Privacy Policy

1. Information We Collect

• Account information: name, email, password (hashed), grade, country, board (for students in India), avatar, and an optional phone number.
• Parent / guardian email: required for every student account; used to notify the parent of the account's creation and to handle parental requests (access, correction, deletion).
• Learning data: test results, mastery progress, lesson activity, spaced-repetition state, badges, and streak information generated through normal use of the Service.
• Live-class data: for live one-on-one or group classes booked through Glow Grades, we use Daily.co to deliver the video call and to produce a text transcript of the class audio. We do not store the underlying audio or video file. See Section 3 for the detailed retention rules.
• Messages: direct messages exchanged between teachers and students on the platform.
• Payment information: if you subscribe to a paid plan, payment is processed by Stripe. We do not store your card details.
• Technical data: browser type, device type, IP address, and approximate location (country only) for security, debugging, and platform reliability.
• Analytics: aggregated, anonymized usage events to understand feature performance. See Section 5.

2. How We Use Your Information

• To provide and operate the Glow Grades learning experience.
• To generate personalized AI-powered practice questions, lessons, and progress reports.
• To produce post-class summaries for the teacher (a recap of topics covered and suggested follow-up) and a separate, age-appropriate summary for the student.
• To process subscription payments via Stripe.
• To send transactional emails (e.g., password resets, parent notifications, class reminders, post-class summaries). We do not send marketing emails without your consent.
• To send transactional WhatsApp messages at the phone number you provide (e.g., class summaries, class reminders ~15 min before scheduled classes, booking notifications to teachers, payment alerts). Consent is established when you create your account and accept these Terms with a phone number on file. You can opt out at any time by replying STOP to any WhatsApp message or by toggling the setting off in your account preferences.
• To investigate and prevent abuse, fraud, and security incidents.

We do not use student voice recordings or transcripts to train any machine-learning model, to identify any individual by voice (no voice biometrics), or for any advertising purpose.

3. Live Class Recording & AI Processing

When a teacher conducts a live class on Glow Grades, the class audio is processed in real time by Daily.co (our video-call provider) and transcribed into text. The resulting text transcript is sent to OpenAI (gpt-4o-mini) to produce structured summaries used by the platform. We do not retain the raw audio or video file.

• What is stored: the text transcript of the class audio, plus four derived AI-generated summaries (an internal admin analysis, a teacher recap, a parent-facing message draft, and a student-safe class recap).
• Who can read what:
  • The full transcript and the admin analysis are visible only to Glow Grades operations staff for quality monitoring.
  • The teacher recap is visible only to the teacher who taught the class.
  • The parent-facing message and the student-safe summary contain no verbatim quotes and are subject to a list of forbidden terms (no scores, no judgemental language, no admin metrics).
• Retention: the verbatim transcript is automatically deleted 30 days after the class ends. The four derived summaries persist for the lifetime of the account because they contain no verbatim content.
• Not an emotion-recognition system: the "sentiment" field in our internal admin analysis describes the overall tone of a session (e.g., engaged, neutral, low energy) at session level, derived from text only. We do not classify individual student or teacher emotional states, and the field is never shown to students or parents. We believe this falls outside the scope of "emotion recognition systems" under EU AI Act Article 5.
• Notice: teachers and students see a notice on the live-class pre-join screen and in our Terms before joining a class. By joining, all participants consent to this transcription. Teachers and students may decline to use camera or microphone and still attend.

4. Children's Privacy (COPPA, GDPR, DPDP)

Glow Grades is designed for grades 1–12, which means our entire student user base consists of minors. We treat every student account as a minor account, regardless of jurisdiction.

• We require a parent or guardian email at signup. We notify the parent that the account has been created and explain how to access, correct, or delete the child's data. The parent may opt the child out at any time by replying to that email or contacting us at the address below.
• We collect only the minimum information necessary to deliver the Service.
• We do not show advertisements, do not track students across other sites, and do not sell or rent children's data to anyone.
• Parents and guardians may at any time email glowgrades.ai@gmail.com to request a copy of their child's data, correct it, or have it deleted. We will action verified parental requests within 30 days.
• This section is intended to comply with the U.S. Children's Online Privacy Protection Act (COPPA) for children under 13, the General Data Protection Regulation (GDPR) Article 8 for children under 16 in the EEA / UK, and the Digital Personal Data Protection Act (DPDP) 2023 of India for users under 18.

5. Cookies & Analytics

We use a small number of cookies and similar technologies. Essential cookies (for login sessions and security) are always set when you use the Service — without them the Service cannot work. Non-essential analytics cookies (set by PostHog, our product-analytics provider) are only set after you accept them via the cookie banner shown on your first visit. You may decline analytics at any time by clicking "Decline" in the cookie banner; analytics will not be collected and any previously-set analytics cookies will not be reused.

We do not use cookies for advertising, do not allow third-party advertising trackers on the site, and do not share cookie data with anyone outside our analytics provider.

6. Data Sharing

We do not sell, rent, or share personal information for advertising. We use the following service providers, each operating under their own privacy commitments:

• Supabase — authentication and database hosting (US).
• Vercel — web hosting and edge delivery.
• Daily.co — live-class video and audio-to-text transcription.
• OpenAI — AI question generation, lesson generation, and class summary generation. Inputs are scoped to the minimum needed for each task; we do not enable model training on our data.
• Stripe — payment processing.
• Resend — transactional and notification email delivery.
• Sentry — error tracking. Stack traces only; no transcript or message content is sent.
• PostHog — product analytics (only after you accept).

We may also disclose information when required by law, court order, or to protect the safety of users.

7. Marketplace Nature

Glow Grades is an independent platform. Teachers using the Service are independent providers — not employees, agents, or contractors of Glow Grades. We facilitate connections between students and teachers and provide the technology (scheduling, video calls, transcription, messaging, content). Any tuition fees, gifts, tips, or other payments between teachers and students or parents occur outside the platform and are not collected, processed, mediated, or guaranteed by Glow Grades. Personal data exchanged directly between teachers and students or parents (for example, in DMs about non-platform arrangements) is not managed by this Privacy Policy.

8. Data Retention

• Account data: retained while your account is active. Deleted on request or when you delete your account.
• Learning data (test results, mastery progress, lesson activity): retained while your account is active.
• Verbatim class transcripts: automatically deleted 30 days after the class ends.
• AI-derived class summaries (no verbatim content): retained for the lifetime of the account.
• Audit logs and security events: retained up to 12 months.
• Aggregated, anonymized analytics: retained indefinitely (does not identify any individual user).

9. International Transfers

Glow Grades is operated from the United States, and our service providers (Supabase, Vercel, OpenAI, Daily.co, Stripe, Resend, Sentry, PostHog) primarily store and process data in the United States. If you use the Service from the EEA, the United Kingdom, India, or any other country, you understand and consent that your information will be transferred to and processed in the United States, which may have different data-protection laws than your country.

10. Your Rights

Depending on where you live, you may have the following rights with respect to your personal information:

• The right to access a copy of your data.
• The right to correct inaccurate data.
• The right to have your data deleted.
• The right to receive your data in a portable format.
• The right to withdraw consent (where consent is the lawful basis).
• The right to lodge a complaint with your local supervisory authority (in the EEA / UK) or the Data Protection Board (in India).

To exercise any of these rights, contact us at glowgrades.ai@gmail.com. You can also delete your account at any time from the Settings page.

11. Security

We use industry-standard security practices, including encrypted connections (HTTPS), authenticated sessions (Supabase Auth), row-level security on our database, and operational secrets stored in our hosting provider's environment-variable vaults. No system is 100% secure, but we take protection of student data seriously and continually review our practices.

12. Changes & Contact

We may update this Privacy Policy from time to time. The updated version will be posted here with a revised effective date. Continued use of the Service constitutes acceptance of the updated Policy.

Questions about this Privacy Policy or any of your rights? Contact: glowgrades.ai@gmail.com.