Privacy Notice

ZEKO is a study app for school students. For the data described here, ZEKO is the “Data Fiduciary” under India's Digital Personal Data Protection Act, 2023 (the DPDP Act): we decide why and how it is used.

• Account: your name, email address, a scrambled (hashed) form of your password, and whether you are a student, parent or teacher.
• Optional phone number: only if you choose to verify one, to stop the same person starting a free trial twice.
• Study details: your class or exam track, subjects, exam date and chosen world theme.
• What you do in ZEKO: questions you answer and your scores, mistakes, flashcards, time spent studying, streaks, medals, batch tier, focus notes (Park It thoughts, intentions) and settings.
• Things you upload: PDFs or photos you upload to make study material, and photos of answer sheets for a mock exam. We ask for a separate yes before your first upload.
• Questions you ask the AI tutor, and how much AI you have used each day.
• Safety records: sign-in times, IP address, browser type, a random device cookie used only to spot unusual numbers of sign-ups, and a log of who opened whose data.

We do not collect your location, contacts, photos you have not uploaded, or anything from other apps.

• To run your study account: pick practice for you, track your progress and show it to you.
• To show progress to a parent or school only if you link them (see below).
• To keep accounts safe: confirm emails, stop abuse, and keep an audit log.
• Only if you say yes: to use activity without names to improve the app.

We never show advertising, never sell or rent personal data, never track you across other websites, and never build a profile of a child to target them. That is also what section 9 of the DPDP Act requires.

• A parent you link to your account sees a weekly summary of your effort and progress, not every answer. You can see exactly what they see on the “Who can see me” screen.
• Your teacher, if you join their class through your school, sees your work in that class. A school's administrator sees the school in totals only, not individual students.
• Companies that run parts of ZEKO for us (“Data Processors”), only to do that job: website hosting (Vercel), the database (Neon), file storage (Vercel Blob), email delivery (Resend), the AI tutor (Anthropic), the robot check on sign-up forms (Cloudflare), and payments (Razorpay). Payment details such as card or UPI numbers go straight to the payment partner; we keep only the plan, amount, date and payment reference. Some of them may process data outside India.
• Authorities, only where the law requires it.

We keep your data while your account is open. When you delete your account (Settings → Delete account), it is switched off at once and permanently erased 30 days later. Safety and audit logs are kept for a limited period and then deleted automatically. You can download a copy of your data at any time from Settings → Your data.

• Ask what data we hold about you and get a copy of it — or download it yourself from Settings → Your data.
• Ask us to correct or complete it.
• Withdraw a consent you gave, as easily as you gave it. Withdrawing the core consent closes the account.
• Ask us to delete it — you can also do this yourself in Settings.
• Name someone to act for you if you cannot.
• Complain to us, and if you are not satisfied, to the Data Protection Board of India.

Write to our grievance officer at dheeravtandon16@gmail.com, or see Contact Us.