Privacy Policy
Last Updated: December 5, 2025
At Wave Ed AI, your privacy is our priority. This policy explains how we collect, use, and protect your personal information.
1. Information We Collect
1.1 Personal Information
When you create an account with Wave Ed AI, we collect the following basic profile information:
- Email Address: For account creation, login, and communication
- Full Name: To personalize your learning experience
- Grade/Class: To provide age-appropriate content (Class 11, 12, or Dropper)
- City: For regional content customization (optional)
- Phone Number: For account verification and support (optional)
- Exam Preference: JEE or NEET focus
1.2 Learning Data
To provide personalized AI tutoring, we collect:
- Questions you ask our AI tutor
- Problems you upload (images, text)
- Test scores and performance metrics
- Study time and subject preferences
- Progress through syllabus
- Conversation history with AI tutor
1.3 Payment Information
We collect payment information through secure third-party processors (Razorpay/Stripe). We never store your complete credit card numbers or CVV. Only transaction IDs and payment status are stored in our system.
1.4 Technical Information
- Device type and operating system
- Browser type and version
- IP address (for security purposes only)
- App version and crash reports
1.5 Information We Do NOT Collect
- ❌ Gender or sex
- ❌ Caste, religion, or ethnicity
- ❌ Family income or financial status
- ❌ Social media profiles
- ❌ Biometric data
- ❌ Real-time location tracking
- ❌ Contact list from your device
2. How We Use Your Information
2.1 Primary Uses
- Personalized Learning: Tailor AI responses to your grade level and exam focus
- Progress Tracking: Monitor your improvement and identify weak areas
- Account Management: Authenticate your identity and manage subscriptions
- Customer Support: Respond to your queries and technical issues
- Service Improvement: Analyze usage patterns to enhance AI quality
2.2 Communications
We may send you:
- Account-related notifications (password resets, payment confirmations)
- Study reminders and motivational messages (can be disabled)
- Product updates and new feature announcements
- Weekly progress reports (can be disabled)
You can opt-out of non-essential communications anytime from your account settings.
2.3 Research & Development
We use aggregated, anonymized data to:
- Train and improve our AI models
- Understand learning patterns and challenges
- Develop new features and content
3. Data Security
We implement industry-leading security measures to protect your information:
3.1 Encryption
- Data at Rest: All sensitive personal information is encrypted using AES-256 encryption
- Data in Transit: All data transmission uses TLS 1.3 (HTTPS)
- Database Encryption: Production databases are encrypted at the file system level
- Backup Encryption: All backups are encrypted before storage
3.2 Access Controls
- Role-based access control (RBAC) for employee access
- Multi-factor authentication (MFA) required for admin access
- Regular security audits and penetration testing
- Automated security monitoring and alerts
3.3 Infrastructure Security
- Hosted on AWS/GCP with SOC 2 Type II certification
- Regular security patches and updates
- DDoS protection and firewall implementation
- 24/7 security monitoring
3.4 Employee Training
All Wave Ed employees undergo:
- Mandatory privacy and security training
- Background verification checks
- Signed confidentiality agreements
- Limited access to user data (need-to-know basis)
4. Data Storage & Encryption
4.1 Where We Store Data
- Primary Storage: Data centers in India and Singapore
- Backup Storage: Encrypted backups in multiple geographic locations
- Data Residency: Personal data of Indian users is primarily stored in India
4.2 Encryption Details
We use a multi-layered encryption approach:
- Email: Encrypted with AES-256 before database storage
- Name: Encrypted with AES-256
- Password: Hashed using bcrypt (never stored in plain text)
- Payment Data: Tokenized by payment processors (PCI DSS compliant)
- Conversation History: Encrypted at rest
4.3 Data Retention
- Active Accounts: Data retained for the lifetime of your account
- Deleted Accounts: Personal data deleted within 30 days
- Learning Data: Anonymized and retained for AI improvement
- Transaction Records: Retained for 7 years (legal requirement)
- Support Tickets: Retained for 3 years
5. No Discrimination Policy
🤝 Our Commitment to Equality
Wave Ed AI is committed to providing equal educational opportunities to all students. We do not collect, use, or process any information related to:
- ✓ Gender or Sex: We never ask for or store gender information. All students receive identical AI tutoring regardless of gender identity.
- ✓ Caste, Religion, or Ethnicity: These are never collected or considered in any way.
- ✓ Economic Status: We do not track or store family income, parent occupation, or socioeconomic indicators.
- ✓ Physical Characteristics: No data about appearance, disabilities, or health conditions is collected.
- ✓ Language Preference: Students can use Hindi or English without any differential treatment.
5.1 AI Fairness
Our AI tutoring system is designed to be fair and unbiased:
- No algorithmic bias based on name, location, or school
- Same quality of explanations for all students
- No preferential treatment based on subscription tier (except feature access)
- Regular audits for AI bias and fairness
5.2 Scholarship Program
We offer need-based scholarships without collecting sensitive personal information. Scholarship decisions are based on:
- Academic merit and dedication
- Self-reported financial need (optional)
- Community recommendations
6. Location & Tracking
6.1 No Real-Time Location Tracking
6.2 City Information (Optional)
We may ask for your city during registration for the following limited purposes:
- Show exam centers near you (JEE/NEET centers)
- Provide city-specific exam dates and announcements
- Connect you with local coaching partners (if requested)
This is completely optional and does not affect your learning experience.
6.3 IP Address Usage
We collect your IP address only for:
- Security purposes (detecting unauthorized access)
- Fraud prevention (multiple account creation)
- Technical troubleshooting
IP addresses are never used for advertising, profiling, or shared with third parties.
6.4 Mobile App Permissions
Our mobile app requests only essential permissions:
- Camera: To upload problem photos (you control when)
- Storage: To save downloaded study materials
- Notifications: For study reminders (can be disabled)
We never request: Microphone, Contacts, SMS, Phone logs, or Background location.
7. AI Best Practices & Ethics
7.1 Responsible AI Development
Wave Ed AI is built on ethical AI principles:
🎯 Transparency
We clearly communicate that you're interacting with AI, not a human tutor.
🔒 Privacy-First
AI training never exposes individual student data or conversations.
⚖️ Fairness
AI models are tested for bias across demographics, subjects, and difficulty levels.
🛡️ Safety
Content filters prevent inappropriate or harmful responses.
7.2 AI Training & Your Data
- Anonymous Training: Only anonymized, aggregated data is used to improve AI
- No Personal Identifiers: Names, emails, and personal details are stripped before AI training
- Opt-Out Option: You can request exclusion from AI training datasets
- Human Review: AI responses are periodically reviewed by education experts for quality
7.3 Content Moderation
We use AI and human moderators to ensure:
- No inappropriate content in questions or answers
- Detection of academic dishonesty attempts
- Protection against prompt injection attacks
- Age-appropriate language and examples
7.4 AI Limitations
We are transparent about AI limitations:
- AI may occasionally make mistakes (see our Disclaimer page)
- AI cannot replace human judgment for college counseling
- AI is a study aid, not a substitute for consistent practice
8. Data Sharing & Third Parties
8.1 We Do NOT Sell Your Data
8.2 Limited Data Sharing
We share data only in these specific circumstances:
- Payment Processors: Razorpay/Stripe receive transaction information (name, email, amount)
- Email Service: AWS SES for sending account emails
- Cloud Hosting: AWS/GCP host our encrypted databases
- Analytics: Google Analytics (anonymized data only)
- Customer Support: Zendesk/Freshdesk for ticket management
8.3 Partner Program
If you sign up through a referral code:
- The referring partner sees ONLY that you subscribed (not your learning data)
- No personal information is shared with partners
- Partners cannot view your questions, tests, or progress
8.4 Legal Requirements
We may disclose information if required by law:
- Valid court orders or subpoenas
- Government investigations
- Protection of legal rights and safety
- Prevention of fraud or illegal activity
8.5 Business Transfers
In the event of a merger, acquisition, or asset sale, user data may be transferred. You will be notified, and the new entity must honor this privacy policy.
9. Your Privacy Rights
You have comprehensive control over your data:
9.1 Access Rights
- View Your Data: Download a copy of all your personal information
- Export Learning History: Download your conversation history and test results
- Transparency: Request explanation of how your data is used
9.2 Control Rights
- Update Information: Change your name, email, grade anytime
- Correct Errors: Fix any incorrect information in your profile
- Opt-Out: Disable emails, notifications, or analytics tracking
9.3 Deletion Rights
- Delete Account: Permanently delete your account and personal data
- Delete History: Clear your conversation history
- Right to be Forgotten: Request complete data erasure (with legal exceptions)
9.4 How to Exercise Your Rights
You can manage most settings directly from your account dashboard. For other requests:
- Email: privacy@waveed.in
- Include: Your registered email and specific request
- Response time: Within 7 business days
11. Children's Privacy (Under 18)
11.1 Parental Consent
Most of our users are minors (under 18). We take extra precautions:
- Parental consent required for users under 13 (as per applicable laws)
- Parent dashboard for monitoring student progress
- Age-appropriate content filtering
- No data sharing with advertisers
11.2 Protection Measures
- Moderated AI responses (no inappropriate content)
- No public profiles or social features
- No direct messaging between students
- Parental access to conversation history
11.3 Parent Rights
Parents/guardians can:
- Access their child's account data
- Request data deletion
- Control notification settings
- Monitor learning progress
- Contact support on behalf of child
12. Policy Updates
We may update this Privacy Policy to reflect:
- Changes in our services or features
- Legal or regulatory requirements
- Industry best practices
- User feedback and requests
12.1 Notification of Changes
When we make material changes:
- Email notification to all users
- In-app notification banner
- 30-day notice period before enforcement
- Updated "Last Updated" date at top of page
12.2 Your Options
- Continue using service = acceptance of new policy
- Cancel subscription before changes take effect
- Contact us with concerns or questions
13. Contact Us
For privacy-related questions, concerns, or requests:
📞 Phone
1800-XXX-XXXX (Toll-Free)
Mon-Sat: 10 AM - 7 PM IST
📍 Address
Vitisoft Private Limited
[Your Office Address]
[City, State - PIN]
India
Grievance Redressal: If you have concerns about how your data is handled, you can file a complaint with our Data Protection Officer. We commit to investigating and responding within 15 business days.
By using Wave Ed AI, you acknowledge that you have read, understood, and agree to this Privacy Policy.
This policy is governed by the laws of India and complies with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.