed to BigGuruAI has enrolled that mobile number with us, or if the person has been enrolled directly by us as an independent learner. There is no self-service sign-up, and no one outside an enrolled list can create an account.
3. What information we collect
3.1 Information given to us by a school or coaching institute
- Institute name, city, state, institute code, GSTIN (where the institute has one)
- Name and mobile number of the one teacher or staff member the institute appoints to use its dashboard
- For each enrolled student: name, class, target examination (NEET or JEE), batch name, the student's mobile number and the parent's or guardian's mobile number
3.2 Information created while the platform is used
- Questions a student asks the AI, including text, typed questions, uploaded photographs of questions and voice input
- Tests generated for the student, the answers given and the resulting accuracy and topic-wise performance
- Study plans generated for the student
- Mood check-in responses (see section 6, which sets out the special protection given to this category)
- Activity records such as login times, pages used and features used
3.3 Technical information
- A secure session cookie that keeps a user logged in. We do not use advertising cookies and we do not run third-party advertising or tracking pixels on the application.
- Standard server logs generated by our hosting providers, which may include IP address, browser type and time of request, kept for security and troubleshooting.
3.4 Payment information
Online payments are processed by a payment aggregator authorised by the Reserve Bank of India. Card numbers, UPI credentials, net-banking credentials and similar payment instrument details are entered on the aggregator's own secure interface and are never seen, received or stored by us. We retain only the payment reference number, the amount, the date and the status of the transaction, which we need in order to credit the correct wallet and to maintain our books of account.
4. Children's data and parental consent
Most students on BigGuruAI are under eighteen years of age. Under the DPDP Act, the personal data of a child may be processed only with the verifiable consent of a parent or lawful guardian, and never in a manner that is detrimental to the well-being of the child.
Because a school or coaching institute already holds a direct relationship with the student and the parent, our onboarding model works as follows:
- The school or institute submits the student and parent mobile numbers to us and, by doing so, confirms to us in writing that it has obtained the consent of the parent or guardian for the student to use BigGuruAI and for the institute to share those details with us for that purpose.
- The parent's own mobile number is enrolled at the same time, so that the parent has independent access to a dashboard showing the child's activity from the first day.
- Where we enrol an independent learner directly, we obtain the parent's or guardian's mobile number and confirmation before the student's account is activated.
We do not carry out behavioural monitoring of children for advertising, and we do not serve targeted advertising to any user of BigGuruAI.
A parent or guardian may at any time write to contact@durvaai.com to withdraw consent, ask what we hold about their child, ask for a correction, or ask for the account to be deactivated and the data erased.
5. Why we use the information
| Purpose | What it involves |
|---|---|
| Answering doubts and generating tests and study plans | The student's question and the relevant subject context are sent to our AI provider so that an answer, a test paper or a plan can be generated and returned. |
| Showing progress to the student | Accuracy, weak topics, streaks and history are shown back to the student inside the application. |
| Showing a weekly summary to the parent | The parent dashboard shows study days, doubts asked, tests taken, accuracy and subject-wise effort. |
| Showing usage to the school or institute | The institute dashboard shows counts, activity, batch-wise and topic-wise performance and cost of usage. |
| Billing and accounts | Recording deposits and per-use deductions in the institute's or learner's prepaid wallet, and maintaining statutory books and GST records. |
| Security and support | Verifying a login by one-time password, preventing misuse, investigating a problem reported to us. |
| Legal compliance | Meeting obligations under Indian tax, company and data protection law. |
6. Mood check-ins — a special protection
BigGuruAI includes a wellness feature in which a student may record how they are feeling. We treat what a student writes there as the most sensitive information on the platform, and we protect it accordingly:
- What the student writes in a mood check-in is never shown to the school or the coaching institute. The institute dashboard shows academic counts and topics; it does not show mood entries, and it does not show the wording of any question a student has asked.
- A parent is not shown the words the child wrote. If a pattern of serious distress appears repeatedly over a short period, the parent's dashboard displays a short, gentle, non-clinical notice using the child's name, without any detail of what was written, so that the parent can talk to their child.
- Helpline numbers operated by independent organisations are shown to the student. We are not affiliated with those organisations and we do not share any student information with them.
7. Who processes the information on our behalf
We do not sell personal data, and we do not rent, trade or share it for anyone's marketing. We use a small number of established technology providers to run the platform. Each of them processes data only on our instructions and for the purpose described below:
| Provider | What it does for us |
|---|---|
| Artificial intelligence service provider | Generates answers, tests and study plans from the question and context we send. Our usage is on enterprise API terms under which the content sent by us is not used to train the provider's models. |
| Cloud database provider | Stores the records described in this policy, in encrypted form. |
| Cloud application hosting provider | Runs and serves the application to the browser. |
| Payment aggregator authorised by the Reserve Bank of India | Processes online payments. Payment instrument details go to the aggregator directly and never to us. |
| Telecom and messaging providers | Deliver one-time passwords and service messages to the mobile number on record. |
Each of these providers is an established organisation bound by a written agreement or by published terms of service that restrict it to processing data only on our instructions and for the purposes set out above. For the security of the Platform and of the data on it, we describe our providers by category rather than by name in this public policy. The names are disclosed, on a confidential basis, to a school or institute that requires them for its own compliance, to an auditor, and to any regulator, court or authority entitled to ask for them — a written request to contact@durvaai.com is enough.
We may also disclose information where we are required to do so by law, by a court, or by a competent authority, and where it is necessary to establish or defend a legal claim.
8. Where the information is stored
Our database and application servers are located outside India, on infrastructure operated by the cloud providers described above, and our artificial intelligence provider may also process requests outside India. Personal data described in this policy is therefore stored and processed outside India, under contractual safeguards with those providers and in accordance with applicable Indian law. Data is transferred over encrypted connections and is not transferred to any country to which such transfer is restricted by the Government of India. If you are not comfortable with this, please do not use the Platform, and write to us so that the account can be deactivated.
9. How long we keep it
- Student and usage records are kept for as long as the student is enrolled by an institute or by us, and for a reasonable period afterwards so that a student who returns — for example a repeat-year aspirant — does not lose their history.
- Removing a student from an institute marks the account inactive rather than deleting it, so that the institute's past records and our books remain accurate. An inactive student cannot log in and is not charged.
- Erasure on request. A student, a parent or guardian, or the institute on their behalf, may write to us to have the data erased. We will erase it within thirty days, except for the minimum transaction and tax records we are required by law to preserve.
- Financial records (invoices, wallet ledger entries, payment references) are retained for the period required under Indian tax and company law.
10. Security
We use technical and organisational measures appropriate to the size of our operation, including encrypted connections (HTTPS) throughout, login by one-time password sent to the registered mobile number, restricted server-side access to data, and separation of the four roles — student, parent, institute and administrator — so that each sees only what belongs to it. Access to the production database is limited to authorised personnel of the company.
No system connected to the internet can be guaranteed to be completely secure. If a personal data breach occurs that is likely to affect users, we will notify the affected users and the Data Protection Board of India as required under the DPDP Act.
11. Your rights
Subject to the DPDP Act and other applicable law, you may:
- ask what personal data we hold about you or about your child, and why;
- ask us to correct anything that is inaccurate, incomplete or out of date;
- ask us to erase personal data that we no longer need to keep;
- withdraw a consent you have given, at any time;
- nominate another person to exercise these rights in the event of death or incapacity; and
- raise a grievance with us, and if it is not resolved, with the Data Protection Board of India.
Requests should be sent from the email address or mobile number on record, so that we can be reasonably satisfied of your identity before we act.
12. Grievance redressal
Any complaint about the handling of personal data may be sent to our Grievance Officer:
Grievance Officer
Durva AI Private Limited
B-19, Sainik Colony, Near Jhajhria Hospital,
Rajgarh (Sadulpur), District Churu, Rajasthan — 331023, India
Email: contact@durvaai.com
We aim to acknowledge every grievance within three working days and to resolve it within thirty days of receipt.
13. Changes to this policy
We may update this policy as the platform develops or as the law changes. The revised policy will be published on this page with a new "last updated" date. Where a change materially affects how personal data is used, we will inform the schools and institutes on record so that they can inform parents.
14. Contact
Durva AI Private Limited
B-19, Sainik Colony, Near Jhajhria Hospital, Rajgarh (Sadulpur), District Churu, Rajasthan — 331023, India
Email: contact@durvaai.com
Company website: https://www.durvaai.com