Privacy Policy
Effective Date: March 9, 2026 — Plain English, no legal jargon.
Introduction
PingLearn ("we", "our", or "us") operates the voice AI tutoring platform at ping-learn.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
We built PingLearn specifically for students in grades 6-12 in India. Because many of our users are children, we take privacy seriously and have designed our data practices to be minimal, transparent, and compliant with applicable law.
Effective Date: March 9, 2026
Contact: privacy@pinglearn.com
What Data We Collect
We collect only what is necessary to provide the tutoring service:
Account Information
- •Username and display name
- •Email address
- •Date of birth (used for age verification and privacy law compliance)
- •Grade level and school name (optional, used to personalize curriculum)
Learning Data
- •Session metadata: subject, chapter, start/end time, duration
- •AI-generated session notes and summaries
- •Engagement data: streaks, milestones, session count
- •Device and browser preferences (for audio settings)
Parent/Teacher Data (if applicable)
- •Parent email address (for consent verification and session summaries)
- •Teacher account details: name, school/institute, city, email
- •Consent records: timestamps and version numbers
What we do NOT collect: Location data, social media profiles, browsing history, contacts, photos, or any data beyond what is listed above.
Voice Sessions — Real-Time Only, Not Recorded
Voice tutoring sessions use real-time audio processing via LiveKit Cloud and Google Gemini AI. Voice audio is processed in real time and is not recorded or stored.
When you speak during a session, your audio is transmitted live to the AI tutoring system to generate a response. The audio itself is discarded immediately after processing. We do not retain voice recordings, voiceprints, or audio files.
What IS stored after a session: AI-generated text notes summarizing the topics discussed. These notes do not contain audio; they are text summaries created by the AI from the session content.
How We Use Your Data
We use your data exclusively to operate and improve the tutoring service:
- •Tutoring: Personalizing lessons to your grade level, subject, and learning history
- •Session notes: Generating and storing AI-created notes accessible to the student and their parent
- •Progress tracking: Maintaining streaks, milestones, and session history to motivate learning
- •Parent/teacher communication: Sending session summaries and progress notifications to linked parents or teachers
- •Safety and compliance: Age verification, parental consent management, and privacy law compliance (DPDP Act & COPPA)
- •Service improvement: Anonymized, aggregated analytics to improve the AI tutoring quality
We never: Sell your data to third parties, use your data for advertising, share your data with unrelated companies, or build advertising profiles from your usage.
Privacy Law Compliance (DPDP Act & COPPA)
PingLearn is designed for students in grades 6-12, including minors under 18. We comply with India's Digital Personal Data Protection (DPDP) Act 2023 and the U.S. Children's Online Privacy Protection Act (COPPA) with respect to children's data.
Parental Consent Required for Under-18
- •Students under 18 cannot create an account without verifiable parental consent, as required by India's DPDP Act 2023.
- •We send a consent verification email to the parent before activating the account.
- •This policy complies with both the DPDP Act (under-18) and COPPA (under-13), applying the stricter standard.
- •We do not collect more data from children than is necessary for the tutoring service.
What Parents Can Do
- •Review data: Parents can request a copy of all data collected for their child by contacting privacy@pinglearn.com
- •Delete data: Parents can request deletion of all their child's data via Settings > Privacy or by emailing us
- •Revoke consent: Parents can revoke consent at any time through the consent settings page, which will suspend the account
- •View session notes: Parents receive session summaries by email after each tutoring session
- •Export data: Parents can download all stored data from Settings > Privacy > Download My Data
To exercise parental rights, contact privacy@pinglearn.com with your child's username and your relationship to the child. We will respond within 5 business days.
Third-Party Services
PingLearn uses the following third-party services to operate. Each service receives only the minimum data required for its function:
Supabase
Database and authentication
User accounts, session data, notes, consent records
LiveKit Cloud
Real-time voice session transport
Real-time audio streams (not stored); session connection tokens
Google Gemini API
AI tutoring intelligence
Real-time session content for AI response generation (not stored by Google for training per our API agreement)
Resend
Transactional email (consent verification, session summaries)
Email addresses and email content
Upstash Redis
Rate limiting (prevents abuse)
IP-level request counts only; no personal data stored
Vercel
Web application hosting
Request logs, IP addresses (standard hosting data)
We do not use advertising networks, analytics trackers, or any service that builds behavioral profiles for advertising purposes.
Data Retention and Deletion
We retain your data for as long as your account is active and for a reasonable period after account deletion for legal compliance purposes (typically 30 days).
How to Delete Your Data
- •Self-service: Go to Settings > Privacy > Delete Account. This permanently removes all your data.
- •Email request: Email privacy@pinglearn.com with your username and we will delete your account within 5 business days.
- •Parents: For students under 18, parents can request deletion at any time. We will require parent identity verification before deleting.
After deletion, your data is permanently removed from our active databases within 5 business days. Backup copies may persist for up to 30 additional days before being purged.
Security
We implement industry-standard security measures to protect your data:
- •Encryption in transit: All data is transmitted over HTTPS/TLS. Voice sessions use encrypted WebRTC connections.
- •Encryption at rest: Database data is encrypted at rest via Supabase (AES-256).
- •Password hashing: Passwords are never stored in plain text; we use industry-standard bcrypt hashing.
- •Access controls: Row-level security ensures each user can only access their own data.
- •CSRF protection: All state-changing API requests include CSRF tokens to prevent cross-site request forgery.
- •Rate limiting: API endpoints are rate-limited to prevent abuse and unauthorized bulk data access.
Despite these measures, no internet service is 100% secure. If you discover a security vulnerability, please disclose it responsibly to privacy@pinglearn.com.
Parent and Teacher Responsibilities
For Parents
- •By providing consent, you take responsibility for monitoring your child's use of PingLearn and ensuring it is used appropriately.
- •You are responsible for keeping your consent status current. If circumstances change, revoke consent through the settings page.
- •Review session summaries regularly to stay informed about your child's learning activity.
For Teachers
- •Teachers who create student accounts are responsible for the accuracy of the student information provided.
- •Teachers must ensure parental consent is obtained before creating accounts for students under 18 (as required by India's DPDP Act 2023).
- •Teachers must not add students to their class without the student's and parent's knowledge.
- •Misuse of teacher account privileges may result in account termination and notification to your institution.
Limitation of Liability
PingLearn provides an AI-powered tutoring service on an "as is" basis. We do not guarantee specific learning outcomes. The AI tutor provides educational guidance based on curriculum content, but parents and teachers should verify critical educational content independently.
PingLearn is not liable for: learning outcomes or academic results, temporary service outages from third-party providers (Supabase, LiveKit, Google), or any indirect or consequential damages arising from use of the service.
Our total liability is limited to the amount paid for the service in the 3 months preceding any claim.
Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of India, including the Information Technology Act 2000 and the Digital Personal Data Protection (DPDP) Act 2023. For users in the United States, we also comply with COPPA (15 U.S.C. § 6501 et seq.).
Any disputes arising from this Privacy Policy will be subject to the jurisdiction of courts in India.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (for registered users) and by updating the effective date at the top of this page.
Continued use of PingLearn after a policy update constitutes acceptance of the updated policy. If you do not agree with the changes, you should discontinue use and delete your account.
Privacy Questions?
Contact our privacy team directly. We respond within 5 business days.
privacy@pinglearn.com