Privacy

Privacy policy

Right now, pre-launch

The only thing Medha collects today is what you give us to join the waitlist: your email address, the page you joined from, and the date. That's it — no phone number, no name required, no tracking script watching what else you do on this site.

Once Medha launches

The account model is deliberately minimal: a parent's email (for OTP login and as verifiable parental consent, since students are minors), a student's first name or nickname, their board and class. No phone number, no address, no payment details stored on our servers — those are handled by our payment processor directly.

We will never run behavioural advertising, ad trackers, or third-party tracking of any kind on a child's activity. This isn't just a policy — the product is built without the infrastructure to do it.

Children's data (DPDP Act, 2023)

Because Medha's students are minors, the Act's stricter children's-data provisions apply: verifiable parental consent (delivered by the parent being the account holder and payer), no behavioural monitoring of children for advertising purposes, and no targeted advertising to children — full stop.

Your rights

You can request a copy of what we hold about your family, or ask us to delete it, at any time. Once the app is live this will be a button on the account page; until then, use the contact details below.

Grievance officer & contact

[Entity name — pending registration]
[Grievance officer name & contact — to be published before launch]
[GSTIN — pending]

Last drafted: 10 July 2026. Not yet reviewed by legal counsel or a CA.