Most of our users
are children.

Veranox Systems Private Limited is the Data Fiduciary for personal data processed through OrbitOne. The student — and, where relevant, the parent or guardian — is the Data Principal. Groq, Google, Supabase, Vercel, Cloudflare and Razorpay act as our processors for the narrow purposes set out in the Privacy Policy.

Section 9 of the Act sets three obligations where the Data Principal is a child (under 18). Stated plainly, with our current position on each:

• ·Verifiable parental consent is required before processing a child’s data. Since 14 September 2026 we collect a parental declaration at sign-up: a guardian names themselves and affirms consent on the same screen before the account is created. We do not yet VERIFY that declaration — see section 03.
• ·No tracking or behavioural monitoring of children. We do not do this. We measure academic performance on questions a student chose to attempt — that is service delivery the user asked for, not behavioural profiling. There are no advertising trackers, no cross-site tracking, and no third-party analytics on the learner surfaces.
• ·No targeted advertising directed at children. We run no advertising of any kind.

We process personal data on the basis of free, specific, informed and unambiguous consent, given by clear affirmative action — creating an account. Each consent is tied to a stated purpose. Consent can be withdrawn as easily as it was given, by emailing the address in section 09.

Personal data is used only for the purpose it was collected for: signing you in, measuring where you stand, scheduling your revision, answering the question you asked, and reporting progress to a guardian you linked.

On minimisation, the product is deliberately thin: an email, a first name you choose, and an exam. No phone number, no address, no school, no date of birth, no government identifier. The AI features receive the question text only — never your identity or your history.

The AI answer and tutor features send question text to Groq and Google, whose processing happens outside India. The Act permits cross-border transfer except to countries the Central Government restricts; we will stop using any provider that becomes restricted.

Practice and the 20-question check are graded entirely on your own device and involve no transfer at all — which is why they remain available, and free of this consideration, even when the AI features are not used.

A guardian sees aggregate progress — readiness, consistency, chapter and capability strength — and never the raw record: not the questions asked, not individual wrong answers, not tutor conversations. This is minimisation applied to the people closest to the student, and it is enforced in the database, not by a promise: the only path a parent account has into a student’s record is a function that removes the raw answers before the row leaves the database, so no parent client — including a modified one — can receive them.

A student, or a parent or guardian acting for a child, may request access to their personal data, correction of it, erasure of it, or withdrawal of consent. Email the Grievance Officer and we will action it. Practice data held on the device can also be erased by the user at any time by clearing site data in the browser.

Grievance Officer: Uday Vamsidhar Volety, Veranox Systems Private Limited, Chennai, Tamil Nadu, India.
Email: uday@veranox.in. Target response: 3 working days. If you are not satisfied with our response, the Act gives you the right to escalate to the Data Protection Board of India.