Also read our Terms of Service for full details on your agreement with Pustak AI.
Effective date: 30 October 2026. This policy explains what Pustak AI ("we", "us"), collects through the Pustak AI app and website, why, and the choices you have. Pustak AI is used by parents to create exams, let their children attempt them, and track results.
1. Who uses the app
- Parents and guardians create the account, add child profiles, generate exams, buy plans or coins, view reports, and redeem their child's reward points for gifts.
- Children (students) sign in with a student code and PIN that the parent manages, attempt exams, upload answer sheets, and earn reward points.
The parent account holder must be 18 or older. Child profiles are created only by a parent or guardian, who gives consent on the child's behalf.
2. Information we collect
| Category | What | Source | Why |
|---|---|---|---|
| Parent account | Name and Gmail address from Google Sign-In; for email-and-password accounts, the password (stored only as a one-way hash) | Google Sign-In / you | Create and secure your account |
| Child profile | Child's name, grade, auto-generated student code, PIN | Entered by parent / generated by us | Let the child sign in and get grade-level exams |
| Learning content | Chat messages and prompts, exam requests (subject, topic, difficulty, question type, count), lesson text, generated exams, and a record of the prompts we send to AI to generate each exam | You | Generate exams and answer questions |
| Exam attempts | Typed answers, text read from answer-sheet photos, scores, AI feedback, attempt history, subject and topic-wise reports | Child / generated by us | Grade exams and show progress |
| Uploaded files | Photos of handwritten answer sheets (up to 3 per attempt), images or PDFs attached in chat, lesson files | You or your child | AI grading (OCR) and answering your request |
| Payments | Plan purchased, coin balance and usage, order and transaction IDs, payment status | You / Razorpay | Billing, coin credits, payment history |
| Reward points | Points a student earns for correct answers and daily streaks, the days the student was active (to count streaks), and the points balance | Generated by us from the child's activity | Award points and show the balance and streak |
| Gift redemptions | The gift redeemed, points spent, status (placed, delivered or cancelled), and the delivery details a parent enters: recipient name, mobile number, email address, address, city, state and pincode | Parent | Deliver the gift, and give the points back if it is cancelled |
| Device and usage | IP address, browser or device type, app version, log and error data, session tokens | Automatically | Security, fraud prevention, troubleshooting |
We do not collect card, UPI or bank details; Razorpay processes them directly. We do not collect precise location, contacts, SMS messages, call logs, or microphone data. Camera or photo access is used only when you choose to upload an answer sheet or attachment.
Answer-sheet photos. A photo is sent to OCR.Space to read the text, and the text is then graded by AI. We do not keep the photo as part of your learning history. We keep the text that was read, together with marks, feedback and exam identifiers, so you can review results and progress.
Gift delivery details. Only a parent can redeem a gift, and the parent enters the delivery details at that time. We fill in what we already have, such as the parent's mobile number and email, for the parent to check. The details are used only to deliver that gift. They are kept with the redemption record, are not saved to anyone's profile, and are not shown to the child.
App permissions. The mobile app opens our web app inside the app and may ask for permission to use the camera, photos and files, the microphone, and the internet. Each is used only for the feature it supports, and you can withdraw any of them in your device settings. The app does not record or store audio. It hands downloaded files, such as exam paper PDFs, to your device's share sheet so you can save, print or send them.
Cookies and local storage. A secure sign-in cookie keeps you signed in for up to 12 months, or until you sign out. Local storage keeps a small record of your name and account type so the app can show the right screens, and your recent chat list is kept in session storage on your device. Google's sign-in button loads a script from Google, which may set its own cookies. We do not use advertising cookies.
3. How we use information
- Provide the service: generate exams, evaluate answers, produce reports, run the chat assistant.
- Process payments and credit coins or plan benefits.
- Award reward points, and process and deliver the gifts a parent redeems with them.
- Keep accounts secure, prevent fraud and misuse, and debug issues.
- Improve the app using aggregated or de-identified data.
We do not sell personal data, do not show third-party ads, and do not use children's data for advertising or profiling.
4. AI processing
Exam generation, chat answers and answer-sheet grading are done by AI. To do this we send the relevant prompt, exam content, answers and uploaded images to our AI service providers: OpenAI, and for some tasks a Gemma model that we run on our own servers. OCR.Space reads text from photos. We send only what is needed for the task and do not include your email address. AI output can be wrong; parents should review grades and content. AI results are for practice and learning support only, not official grades or professional advice.
5. Sharing
We share data only with:
- Google – to sign you in.
- Razorpay – to process payments and detect payment fraud (Razorpay privacy policy).
- AI service providers – OpenAI and OCR.Space, to generate and evaluate content, as described above.
- Delivery partners – where we use a courier or delivery service, the recipient's name, address and phone number, only to deliver a gift.
- Hosting and infrastructure providers – to store and run the service.
- Authorities – when required by law or to protect rights and safety.
We share only what each provider needs, and they process it under their own privacy policies. Some of them are located outside India, so your information may be processed in other countries.
Inside Pustak AI, parents see their own children's profiles and results.
6. Retention and deletion
We keep account, child, exam and reward data while your account is active. Gift redemption records, including delivery details, are kept so we can deliver the gift and deal with any problem with it. Payment records are kept as long as tax and accounting laws require (typically 8 years in India). Diagnostic logs are kept only as long as needed for security and troubleshooting.
- Delete your account and data: as the parent, you can delete your account directly in the app: Settings → Account → Delete account. We delete your data within 30 days, except records we must keep by law.
- Delete a child profile: parents delete a child's profile themselves: My Kids → profile menu → Delete student. This removes the profile from your account and blocks the child's sign-in. Any archived data is permanently deleted when you delete your account.
When a parent account is deleted, the parent profile and linked child profiles are deleted, and exams, attempts, answers, learning history, reward points and gift redemption records (including delivery details) are removed where feasible. Coins and unredeemed reward points may be forfeited unless otherwise required by law.
7. Security
We use HTTPS for all traffic, secure sign-in cookies, and restrict access to personal data to authorised staff and to the people linked to a student's profile. Passwords, where used, are stored only as one-way hashes. No system is fully secure; please keep the student code and PIN private.
8. Your rights
Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you may request access, correction, or erasure of your data and your child's data, withdraw consent, and nominate another person to exercise these rights. Some features may stop working if you withdraw consent. Write to us at support@pustakai.com; we respond within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India as provided by law.
9. Children's privacy
Pustak AI is designed for use by children under a parent's supervision. We process a child's data only with verifiable parental consent given when the parent creates the profile. Children cannot register themselves. We do not track children across apps or websites, do not run behavioural advertising, and collect only what is needed for learning. If you believe a child's information was provided without the right consent, contact us and we will remove it.
10. Grievance officer
Grievance Officer
Pustak AI
Kondapur, Hyderabad, Telangana, India
support@pustakai.com
www.pustakai.com
We acknowledge complaints within 48 hours.
11. Changes
We will post updates here and change the effective date. For material changes we will notify you in the app before they take effect.
This policy is an operational template. Have it reviewed by a lawyer familiar with Indian law, the Digital Personal Data Protection Act, 2023, and any jurisdiction where you operate.