Privacy Policy

Sumeru Edutech Pvt Ltd (India office: Bengaluru – 560062; group headquarters: Los Angeles, USA) is the controller of the personal data described here. Where we run a product for a school, the school is the controller and we act as its processor under a separate data processing agreement.

• Account data — parent or staff name, email, phone, school, and the learner’s first name and grade.
• Learning data — questions asked, answers given, uploaded work, progress, and the study material generated for the learner.
• Voice and camera input — audio for Voice AI and images for Vision AI, processed to produce a response. On EdgeAI and the offline tablet this processing happens on the device.
• Payment data — handled by our payment provider. We receive the outcome of a transaction, never your full card number.
• Technical data — device, browser, IP address and usage events, used to keep the service working and secure.

Accounts are held by an adult. We do not knowingly create accounts for children directly, and we do not serve behavioural advertising to children or sell children’s data to anyone, ever.

A parent, guardian or school can review a learner’s data, ask us to correct it, or ask us to delete it, by writing to support@schoolexl.com.

To provide and personalise the service, to process payments, to keep accounts secure, to support you, and to meet legal obligations. Our legal bases are the performance of our contract with you, your consent where we ask for it, and our legitimate interest in operating and securing the service.

We do not use an identified learner’s work to train models for other customers. Where we improve our own education models, we work from aggregated or de-identified data, and a school can opt out of that entirely in its agreement.

We share data with service providers who host our infrastructure, process payments, send email and provide analytics — each under contract and only for those purposes. We disclose data to authorities only where the law requires it. We do not sell personal data.

Platform data is stored in the region chosen for your account — India, UAE, Singapore or the United States. EdgeAI deployments and the offline tablet keep data on-premises or on the device. Where data crosses a border we use appropriate safeguards, including standard contractual clauses.

Account and learning data is kept for as long as the account is active and for up to 12 months afterwards, so a returning learner does not lose their history. Records we must keep for tax or accounting are kept for the statutory period. You can ask for earlier deletion.

Subject to local law, you can ask for access to your data, correction, deletion, a portable copy, or restriction of processing, and you can withdraw consent where processing relies on it. Write to support@schoolexl.com and we will respond within 30 days. If you are in the EU or UK, see the GDPR Compliance page for how to exercise these rights and how to complain to a supervisory authority.

We use encryption in transit, access controls, and least-privilege access to production systems. No system is perfectly secure; if a breach affects your data we will notify you and the relevant regulator as the law requires.

We use cookies necessary to run the site, and analytics to understand how it is used. Analytics can be declined without losing access to the site.

We will post any change here and, where it is material, notify account holders by email before it takes effect.