Privacy Policy

This Privacy Policy explains how ZKAP EDTECH SERVICES PRIVATE LIMITED ("ZKAP", "sortmyprep", "we", "us", "our") collects, uses, shares, stores, and protects information when you access or use sortmyprep, including our website/web app, mobile experiences (if any), WhatsApp/community channels administered by us (where applicable), and related features such as AI-based assistance, solution libraries, practice tools, tutor booking, counselling session listings, or similar offerings (collectively, the "Platform").

This Privacy Policy should be read along with our Terms of Use.

1) Company Details (Data Fiduciary / Data Controller)

ZKAP EDTECH SERVICES PRIVATE LIMITED
CIN: U62090MH2026PTC468322
Email: info@sortmyprep.com
Privacy/Grievance Contact: info@sortmyprep.com

2) Scope

This Privacy Policy applies to information we collect:

• on the Platform;
• through WhatsApp/community channels administered by us (where applicable);
• through support communications (email/WhatsApp/calls);
• through marketing communications you opt into (where permitted by law);
• through integrations such as payment processors, scheduling tools, analytics, and hosting vendors (where applicable).

It does not apply to third-party websites/services not controlled by us (e.g., external counsellor sites), even if linked from the Platform.

3) Information We Collect

3.1 Information you provide

Depending on your use, we may collect:

• Account details: name, email, phone number, username, password (stored in hashed/secured form), school/grade/curriculum.
• Parent/guardian details (where required): parent/guardian name and contact details, and records of consent/verification steps.
• Learning content you submit ("User Content"): questions, files, images, voice notes, chats, feedback, answers/scripts/papers you upload.
• Tutoring/counselling booking details (if applicable): scheduling info, attendance, and limited notes you choose to share.
• Payments (if/when paid features go live): billing details, transaction IDs, payment status, invoices/receipts. We generally do not store full card details where payments are handled by a third-party payment gateway.

Do not upload sensitive personal data unless necessary. Please avoid uploading government ID numbers, medical/health information, biometric identifiers, or other highly sensitive information unless we specifically request it for a valid purpose.

3.2 Information collected automatically

• Device and log data: IP address, browser type, device identifiers, pages viewed, timestamps, referring URLs, crash logs, basic security logs.
• Cookies and similar technologies: see Section 10.

3.3 Information from partners (limited)

If you join via a partner referral or attend a partner session, we may receive limited information such as your name, contact details, and referral/source tags, only where lawful and based on appropriate permissions/consent.

4) Children / Minors & Parent/Guardian Consent

sortmyprep may be used by learners under 18.

India (DPDP approach): where required, we may require parent/guardian consent for children and may restrict features if consent cannot be reasonably verified.

We do not knowingly conduct prohibited processing of children's data, including targeted advertising to children or harmful profiling/behavioural monitoring, except where permitted under applicable law.

If you are a parent/guardian and believe a minor is using the Platform without appropriate consent, contact us at info@sortmyprep.com.

International child rules (important): In some jurisdictions additional rules apply (for example, the US COPPA focuses on children under 13, and UK/EU rules have specific standards for online consent for children). Where these apply, we may require verifiable parental/guardian consent for certain users/features, and/or limit data collection and tracking accordingly.

5) Why We Use Your Data (Purposes)

We use information to:

• Provide the Platform (accounts, authentication, access to features).
• Educational functionality (deliver content, learning analytics, personalisation features where enabled).
• Bookings & sessions (scheduling, reminders, session management where applicable).
• Safety and integrity (prevent cheating/misuse, spam, fraud, and security incidents).
• Support (respond to queries and troubleshoot).
• Payments & billing (where applicable: processing, invoices, fraud prevention).
• Improve the Platform (debugging, performance, service quality, aggregated analytics).
• Legal compliance (lawful requests, enforcing Terms, compliance obligations).
• Marketing (only where lawful and/or with required consent; you can opt out).

6) Legal Bases / Lawful Grounds for Processing

Because we may have users in multiple jurisdictions, we rely on lawful grounds required by applicable law, which may include:

• Consent (e.g., marketing opt-in, certain cookies, children consent where required),
• Contract / performance of services (to provide what you request),
• Legitimate interests (security, abuse prevention, basic service analytics where permitted),
• Legal obligation (tax/accounting, responding to lawful requests).

Where local law requires a specific approach (e.g., GDPR/UK GDPR), we apply it for users in that jurisdiction.

7) AI Features, User Content, and Improvement Use

If you use AI features, we process your prompts/inputs and relevant context to generate outputs ("AI Outputs") for educational assistance.

• Service delivery: We use inputs to provide the requested feature (explanations, summaries, etc.).
• Safety & quality: We may review limited samples to prevent abuse, improve accuracy, debug issues, and maintain quality.
• De-identification where feasible: We aim to reduce personal identifiers in datasets used for internal improvement wherever reasonably possible.
• No sale of personal data: We do not sell personal data.
• No training of third-party general AI models using your User Content: We do not provide your User Content to third parties to train their general-purpose AI models.
• Opt-out (recommended): Where feasible, you may request that your User Content not be used for internal improvement beyond delivering the service (subject to legal/security needs) by contacting info@sortmyprep.com.

8) Sharing of Information

We share information only as necessary:

• Service providers / processors: hosting, cloud infrastructure, analytics, messaging/email, customer support tools, security monitoring, scheduling tools, payment gateways. They may process data only to provide services to us and are required to protect it.
• Tutors/counsellors (third parties): if you choose to book or engage them, we may share the minimum data needed (e.g., name, contact, scheduling info). Their services are governed by their own terms/privacy practices.
• Legal and compliance: regulators, courts, law enforcement, or to protect rights/safety and enforce our Terms.
• Corporate events: merger/acquisition/ restructuring (with appropriate safeguards).

We do not rent or sell personal information.

9) International Data Transfers

Your information may be processed in India and in other countries where our vendors/service providers operate (e.g., cloud regions).

Where cross-border transfer rules apply, we use appropriate safeguards such as contractual protections, vendor due diligence, and security controls. For India, cross-border transfers will be handled in line with applicable requirements and any government-notified restrictions (if introduced).

10) Cookies & Analytics

We may use cookies and similar technologies to:

• keep you logged in (strictly necessary cookies),
• remember preferences (functional cookies),
• understand usage and improve performance (analytics cookies),
• marketing cookies (only where used and where lawful/consent is obtained).

Managing cookies: You can control cookies through your browser settings. If you disable cookies, some features may not work properly. Where legally required, we will provide cookie consent controls.

11) Data Retention

We retain personal data only as long as necessary for:

• providing the Platform,
• legal/compliance requirements,
• resolving disputes,
• security and abuse prevention.

Typical retention logic:

• Account data: retained while active; deleted/anonymised after a reasonable period following deletion request unless retention is required by law or for fraud/security purposes.
• Payment and invoice records: retained as required by applicable tax/accounting laws.
• Security logs: retained for a limited period appropriate for abuse detection and investigations.

12) Security

We use reasonable technical and organisational measures (e.g., access controls, least-privilege access, encrypted transport (TLS), credential security, monitoring). No system is perfectly secure; please protect your passwords/devices.

13) Your Rights and Choices

Rights vary by jurisdiction. Where applicable, you may have rights to:

• Access your personal data,
• Correct inaccurate data,
• Delete/erase data,
• Withdraw consent (where processing is based on consent),
• Restrict/object to certain processing,
• Data portability (where applicable),
• Complain to a relevant regulator.

India (DPDP-style expectations): where applicable, you may also have:

• the right to grievance redressal, and
• the right to nominate another person to exercise rights on your behalf (as recognised under India's DPDP framework).

How to exercise rights: Email info@sortmyprep.com with:

• your name and account email/phone,
• request type (access/correction/deletion/withdrawal, etc.),
• verification details (to prevent fraud).

We may request additional verification before actioning requests.

14) Communications and Marketing

Service messages: account/security/receipts may be sent as needed.

Marketing messages: sent only where lawful and/or with required consent. You can opt out via unsubscribe links or by emailing us.

15) Third-Party Links and Services

The Platform may contain links to third-party services. We are not responsible for their privacy practices. Review their policies before sharing information.

16) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post updates on the Platform and revise the "Last Updated" date. Material changes may be communicated via the Platform or email where appropriate.

17) Grievance / Privacy Contact

For privacy, data requests, or complaints:

Email: info@sortmyprep.com

We aim to acknowledge requests within 72 hours and resolve within a reasonable time, subject to complexity and legal requirements.