Privacy Policy

Version 2026-10-10.2 · Terms of Use

This explains what Quillnest collects, why, and what we do and don't do with it. We keep it to what the service needs. Quillnest, operated by Aditya Agrawal, decides why and how the personal data described here is processed, and is responsible for it (the "data fiduciary" under India's Digital Personal Data Protection Act, 2023). The service providers in section 4 process data only on our behalf.

1. What we collect

Account details: a username, a display name, and a password. Teachers must give an email address. Adult learners may. Your password is sensitive information: by creating an account and ticking the agreement box you consent to our storing it, only in the protected form described in section 8. We cannot read it, and you can change it or ask us to delete the account at any time.
Date of birth (adult learners): asked once at sign-up to check you are 18 or over. We do not store it.
Consent confirmations (institutes): each time a teacher confirms they hold parents' consent for a class, we record the date, the teacher's account, how consent was collected, an optional note of where the forms are kept, the version of the Terms and the IP address. We do not collect the parents' own details.
Students (children): only a first name, the username and password generated for them, the class they belong to, and their schoolwork on Quillnest. We do not ask children for an email, phone number, photo, address, school name or date of birth.
Learning activity: which questions were answered, whether correctly, how long they took, scores, streaks, points, and results in class games and tests.
Doubts: when a student flags a question they did not understand, we store which question, a reason chosen from a short list, an optional short note (up to 160 characters) the student typed, the date, and the teacher's reply. Students are asked not to put personal details in the note.
Photos of questions: a teacher may attach a photo of a question. It is stored in re-saved form (without location or camera data) and shown only to that teacher's students. If the optional text-reading feature is on, the photo is sent to an AI service just to read the writing.
Questions teachers write: the text of questions a teacher adds, kept private to that teacher's students. If a teacher chooses to share a question with us, we may use it as an example to write similar questions for the shared bank. Teachers should not put children's names or personal details in questions.
Your agreement: which version of the Terms and this Policy you agreed to, and when.
Institute details (teachers): the classes you create, class codes, assignments, and the phone number and subscription details we keep to manage your plan and payments.
Technical data: your device's IP address is used briefly to stop abuse (for example repeated wrong passwords). Your session is kept in your browser's storage so you stay logged in. We do not use advertising or tracking cookies.

2. Why we use it

To run the service: log you in, show questions, record progress, let teachers see their own students' work, and run class games.
To manage subscriptions and keep the service secure and fair.
To send account emails to adults: password-reset codes, email verification and, for teachers, subscription reminders.
To improve the questions and the app, using activity in combined form.

We do not sell personal information, show advertising, or use children's information to profile or target them.

3. Who can see what

A teacher can see their own class: students' first names, usernames, progress, the questions each student answered (with the student's answer and the correct one), and any doubts the students sent. Doubts about the same question are shown to the teacher together; a reply goes to every student who asked about that question.
Students can see their own results and their teacher's replies to their own doubts.
During class games, students can see classmates' first names only, and only a top-5 list plus their own rank. The same goes for the class leaderboard on a student's home screen: classmates see first names and points (for this week or all time), the top five, and their own place, never the bottom of the table. A teacher can switch the leaderboard off for a class.
Student accounts cannot message anyone, add friends or appear on public leaderboards. There is no chat.
The Operator can see account and activity data when needed to run, secure and support the service.

4. Who else handles the data

We use these service providers to run Quillnest: Render (web hosting), Neon (database) and Brevo (sending emails, only to adults). They process data only on our behalf and under their own data protection terms. Their servers may be outside India. If an adult learner chooses the optional "Ask AI" feature with their own key, the question text is sent to the AI provider they selected; this is not available to children. We may disclose information if the law requires it.

5. Children: a note for parents and guardians

How a child gets an account. Only through a teacher's class. Before any child can be added, the institute must confirm in the app that it holds the verified written consent of the parent or guardian (the Terms, section 6). We log that confirmation and may ask the institute for the signed forms at any time.
What we hold about a child. A first name, a username and a password, the class, and the child's answers, scores and points in the app. We ask for nothing else: no email, phone, photo, address, school name or date of birth.
Why. Only to let the child practise and to let their own teacher see their progress and help them. We do not show advertising, do not track children across other sites or apps, do not build profiles of children for marketing, and do not sell or share children's information for any other purpose.
Who sees it. The child and their teacher. Other children see only first names and a top-five list during a class game. Doubts a child sends are seen only by their teacher.
Your rights. A parent or guardian can ask the institute or us to see, correct or delete their child's information, or to withdraw consent. Removing the child from the class deletes the account and its data.

6. How long we keep it

We keep information while an account or subscription is active. If an Institute's subscription ends we keep its data for 90 days, after which we may permanently delete it. When a teacher removes a student or deletes a class, that student's account, answers and doubts are deleted with it. Adult learners and teachers can delete their own account and its data in Settings at any time (see how to delete your account); accounts and data can also be deleted earlier on request. When a teacher deletes their account we keep only a coded fingerprint of their email address (not the address itself, and it cannot be turned back into it), so the same email cannot start a second free trial. Records of payments received from Institutes (amount, date and payment reference) are kept for as long as we need them for accounts and tax. Backups may take a short time to clear.

7. Your choices and rights

You can ask us to give you a copy of your information, correct it, or delete it, and to withdraw consent. Teachers can remove their students from their class. Contact us using the details below. If you are not satisfied you may complain to the relevant data protection authority in India.

8. Security

Passwords are never stored in readable form. Each is combined with a random salt and scrambled with PBKDF2-SHA256 (200,000 rounds), so even we cannot read it.
All connections to Quillnest are encrypted (HTTPS). Sessions expire (14 days for children, 60 days for adults).
Access to administration is limited to the Operator. A teacher can see only their own classes. Children cannot see other children's details.
The service limits repeated wrong passwords, rapid guessing and automated scraping, and blocks children from the adult section.
No system is perfectly secure. If a breach affects your personal data we will tell you and the authority as the law requires.

9. Changes

If we change this policy in an important way, we will ask you to review it again. The version date is at the top.

10. Grievance Officer and contact

To raise a privacy concern, or to ask to see, correct or delete your information (or your child's), contact our Grievance Officer through the details you were given when you signed up. We acknowledge a complaint promptly and aim to resolve it within one month.