Privacy Policy for Ask Ainstein
Last Updated: 09/12/2025
Operated by Axel Education Labs Pvt Ltd ("Company", "we", "us", "our")
Ask Ainstein ("Platform") is committed to protecting the privacy of students, teachers, parents, school administrators, tutoring centers, and all users. This Privacy Policy describes how we collect, use, store, process, and protect your information. By using Ask Ainstein, you agree to the practices described below.
1. Introduction
Ask Ainstein provides an AI-powered learning and teaching platform.
This Privacy Policy applies to:
- Students
- Teachers
- Parents/Guardians
- School Admins
- Independent Educators
- Tutoring Centers
- Anyone registering or using the Platform
We take special measures to protect the data of minors.
2. Information We Collect
We collect information necessary to provide a safe, personalized educational experience.
2.1 Personal Information
- Name
- Email address
- Phone number (optional)
- Role (student, teacher, parent, admin)
- School/institution details
- Login via Google or Microsoft SSO
- Device identifiers, IP address
We do not store passwords for SSO users.
2.2 Student Data
- Grade level, subjects, curriculum
- Assessment attempts
- Scores, XP, badges, streaks
- Learning gaps & mastery insights
- Teacher feedback
- AI interaction data
- Notes, flashcards, saved content
- Time spent and engagement metrics
2.3 Educator & Institution Data
Teachers, tutors, and institutions may upload:
- Assessments
- Notes & worksheets
- Images & diagrams
- Video links
- Public assessments
- Class reports
- Student performance summaries
- Image-labeling tasks
2.4 AI Interaction Data
Collected to enable AI features:
- User prompts/questions
- Chat interactions
- AI-generated diagrams & images
- Audio tutoring requests
- Feedback on AI responses
This data enables personalization and service improvement.
2.5 Uploaded Media & Files
Includes:
- PDFs
- Images/diagrams
- Lesson notes
- Screenshots
- Assignments
- Image-labeling data
Files may be processed for:
- Display
- AI enhancements
- Assessment generation
2.6 Usage & Analytics Data
Collected via tools like Google Analytics & Cloudflare:
- Device type
- Browser
- Pages visited
- Session duration
- App interaction behavior
- WebSocket activity
This data is non-identifiable and used for performance improvement.
3. How We Use Your Information
We use your data to provide, maintain, and enhance the Platform.
3.1 Service Provision
- Personalizing dashboards
- Generating AI explanations
- Tracking academic progress
- Providing voice-based tutoring
- Enabling assessments, scoring, and teacher insights
- Secure authentication & authorization
3.2 Service Improvement
- Platform analytics
- Performance optimization
- Quality assurance of AI outputs
- Feature enhancements
3.3 Communication
- Account notifications
- Class updates
- Administrative messages
- Verification emails
- Safety and security alerts
Marketing emails require explicit consent.
3.4 Legal & Safety
- Detecting abuse or harmful activity
- Enforcing Terms of Service
- Complying with legal requirements
4. How We Share Information
We do not sell, rent, or trade personal data, especially student data.
We share data only in limited cases:
4.1 With Teachers, Schools, and Authorized Staff
For students under their institution, we share:
- Scores
- Performance insights
- Attempts
- Learning progress
4.2 With Parents/Guardians
Where applicable, they may access the child's progress and activity.
4.3 With Trusted Service Providers
Examples:
- AWS (hosting, storage)
- Cloudflare (security)
- MongoDB Atlas (database)
- Google & Microsoft (SSO)
- SendGrid, Twilio (email communication)
- AI model providers (OpenAI, etc.)
AI Provider Transparency
AI interactions may be processed by third-party model providers under strict contractual controls.
These providers:
- Do not train models using user data
- Do not retain identifiable user data
- Follow industry-grade security
4.4 Legal Requests
We may disclose information to comply with:
- Laws
- Subpoenas
- Investigations
- Safety incidents
5. Public Assessments & Shared Content
Teachers may publish and share assessments publicly.
Users acknowledge:
- Shared content may be visible to others
- Uploaded materials must comply with copyright and safety norms
- We may remove content violating policy or law
6. Children's Privacy
We comply with global EdTech child-safety standards.
Key Protections
- Parental or institutional consent required for users under 13
- Only educationally relevant data is collected
- No targeted advertising
- Student data is never sold or monetized
- Parents/schools may request deletion any time
Schools are responsible for obtaining parental consent where required.
7. Data Retention
We retain data only for as long as necessary for educational and operational purposes.
Retention Timelines
- Student assessments: up to 5 years or until the institution deletes them
- Teacher-created assessments: retained until the creator deletes them
- AI interactions: retained for service functionality, up to 24 months
- Account data: retained until account deletion
- Deleted accounts: anonymized to "Deleted User" and purged within 90 days
- Logs & analytics: 12–24 months
After deletion, associated content becomes attributed to "Deleted User", and identifying information is no longer recoverable.
8. User Rights
Depending on region and role:
- Access your data
- Correct inaccurate information
- Delete your account
- Export your data
- Withdraw marketing consent
- Request child data access (parents/schools)
To exercise rights: compliance@askainstein.com
Schools may exercise rights on behalf of their students.
9. Cookies & Tracking Technologies
We use cookies and similar technologies for:
9.1 Essential Cookies
- Authentication
- Security
- Session management
9.3 Analytics Cookies
- Traffic insights
- Feature usage
- Performance metrics
Users may disable cookies, but certain features may not function correctly.
10. International Data Transfers
Data may be processed or stored on servers located outside your region.
We use secure, reputable providers (AWS, Cloudflare, MongoDB) and follow industry standards for cross-border data handling.
11. Data Security & Breach Notification
We implement strong measures:
- Encryption at rest & in transit
- Role-based access control
- Network firewalls & DDoS protection
- Regular audits and monitoring
Data Breach Notification
If a data breach affecting your personal data occurs, we will notify:
- Affected users
- Schools/institutions
- Regulatory authorities (if required)
within legally reasonable timelines.
12. Email Communication & Consent
Consistent with SendGrid/Twilio requirements:
- Transactional emails do not require consent
- Marketing emails require explicit opt-in
- All marketing emails contain an unsubscribe link and sender details
- Consent records are retained as proof
13. Changes to This Privacy Policy
We may update this Privacy Policy as our Platform evolves.
Significant updates will be communicated by:
- Email
- In-app notifications
- Website banners
Your continued use of the Platform after updates indicates acceptance.