Privacy Policy
1. Who we are
EmpowerStudents ("we", "us") is an AI-powered 360° child growth assessment platform operated in India. We process personal data of parents and children to provide voice-based assessments, 12-domain growth plans, and expert follow-up programs.
2. What data we collect
When you register and use the platform, we collect:
- Parent account data: name, email, phone/WhatsApp number, city, password (stored as a bcrypt hash — never in plain text)
- Child profile data: name, age, gender, class/grade, school, any special needs you choose to share, and a "can speak independently" flag
- Voice interview: your child's spoken answers to 10 questions. We process these as live transcription and derived metrics (duration, words-per-minute, filler words, heuristic fluency). We do not retain the raw audio.
- Parent intake: written answers to 10 questions plus 5 rating sliders about habits, sleep, screen-time, behaviour and concerns
- AI-generated reports: the full 12-domain growth plan produced from the above data
- Consent metadata: IP address and user-agent at the moment of consent (evidentiary)
3. How we use it (lawful purposes)
- AI voice assessment & growth analysis across 12 developmental domains (required)
- AI-assisted generation of personalised action plans and reports via Anthropic's Claude API (required)
- Sharing reports with our expert team for online or offline follow-up programs (required if you opt for the expert program)
- Reminders, progress updates and learning tips via WhatsApp and email (optional — you can opt out anytime)
- Portfolio analysis of drawings, handwriting samples or photos (optional — separate consent required)
4. Who we share with
- Anthropic (Claude API) — the assessment data is sent to Anthropic's servers to generate the AI report. Anthropic does not train its models on API data. See Anthropic's privacy policy.
- Our expert team — psychologists, counsellors, tutors and coaches assigned to your child's growth plan, strictly on a need-to-know basis.
- Nobody else — we do not sell data, we do not run third-party advertising, and we do not share with insurers or employers.
5. Where data is stored
Your data is stored on servers located in India or the EU, encrypted at rest. The AI inference step temporarily sends your assessment data to Anthropic (US). Audio is never stored.
6. Your rights under DPDP Act 2023
- Right to access — request a copy of your data any time
- Right to correction — fix any inaccurate information
- Right to erasure — ask us to delete your account and all data
- Right to withdraw consent — use the "Withdraw" button on your consent receipt, or email us. Withdrawal is permanent but does not affect lawful processing already performed.
- Right to grievance redressal — email dpo@empowerstudents.in. We respond within 7 days.
7. Children's data — special care
Most of our data subjects are minors. We process children's data only with the explicit consent of a parent or legal guardian. Children themselves are never registered directly; they are added as "child profiles" under a parent account. We do not use children's data for any form of advertising or commercial profiling.
8. Retention
Account and assessment data is retained while your account is active. If you delete your account, all data is permanently removed within 30 days, except where law requires longer retention (e.g. tax records).
9. Security
We use bcrypt password hashing, HTTPS for all traffic, session cookies with HttpOnly + SameSite flags, SQL prepared statements everywhere, and regular security reviews. No system is perfect — please help us by choosing a strong password and reporting any suspicious activity.
10. Changes to this policy
We bump the policy version (currently v1-2026-04) whenever we materially change this document. Your original consent receipt always records the exact version you agreed to.
11. Contact
Data Protection Officer: dpo@empowerstudents.in
General support: support@empowerstudents.in
Website: empowerstudents.in
This is a concise plain-language policy. Before a formal production launch, please have it reviewed by a lawyer to confirm compliance with DPDP Act 2023, IT Act 2000, SPDI Rules 2011, and any sector-specific guidelines that apply to your operation.