Privacy Policy
Effective Date: 30 July 2025 · Last Updated: 25 September 2026
Educifly Infinity LLP (“Educifly”, “we”, “our”, or “us”) provides online one-to-one tutoring for IB, MYP, IGCSE, A Level, AP and SAT students worldwide, delivered through our website (educifly.com) and our online classroom, Educifly Classroom (classroom.educifly.com). We care deeply about the privacy of the students, parents, guardians, tutors and visitors who use our website and services.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have. Because our students are based in many countries — including India, the United Arab Emirates, the United Kingdom, Singapore, Hong Kong, Europe and the United States — this policy is written to meet the standards of India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025, the Information Technology Act, 2000 and its rules, the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and applicable US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA).
Please read this policy together with our Terms & Conditions and our Cookie settings.
1. Who We Are (Data Controller / Data Fiduciary)
Educifly Infinity LLP is the “data controller” (under GDPR / UK GDPR) and the “Data Fiduciary” (under the DPDP Act) responsible for your personal data.
Entity: Educifly Infinity LLP
Registered office: WZ-151, 1st Floor, Sri Nagar Colony, Delhi – 110034, India
Email: richa@educifly.com
Phone / WhatsApp: +91 95993 31646 (Mon–Sat, 10:00am–6:00pm IST)
For any privacy question, data request, or complaint, please contact our Grievance Officer / Data Protection Contact (see Section 15).
2. Whose Data We Collect
We collect personal data relating to:
Students — including minors (children), who form the core of our service.
Parents and guardians who book, pay for, or supervise tutoring.
Tutors who teach on the Educifly platform, and prospective tutors and job applicants (see Section 12).
Quality reviewers and staff who use Educifly Classroom.
Website visitors who browse our site or use our free tools.
Because we knowingly provide services to minors, we apply additional protections described in Section 10.
3. Information We Collect
Information you give us:
Identity and contact details: student and parent/guardian name, email address, phone number, country and time zone, and (where provided) postal address.
Academic information: curriculum (for example IB DP, IGCSE, A Level, AP, SAT), subjects, year/grade level, school, target grades, assessment details, and learning needs.
Booking and account data: trial requests, class bookings and scheduling preferences, and Educifly Classroom login details (email address and password — passwords are stored in hashed form and are never visible to us).
Payment information: billing details processed through our third-party payment providers. We do not store full card numbers on our own servers.
Class content and activity in Educifly Classroom: homework you hand in and the feedback a tutor gives on it (including annotated files), files shared between student and tutor, messages exchanged in the classroom chat, and class bookings, changes and cancellations.
Class recordings: audio and video recordings of live online classes, including anything shown on screen and said or written during the class (see Section 8).
Communications: enquiries, support requests, feedback, and survey responses, including messages sent to us by email or WhatsApp.
Information we collect automatically:
Technical data: IP address, browser type, device and operating system information, approximate location, and the time zone reported by your browser (used to show class times in your local time).
Usage data: pages viewed, links clicked, time spent, referring website, how you interact with our free tools, and — inside Educifly Classroom — log-in times, which classes and recordings were opened, and progress through training courses.
Cookies and similar technologies: as described in Section 7.
We collect only the data we reasonably need to provide and improve our services.
4. How and Why We Use Your Information (Purposes & Legal Bases)
We use personal data for the purposes below. Where GDPR / UK GDPR applies, the relevant lawful basis is shown in brackets.
Deliver tutoring, match students with tutors, create and run your private online classroom, and schedule and hold live classes (performance of a contract).
Record live classes so students can rewatch them for revision, and to support teaching quality, safeguarding and the resolution of complaints or disputes (performance of a contract and legitimate interests; consent where required by local law). See Section 8.
Review a sample of classes — recordings, chat, homework and feedback — through our internal quality-review process, so we can check teaching standards, support tutors and keep students safe (legitimate interests). See Section 9.
Process payments and manage billing (performance of a contract).
Communicate with you about lessons, bookings, reminders, homework, updates, and support, including automatic emails from Educifly Classroom (performance of a contract / legitimate interests).
Personalise and improve learning outcomes and our teaching materials (legitimate interests).
Train and onboard tutors, including through recorded training courses inside Educifly Classroom (performance of a contract / legitimate interests).
Operate, secure, and improve our website, free tools and Educifly Classroom, including preventing unauthorised access (legitimate interests / legal obligation).
Send marketing or newsletters where you have opted in (consent) — you can unsubscribe at any time.
Comply with legal, tax, accounting, and regulatory obligations (legal obligation).
Under India’s DPDP Act, we process personal data on the basis of consent (including verifiable parental consent for children) and for the legitimate uses permitted by the Act, such as providing a service you have asked for and complying with law. You may withdraw consent at any time (see Section 11); withdrawing consent may mean we can no longer provide the service to which it relates.
We do not use personal data for automated decision-making that produces legal or similarly significant effects on you.
5. Sharing Your Information
We do not sell or rent your personal data. We share it only as follows:
Tutors: the student’s name, curriculum, grade, academic needs and classroom activity needed to prepare and deliver lessons. Tutors are bound by confidentiality obligations and may not contact students or parents outside the Educifly platform.
Quality reviewers: designated Educifly team members who review classes as described in Section 9.
Service providers (processors / sub-processors) acting on our instructions and under contract, currently including:
Video conferencing: Zoom Video Communications, Inc. (live classes and the initial cloud recording of classes);
Video storage and streaming: BunnyWay d.o.o. (“Bunny.net”) — class recordings and training videos are stored in Bunny’s data centre in Frankfurt, Germany (EU) and delivered through Bunny’s content-delivery network;
Hosting: Hostinger — Educifly Classroom runs on a server located in India;
Email: Google Workspace (Gmail), used to send classroom and account emails;
payment gateways and billing providers;
scheduling, CRM, customer-support and messaging tools (including WhatsApp for support conversations you start with us);
website analytics and tag management (e.g., Google Analytics / Google Tag Manager).
Professional advisers (legal, accounting, audit) where necessary.
Authorities or third parties where required by law, regulation, court order, or to protect our rights, users, or the public — including to protect the safety of a child.
Business transfers: if Educifly is involved in a merger, acquisition, or reorganisation, data may be transferred subject to this policy.
All third parties are required to keep your data secure and to use it only for the purposes we specify. A current list of our main service providers is available on request.
6. International Data Transfers
Educifly operates from India and serves students worldwide, so personal data may be transferred to, stored in, or accessed from countries other than your own — including India (our servers and team), Germany (video storage), the United States (video conferencing and some software tools) and the countries where our service providers operate.
Where we transfer personal data out of the European Economic Area (EEA) or the United Kingdom, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or transfers to countries recognised as providing adequate protection. You may request a copy of the relevant safeguards by contacting us.
Transfers of personal data outside India are made in accordance with the DPDP Act and any restrictions notified by the Government of India.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to operate our site, remember your preferences, analyse traffic, and improve performance. Cookies fall into broad categories:
Strictly necessary — required for the site and Educifly Classroom to function (for example, keeping you logged in).
Functional / preference — remember choices such as language or time zone.
Analytics / performance — help us understand how the website is used (e.g., Google Analytics).
Marketing — used to measure and improve campaigns on our public website.
You can manage non-essential cookies at any time through the “Cookie Settings” option on our website, or by adjusting your browser settings. Where required by law, we ask for your consent before setting non-essential cookies. Disabling some cookies may affect site functionality.
Educifly Classroom itself uses only strictly necessary cookies (login session and security). We do not use advertising or marketing cookies inside the classroom, and we do not track children for advertising.
8. Recording of Online Classes
Live classes in Educifly Classroom are recorded unless Educifly has switched recording off for a particular class. Recording is controlled by Educifly, not by individual tutors.
What is recorded: the audio, video and screen content of the class — this may include the student’s and tutor’s voice and camera, the tutor’s shared screen, and anything written or said during the class. A notice is shown and an audio prompt is played to everyone in the class when recording is on.
Why we record:
so students can rewatch explanations during revision;
to check and improve teaching quality (see Section 9);
for safeguarding, and to investigate any complaint, dispute or misconduct.
Who can see a recording: only the student and tutor in that class (through their own Educifly Classroom login), Educifly administrators, and designated quality reviewers. Recordings are watched inside Educifly Classroom through time-limited, non-shareable links; they are not public and cannot be reached by a direct URL. Recordings carry an Educifly watermark.
Where recordings are stored: classes are recorded to Zoom’s cloud and then copied to our video platform (Bunny.net, stored in Frankfurt, Germany). The copy held in Zoom’s cloud is kept only as a short-term backup and is deleted by Educifly once it is no longer needed. Students and tutors cannot download recordings.
How long we keep recordings: by default, class recordings are kept for 12 months after the class, after which they are automatically deleted. Educifly may set a shorter or longer retention period for a particular class (from 1 month up to indefinitely, for example where a family asks for longer access). The date until which a recording is available is shown next to it in Educifly Classroom.
Consent and choice: by booking classes you (and, for a minor, the parent or guardian) consent to classes being recorded as described here. If you do not want classes recorded, tell us before the class and we will switch recording off for your classroom; you can also keep your camera off during a class. Students and tutors must not make their own recordings of classes (see Terms & Conditions).
9. Quality Review of Classes
To maintain teaching standards and keep students safe, Educifly’s quality team may review any class. A reviewer can see, in read-only form, the class recordings, the classroom chat between student and tutor for the period of that class, homework and feedback, shared files and bookings. Reviewers are Educifly team members bound by confidentiality; each review is logged and reviewers cannot change or delete anything. Reviews are used only for training and supporting tutors, checking quality, safeguarding and handling complaints — never for marketing or for profiling students.
10. Children’s Privacy
Most of our students are minors, and protecting their data is a priority.
We require a parent or guardian to provide consent and to set up and oversee a child’s use of our services. Consent is given when the parent or guardian books a trial or classes on the child’s behalf. We may ask the parent or guardian to verify their identity and age where required by law (for example, under India’s DPDP Rules).
Where the law sets an age of digital consent (for example under 18 is a child under India’s DPDP Act, 16 in many EU contexts unless a member state sets a lower age of 13–16, and 13 in the United Kingdom), we obtain verifiable parental/guardian consent before processing a child’s data where required.
For US users, we comply with the Children’s Online Privacy Protection Act (COPPA) and do not knowingly collect personal data from a child under 13 without verifiable parental consent.
We do not use children’s data for targeted advertising, behavioural monitoring for advertising, or for profiling that could harm the child. Recording and quality review of classes (Sections 8 and 9) are carried out only for the educational, quality and safeguarding purposes described there.
We collect from a child only what is needed to teach them: name, curriculum, grade, academic needs, and the classroom activity described in Section 3.
A parent or guardian may review, correct, or request deletion of their child’s data, or withdraw consent, at any time by contacting us.
If you believe we have collected a child’s data without appropriate consent, please contact us immediately and we will take steps to delete it.
11. Your Privacy Rights
Depending on where you live, you have some or all of the following rights:
Access — request a copy of the personal data we hold about you (or your child), and a summary of how it is being processed.
Rectification — ask us to correct inaccurate or incomplete data. Students and parents can update name, email and time zone in Educifly Classroom themselves.
Erasure — ask us to delete your data (“right to be forgotten”), subject to any records we must keep by law.
Restriction — ask us to limit how we use your data.
Portability — receive your data in a portable format, or have it transferred where technically feasible.
Objection — object to processing based on legitimate interests or to direct marketing.
Withdraw consent — withdraw consent at any time, as easily as it was given, without affecting prior lawful processing.
Nominate (India) — nominate another individual to exercise your rights in the event of death or incapacity, as provided under the DPDP Act.
Complain — lodge a complaint with your local data protection authority (for example, your EU supervisory authority, the UK Information Commissioner’s Office, or the Data Protection Board of India), after first raising it with us if your local law requires.
California residents additionally have the right to know what personal information is collected, to request deletion, to correct it, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising.
To exercise any right, email richa@educifly.com from the email address registered with us, or write to the address in Section 15. We will verify your identity (and, for a child’s data, the parent’s or guardian’s authority) and respond within the timeframe required by applicable law — within one month under GDPR / UK GDPR, and within 90 days under India’s DPDP Rules, in each case as quickly as we reasonably can. These rights are free to exercise in most cases.
12. Tutors and Job Applicants
Applicants: if you apply to tutor or work with us, we collect the information in your application (contact details, CV, qualifications, references, and assessment results). We use it to evaluate your application, communicate with you, and meet legal obligations, and we retain it only as long as needed for recruitment and related record-keeping.
Tutors: if you teach with Educifly, we also process your Educifly email address and login details, your classes, bookings, recordings and classroom activity (Sections 3, 8 and 9), your progress through Educifly training courses, quality-review notes about your teaching, and payment and tax information needed to pay you. Tutor data is used to run classes, support and train you, assess quality and meet our legal obligations.
13. Data Retention
We keep personal data only for as long as necessary for the purposes described in this policy, including to provide our services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymise it.
Our main retention periods are:
Class recordings: 12 months after the class by default; Educifly may set 1 month to indefinite for a particular class (Section 8).
Homework, feedback, shared files and classroom chat: automatically removed after a period set by Educifly (between 1 and 12 months; currently 6 months), unless a shorter or longer period applies to your class.
When a student leaves Educifly: the student’s classroom is hidden immediately and the account, classes, recordings, homework, chat and files are permanently deleted 7 days later (the delay allows a change of mind). Copies may remain in our server backups for a short further period before they are overwritten.
Account and booking data: for the duration of your relationship with us and up to 1 year afterwards, unless you ask us to delete it sooner.
Billing and tax records: 5 years, or longer where Indian tax and company law requires it.
Website analytics data: per the settings of the analytics provider (for Google Analytics, up to 14 months).
Server and security logs: at least 1 year, as required by India’s DPDP Rules.
Where the law requires us to notify you before erasing your data, we will do so.
14. Data Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. These include: encrypted connections (HTTPS) to our website and Educifly Classroom; hashed passwords; role-based access so that each person sees only their own classes; time-limited, signed links for recordings and no direct download; recordings and training videos protected by domain and token authentication; firewalled, regularly updated servers with automatic security patches; access logging; staff and tutor confidentiality obligations; and Educifly Classroom being hidden from search engines.
No online platform can guarantee absolute security. If a personal data breach occurs, we will notify you and the relevant authorities where required by law — including the Data Protection Board of India (with a detailed report within 72 hours) and, where GDPR / UK GDPR applies, the relevant supervisory authority within 72 hours.
15. Grievance Officer & Data Protection Contact
If you have any question, request, or complaint about your personal data or this policy, please contact:
Grievance Officer / Data Protection Contact: Richa Jain, Educifly Infinity LLP
Email: richa@educifly.com
Phone / WhatsApp: +91 95993 31646 (Mon–Sat, 10:00am–6:00pm IST)
Postal address: WZ-151, 1st Floor, Sri Nagar Colony, Delhi – 110034, India
We will acknowledge your complaint within 48 hours and aim to resolve it within one month, and in any event within the timeframes required by applicable law (including the 90-day limit under India’s DPDP Rules and the timelines under the Consumer Protection (E-Commerce) Rules, 2020).
16. Third-Party Links and Services
Our website and free tools may contain links to external sites we do not control. We are not responsible for the privacy practices or content of those sites. Live classes are held on Zoom; Zoom’s own privacy notice applies to your use of the Zoom app or browser client. We encourage you to review these policies before providing any personal data.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a revised “Last Updated” date and, where changes are significant (for example, a change to how classes are recorded), take reasonable steps to notify you by email or in Educifly Classroom.
Summary of the 25 September 2026 update: classes in Educifly Classroom are now recorded (Section 8); a quality-review process has been introduced (Section 9); we have named our main service providers and where data is stored (Sections 5–6); retention periods are now published (Section 13); and children’s-data and rights sections have been updated for India’s DPDP Rules, 2025.
This Privacy Policy is provided for general information and transparency. It is not legal advice. We recommend confirming the final version with a qualified legal professional in the relevant jurisdictions.