Privacy Policy

1. Who is responsible for your data

Prajwal Edtech LLP (“we”, “us”) operates Shikha and decides how the information described here is used. You can reach us at marketing@shikhatheapp.com.

2. What we collect

About you (the parent or guardian):

• Your name and email address.
• Your password, stored only as a one-way scrambled value. We cannot read it.
• A record of when you accepted our Terms and Privacy Policy, and which version.

About your child (only what you enter or what they generate through the journey):

• The name you give the child’s profile. A first name or nickname is enough.
• Optionally, the name of their school.
• Their answers to the scenario questions and the readiness check.
• The results we work out from those answers: their strongest interest area, career leaning, readiness level, and topics to revisit.

About payments:

• Payment reference numbers, the amount, the status, and the time. Card, UPI, and bank details are handled entirely by Razorpay. We never see or store them.

Technical information:

• A sign-in cookie that keeps you logged in, and standard server logs kept by our hosting provider (such as IP address, browser type, and pages requested).

3. Why we use it

• To run the journey and produce your child’s report.
• To take payment and unlock the report, and to fix or refund a payment that went wrong.
• To keep accounts secure, and to answer your questions and requests.
• To understand overall use of Shikha through totals and other combined figures that do not identify anyone.

We do not use your child’s information for advertising, and we do not build profiles of children for marketing.

4. Children’s information

• Children cannot create accounts. A child’s profile exists only inside a parent’s or guardian’s account.
• We do not have a way to contact a child directly, and we do not.
• When you sign up, and again each time you add a child, you confirm you are the child’s parent or legal guardian (or have their parent’s or guardian’s permission) and you consent to us handling your child’s information as set out here. You can withdraw that consent at any time by asking us to delete the account.

5. The school name field

The school name is optional. If you enter it, we may use it only in combined form. For example, to say how many students from a particular school have used Shikha. We will never tell a school which individual children used Shikha, and we will never share a child’s name or results with a school. If you would rather not say, leave it blank.

6. Who else handles your information

We use a small number of service providers to run Shikha. They handle data only to provide their service to us:

• Supabase stores our database.
• Vercel hosts the website and application.
• Razorpay processes payments.
• Google Fonts supplies the typefaces on our pages, so your browser contacts Google’s servers when a page loads.

We do not sell your information. We may disclose information if the law requires it, or to protect someone’s safety.

7. Where your information is kept

Our database is hosted in India and our application servers run in India. Payments are processed by Razorpay in India. Our providers are international companies and pages are delivered through a global network, so some technical data, such as your IP address, may pass through servers elsewhere.

8. How long we keep it

We keep your account and your child’s results until you ask us to delete them. Deleted information may remain in our providers’ backups for a limited period before it is overwritten. Payment records may be kept for as long as the law requires for accounting and tax purposes, even after an account is deleted.

9. Keeping it safe

• Connections to Shikha are encrypted (HTTPS).
• Passwords are stored as one-way hashes, and the sign-in cookie cannot be read by page scripts.
• Each account can see only its own children’s information. We enforce this on our servers.
• Payments are confirmed with Razorpay’s cryptographic signature before a report unlocks.

No system is perfectly secure, but we take reasonable care, and we will tell you if something goes wrong that affects you.

10. Your choices and rights

You can ask us to show you the information we hold about you and your child, correct it, delete it, or stop handling it. As the parent or guardian, you can make these requests for your child. Write to marketing@shikhatheapp.com from the email address on your account. We will act on a request within 30 days. If you are not satisfied with our response, you may have the right to complain to the relevant authority under Indian law.

11. Cookies

We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies.

12. Changes to this policy

If we change this policy in a way that matters, we will update the effective date and ask you to accept the new version the next time you sign in.

13. Questions and complaints

Prajwal Edtech LLP, marketing@shikhatheapp.com. This is also our contact for any complaint about how your information is handled.