Privacy Policy

LIB Education – Privacy Policy

Last updated: 22 October 2026

1. Who we are

This policy explains how LIBXL-Education Private Limited (CIN U85499KA2023PTC173863), No 6, 4th Floor, 2nd Main Road, Arakere, off Bannerghatta Road, Bangalore 560076 ("LIB Education", "we", "us") collects and uses personal data. We decide why and how your data is used, which makes us the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 (DPDP Act).

It applies to our website libeducation.com, demo bookings and enquiries, online and offline classes, and the My LIB app used by our admins, teachers, students and parents. By using any of these, you agree to this policy.

2. What we collect

Website and demo bookings: Name, phone, email, student's grade and subjects, preferred times, messages you send; IP address, browser and pages visited (through cookies and analytics).

Enrolment and fees: Student and parent names, phone numbers, school board and grade, subjects; fee quotes and requests; payments received, payment references and screenshots you send; refunds.

Classes: Class schedule, attendance, missed classes and notice; online class links; CCTV footage at our centres.

My LIB app: Usernames and passwords (stored encrypted by our provider), roles, profile photos; homework, typed answers and photos of written work; practice paper attempts, marks and feedback; study plans; messages, announcements and support tickets; login and logout times; a log of changes made; which app features are used; AI requests (see section 5).

Teachers: Name, phone, subjects, availability, leave, classes taught, pay rates, salary records; bank name, bank account number, IFSC code and UPI ID for salary payments (we do not collect teachers' PAN or Aadhaar).

We do not collect Aadhaar or PAN from anyone. From students and parents we do not collect bank account or card numbers, and we do not take payments in the app. Teachers' bank and UPI details are collected only to pay their salary. We do not knowingly collect sensitive data such as health or religion; please don't send it to us.

3. Why we use it

We use your data only to:
• answer enquiries and arrange demo classes;
• enrol students, schedule and run classes, and record attendance;
• send fee requests, record payments, refunds and class balances;
• set, collect and mark homework and practice papers, and share feedback with students and parents;
• pay teachers and keep accounts;
• communicate about classes by phone, WhatsApp, in-app messages and announcements;
• keep our centres, classes and app safe, and investigate misuse;
• fix problems and improve our service, using usage figures that do not include your content;
• meet legal, tax and accounting duties.

We process data on the basis of your consent, given when you enrol, book a demo or use the app, and for legitimate uses allowed by the DPDP Act, such as meeting legal duties. We do not sell your data, and we do not use it for advertising profiles.

4. Children

Most of our students are under 18. Under the DPDP Act, we process a child's data only with the consent of a parent or lawful guardian.
• The parent or guardian who enrols a child gives that consent for the child's data to be used as described here.
• We do not track children for advertising, and we do not build behaviour profiles of them. App usage figures are used only to improve the app.
• Parents can see their own child's attendance, homework, marks and feedback in the app, and can ask us to correct or delete the child's data at any time.
• Recording classes, taking screenshots or sharing content involving minors is not allowed (see our Child and Minor Protection Policy).

If we learn that we hold a child's data without a parent's consent, we will delete it.

5. Who we share it with

We share data only with the people and services needed to run tuition. Each service may use it only to do that job for us.

• Your teachers – their own students' names, contacts, classes, homework and marks (not fees), to teach.
• Parents – their own child's attendance, homework, marks and feedback, to follow progress.
• Supabase – all My LIB app data and uploaded photos, as hosting and database for the app.
• Anthropic (Claude) – text typed into AI features and the text needed to answer, such as chapter names, for AI help, study plans and lesson prep. No passwords or payment data are sent.
• Google (Meet, Analytics) – online class meeting details and website usage through cookies, for online classes and website statistics.
• WhatsApp – phone numbers, class links, messages and payment screenshots you send us, for communication.
• Your bank or UPI app – payments you make to us. We receive the payment; we never see your bank login or card details. For teachers, our bank receives their account details to transfer salary.
• Website host (Wix) – demo booking and enquiry forms, to run the website.
• Government, courts, auditors – only what the law requires, for legal and tax duties.

Some of these services store or process data outside India, for example in the United States. We use them only as allowed under the DPDP Act. We do not sell, rent or trade personal data, and we do not share it with advertisers in a form that identifies you.

6. How long we keep it, and how we protect it

How long. We keep data while you study or teach with us, then:
• payment, refund and salary records: 8 years, for tax and accounts;
• everything else (homework, photos, marks, messages, attendance): 2 years after tuition or teaching ends, then deleted;
• demo enquiries from people who don't enrol: 1 year;
• CCTV footage: 30 days, unless needed for a safety issue;
• login records: cleared from time to time after being exported for our records.

Security. The app needs a login, and access rules on the database and file storage mean each role sees only what it needs. Teachers cannot see fees. A teacher's bank details can be seen only by that teacher and the admin. The AI key is held on the server, never in the app. Only staff who need data can reach it, and misuse leads to disciplinary action. No system is completely safe; if a breach affects you, we will tell you and the Data Protection Board as the law requires.

Cookies. Our website uses essential, functional, analytics (Google Analytics) and advertising cookies. You can block or delete them in your browser, though some parts of the site may then not work. The My LIB app does not use advertising or analytics cookies; it keeps your login and a few settings in your browser so it works and loads faster.

7. Your rights and how to reach us

Under the DPDP Act you, or a parent for a child, can:
• ask what data we hold about you and who we've shared it with;
• ask us to correct, complete or update it;
• ask us to delete it, unless the law requires us to keep it (for example payment records);
• withdraw your consent at any time; we will then stop using your data, though we may no longer be able to provide classes or app access;
• name someone to act for you if you die or are unable to act;
• complain to our Grievance Officer, and if not satisfied, to the Data Protection Board of India.

We will reply within 30 days.

Grievance Officer: Rishin Roy Chowdhury, +91 99455 62421, kakali@kakali.in

General contact: LIBXL-Education Private Limited, No 6, 4th Floor, 2nd Main Road, Arakere, off Bannerghatta Road, Bangalore 560076. Phone +91 98453 93178. Email kakali@kakali.in.

Changes. We may update this policy. We will post the new version here with a new date, and tell app users by announcement. Using our services after that means you accept it.

Law. This policy is governed by the laws of India, and courts in Bengaluru, Karnataka have exclusive jurisdiction.