Last updated 14 July 2026 · Effective for the Anvay Study pilot
Anvay Study is owned and operated by Anvay Innolabs LLP ("Anvay Innolabs," "we," "us"), which acts as the Data Fiduciary under the DPDP Act for personal data processed through the platform. Participating schools remain responsible for verifying who they issue class pass codes and info codes to.
Grievance Officer: Mr. Satish Singh · support@anvay.biz · Registered address: INNOV8 Boston House, CTS 261, 7th Floor, Boston House, Suren Road, Village Gundavli, Next to Cinemax Cinema, Mumbai 400093, Maharashtra, India.
Students: name, roll number, phone number (for sign-in only), class/division, subject strengths you choose to tag, and the doubts, answers, and upvotes you post.
Parents, teachers, PTA and admin users: name, role, phone number, and — for parents — your child's name and roll number, plus announcements and comments you post.
We do not collect precise location, payment details, or biometric data, and we do not run analytics or advertising SDKs in the app.
Strictly to run the class-grouped doubt-solving and school communication features described at sign-up: matching your doubt to classmates, routing it to subject-strong peers, escalating unanswered doubts within your school, and delivering class announcements. We do not use student or parent data for advertising, and we do not sell or rent personal data to anyone.
Most Anvay Study students are under 18, which the DPDP Act classifies as children requiring verifiable parental consent before their personal data is processed, and prohibits behavioural tracking, profiling, or targeted advertising directed at them. Anvay Study does not run tracking, profiling, or advertising of any kind for any user, child or adult.
Current gap, stated plainly: today, a student joins directly with their own phone number and a class pass code — there is no formal parental-consent step in that flow yet. As a lightweight interim signal, we check whether a parent has independently joined via the info code and named this same student (by name and roll number), and show that match on the student's profile. This is a useful proxy but not verifiable consent — it does not yet meet the bar the DPDP Rules will require once children's-data obligations take full effect. A stronger, SMS-based explicit consent step is planned before any wider rollout.
Data is stored with our infrastructure provider in the Mumbai (ap-south-1) region — it does not leave India. It is encrypted in transit (TLS) and at rest, and access is enforced row-by-row in the database so a student can only ever read their own class's data (or content explicitly escalated platform-wide), and a parent or staff member can only reach their own class's info group.
Classmates in the same division see each other's name and roll number, questions, and answers. Content marked "Open to All" (by choice, or after 20 minutes unanswered) becomes visible platform-wide, without your personal contact details attached. Parent and staff contact details are visible only to staff in the same class's info group — never to other parents. Private messages between a staff member and a parent are visible only to the two of them.
We currently retain account and content data for as long as the account is active plus the remainder of the academic year, to keep resolved doubts searchable as study reference. A fixed retention and deletion schedule is still being finalised — this section will be updated once it is set.
You can ask us to access, correct, or erase your personal data, or withdraw consent, by contacting the Grievance Officer above. We aim to resolve requests within a reasonable time and no later than 90 days, in line with the DPDP Rules. A parent may exercise these rights on behalf of their child.
If this policy changes materially, we'll update the date above and post a notice in the app.