Privacy Policy

1. Contact Information

2. Information We Collect

We collect the following categories of personal data, depending on how you use Ambiful Learning:

• Identity and contact data: name, email, phone number, and account role.
• Account and authentication data: hashed password data, session data, account status, and optional 2FA/TOTP configuration.
• Learning and academic data: enrolled courses, attendance, assignments, quizzes, grades, and progress metrics.
• Parent/guardian linkage data: parent-child relationship information for monitoring features.
• Financial and fee data: fee currency, due dates, payment/fee status, and related records.
• Communications data: contact form submissions, support interactions, and newsletter preferences.
• Technical and usage data: device/browser details, logs, diagnostics, and analytics events.
• AI interaction data: prompts, generated responses, and context required to provide AI-assisted features.

3. How We Use Information

• Provide core platform features and role-based access.
• Operate educational workflows and dashboards.
• Send service-related communications and support responses.
• Protect accounts, prevent abuse, and maintain platform security.
• Analyze service usage and improve performance.
• Comply with legal obligations and enforce terms.

4. Legal Basis by Processing Purpose (where applicable)

Where GDPR/UK GDPR or similar laws apply, we process personal data under one or more of the following legal bases: contract performance, legitimate interests, consent, and legal obligations.

5. Cookies and Similar Technologies

We use cookies and local storage for necessary operations, preferences, and analytics (subject to consent where required). You can control non-essential cookies through our consent controls and your browser settings.

6. Sharing and Service Providers

We share information only as needed to operate the platform (for example cloud hosting, database, storage, email delivery, analytics, authentication, and AI processing providers), to comply with law, or to protect rights and safety.

7. Data Retention

We retain personal information only for as long as necessary to provide services, meet legal obligations, resolve disputes, and enforce agreements. Data is deleted or de-identified when no longer required.

8. Your Rights

Depending on applicable law, you may have rights to access, correct, delete, or restrict processing of your personal information.

Request mechanism: Users can submit requests to view, edit, or delete personal information via privacy@ambiful.com or through https://www.ambiful.com. We verify identity before fulfilling requests.

9. Children and Educational Use

Our platform supports educational use and may involve minors through authorized parents/guardians, schools, or admins. We process children's information only as required for educational services and applicable law.

10. Security

We apply reasonable technical and organizational safeguards to protect personal information. No system can guarantee absolute security.

11. Policy Updates

We may update this Policy from time to time. Material changes will be posted on this page with an updated date.

12. Sources of Personal Data

• Directly from you: during sign-up, profile edits, support requests, and platform usage.
• From authorized users: such as admins, tutors, parents/guardians, or school representatives.
• Automatically: through logs, device/browser metadata, and cookie or local-storage preferences.
• From integrated services: where needed to provide authentication, communications, analytics, and AI features.

13. International Transfers

Ambiful Learning is operated from India, but some service providers may process data in other countries. Where cross-border processing occurs, we use contractual and operational safeguards appropriate to the sensitivity of the data and applicable law.

14. Sale of Personal Data and Marketing Use

We do not sell personal data for monetary consideration. We do not use student learning data for unrelated third-party advertising. Where consent is required for optional analytics or marketing cookies, we provide controls through cookie preferences.

15. Grievance and Data Protection Requests (India)

For India-based users, privacy grievances or requests regarding access, correction, deletion, or consent withdrawal can be submitted to privacy@ambiful.com. We acknowledge and process requests within a reasonable period and in line with applicable law.

16. Contact for Privacy Matters