Privacy

Privacy policy

Zoroo teaches children, so this policy is written for the parent who has to decide whether to trust us with their child’s data. It says exactly what we collect, why, who else sees it and how long we keep it — in plain language, with nothing hidden in a definition.

Last updated: 3 September 2026
Applies to: ZoRoo Tuition for iOS and Android, and this website

Who we are

ZoRoo Tuition is operated by Zoroo Learning Pvt. Ltd., a company incorporated in India with its office at K No. 1177/205, Arcadia Grace, Pattandur Agrahara Road, Pattandur Agrahara, Bengaluru, Bengaluru Urban, Karnataka 560066, India. In this policy "Zoroo", "we" and "us" mean that company.

Under the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the personal data described below — we decide what is collected and why, and we are answerable for it.

This policy covers the ZoRoo Tuition app for iOS and Android, this website, and the staff console our teachers and office team use to run classes. It applies to three groups of people: students enrolled with us, the parent or guardian linked to a student account, and anyone who sends us an enquiry.

Zoroo is a tuition centre, not an open platform. Nobody can sign up as a student on their own: a student account is created by our office team when a child is enrolled, and a parent account is opened by the parent using the six-character parent code we issue for their child.

At a glance

We do not sell, rent or trade personal data, and we do not use it for advertising.
The app carries no advertising SDK, no third-party analytics and no tracking pixels. Nothing in it profiles a student.
Classes are taught live by a human teacher. They are not recorded, so no video or audio of a class or of your child is created or stored.
The only photographs the app takes are answer sheets sent to your teacher for marking, and a profile photo if the student chooses to add one.
We never see card, UPI, net-banking or bank-account details. Fees are paid on the payment gateway’s own hosted page.
A parent can ask us to correct or delete their child’s data at any time, and we act within 30 days.

What we collect, and why

This is the complete list. Where a field is optional it is marked so, and where data comes from the tuition centre rather than from you we say that too.

Category	What we hold	Why we hold it
Student account	Name, mobile number (which is also the login), the password stored only as a one-way bcrypt hash, class or grade, an optional e-mail address, an optional profile photo, and the six-character parent code shown in the app. Entered by our office team at enrolment, from the details the parent gives us.	To create and secure the account, place the student in the right class, and let a parent link to their child.
Parent account	Name, mobile number, the password as a bcrypt hash, and the list of children linked to the account.	So a parent can see their child’s schedule, attendance, homework and fees, and message the teacher.
Enquiries	Name, mobile number, e-mail address, the student’s grade, subjects of interest, city, preferred teacher, preferred timings, and the counsellor’s notes from the call.	To call you back about a free demo class, and to enrol the student if you decide to go ahead.
Verification codes	The mobile number, a hash of the one-time passcode sent to it, what the code was for, and how many times it was tried.	To verify a first login, a parent registration or a password reset. The record deletes itself when the code expires.
Homework photographs	Photographs of answer sheets taken with the camera or chosen from the photo library, with the file name, size, type and page order, plus the teacher’s annotated copy of a page.	So the teacher can mark the work and hand it back. Nothing else in the app uses the camera or the photo library.
Marks and feedback	Marks awarded, the teacher’s written remark, whether the work was late, who reviewed it and when, and any correction an administrator makes to a mark together with the reason given.	To report progress to the student and their parent, and to keep marking accountable.
Attendance and joining	Present, absent or late as marked by the teacher, who marked it and when, the moment Join Class was tapped, the IP address and device user-agent recorded at that tap, and the joining time and minutes the video service reports back.	To keep an attendance record, to settle a dispute about whether a class was attended, and because attendance decides part of the refund calculation.
Fees and payments	Amounts, discounts, which months a payment covers, its status, the payment gateway’s payment and payment-link identifiers, the reason a payment failed, and receipts. We never receive or store card, UPI, net-banking or bank-account details.	To bill for tuition, issue receipts and answer fee queries.
Cancellations and refunds	The reason given for cancelling, the attendance percentage measured at that moment, the frozen quotation shown to the student, the amount approved and paid, and the gateway refund identifiers.	To calculate a refund under the published policy, and to show afterwards exactly how the figure was reached.
Parent–teacher messages	The text of messages between a parent, the teacher and, where they step in, our support staff; who sent each message and when; and unread counts.	So parents and teachers can talk about a child inside the app rather than over personal phone numbers.
Safety reports and blocks	The reason chosen when a message or a conversation is reported, any details typed with it, a snapshot of the reported text exactly as it read at that moment, who reported whom, and the record of a parent blocking or unblocking a teacher.	So we can review a report of abusive or unsafe conduct, act on it, and still see afterwards what was actually said.
Device and notifications	The push notification token the device is issued, whether it is an iOS or Android device, and when it was last seen.	To send class reminders, homework alerts, fee reminders and message notifications.
Sessions and audit records	A hash of the session refresh token with its expiry, and a log of the actions our staff take on a record — what changed, who changed it and the IP address it changed from.	To keep you signed in, to let us revoke a session, and to make staff access to student records auditable.

What we deliberately do not collect

No location data. The app never asks for it and never reads it.
No contacts, calendar or microphone access.
No advertising identifier, and no behavioural or usage profile of a student.
No recordings of classes, and no screen or keystroke monitoring of any kind.

How we use it

To run classes: build the timetable, create the live class link, mark attendance and reschedule when a class moves.
To teach: set homework, receive answer sheets, mark them and return marks and remarks to the student and their parent.
To bill: price each monthly cycle, issue a payment link, record what was paid and calculate any refund due under the published policy.
To communicate: send class, homework and fee notifications, deliver login codes, and carry parent–teacher messages.
To support you: answer questions about an account, a payment or a class, which sometimes requires our support staff to look at the record.
To keep the service safe and accountable: verify logins, revoke sessions, log staff access to student records and investigate misuse.
To keep the messaging channel safe: screen outgoing messages for abusive language, review reports raised by a parent or a teacher, and act on them.
To meet legal obligations: keep the financial records Indian company and tax law requires us to keep.

We do not use personal data to make automated decisions that affect a student. Marks are given by a teacher, attendance is marked by a teacher, and a refund is calculated by a published formula and then approved by a person.

Children’s privacy

Our students are children

Zoroo teaches Class 5 to Class 12, so nearly every student is under 18 and many are under 13. We treat every student account as a child’s account, and we apply the additional protections the DPDP Act, 2023 requires for children’s data to all of them rather than only to those we know to be under 18.

A student account is created by the tuition centre when a child is enrolled. There is no public sign-up for a student account, in the app or on this website, so a child cannot open an account by themselves.
Verifiable consent is obtained from a parent or lawful guardian offline, at enrolment: the parent enrols the child with our office, gives us the contact details we hold, and consents in writing to the processing described in this policy before the account exists.
We do not knowingly collect personal data directly from a child without that consent. If a child contacts us on their own, we deal with the parent on record.
We do not track or behaviourally monitor children, and we do not direct advertising at them. There is no advertising in the app at all.
Nothing in the app asks a student for data about anybody other than themselves and their own homework.
A parent can report anything said to them in the app and can block a teacher outright. Reports about a child’s safety are looked at first.
A parent linked to a student account can see everything we hold about their child — schedule, attendance, homework, marks, fees and messages — and can ask us to correct or delete it.
If you believe a child’s data has reached us without a parent’s or guardian’s consent, write to us and we will delete it.

Section 9 of the DPDP Act, 2023 requires verifiable consent from a parent or lawful guardian before a child’s personal data is processed, and prohibits tracking, behavioural monitoring and targeted advertising directed at children. Our enrolment process is built around that requirement, and the app contains no mechanism for tracking or advertising to anyone.

Our legal basis

We process personal data on the following bases under the DPDP Act, 2023 and the Indian Contract Act, 1872.

Basis	What it covers
Consent	The consent a parent or guardian gives at enrolment, on behalf of their child, for everything described in this policy. Consent can be withdrawn — see your rights below — and withdrawing it generally means ending the enrolment, because we cannot teach a child whose data we may not hold.
Performance of the contract	Delivering the classes you have enrolled for, billing the fees agreed and paying any refund due.
Legitimate uses	Keeping the service secure, verifying logins, preventing misuse, and the staff audit log that records who looked at a student record.
Legal obligation	Retaining invoices, payment and refund records for the periods Indian company and tax law require, and responding to a lawful demand from a public authority.

Who else sees this data

We do not sell personal data, and we share it with no advertiser, data broker or social network. The only outside parties involved are the service providers listed here, each of which processes data on our written instructions and for no purpose of its own.

Recipient	What they receive	Why
Razorpay (payment gateway)	The payer’s name, mobile number and the amount due, when a payment link is created. Card, UPI and bank details are entered on Razorpay’s own hosted page and never reach us.	To collect fees, and to send a refund back to the method the fee was paid from.
SMS gateway (2Factor.in, or Twilio)	The mobile number and the text of the message, including one-time passcodes and payment links.	To deliver login codes and fee messages by SMS.
Amazon Web Services (S3, or an S3-compatible store)	Homework photographs, annotated pages and profile photos, held in a private bucket that is not publicly readable.	Storage. Files are served only through short-lived signed links, and only after we check the viewer is entitled to that particular file.
Google (Workspace, Calendar and Meet)	The class time, the teacher, the meeting link, and the joining time the meeting reports back.	To create and run the live class link for online classes.
Expo, and through it Apple (APNs) and Google (FCM)	The device push token and the text of the notification.	To deliver push notifications to the device.
Vercel and our managed MongoDB database	The data described above, as the platforms the service runs and is stored on.	Hosting the application and its database.
Auditors, advisers and public authorities	Only what is required, and only when it is.	Where the law obliges disclosure, or to establish, exercise or defend a legal claim.

Who inside Zoroo can see it

A teacher sees the students in their own batches: names, class, attendance, homework and marks. They do not see fee or payment records.
Office and support staff see what they need to run enrolments, fees and refunds, according to the role assigned to them.
Every staff action on a student, enrolment, payment or refund record is written to an audit log with the actor, the change and the IP address.

How long we keep it

Record	Kept for
One-time passcodes	Deleted automatically when the code expires, minutes after it is sent.
Sign-in sessions	Deleted automatically at expiry, and revoked immediately when you sign out.
Push device tokens	Until you sign out or uninstall the app, or ask us to delete the account.
Homework photographs and annotated pages	The duration of the course and 12 months after it ends, so a mark can still be reviewed. Deleted sooner on request, and immediately when an administrator removes the content.
Marks, attendance and progress records	While the student is enrolled and for 3 years after the last class, so we can answer a query or a dispute about it.
Parent–teacher messages	The duration of the enrolment and 12 months after it ends.
Enquiries that do not become an enrolment	24 months, then deleted.
Payments, refunds, invoices and receipts	8 years from the end of the financial year they relate to, as the Companies Act, 2013 and Indian tax law require. This is a legal obligation and it survives a deletion request.
Staff audit logs	3 years, so access to a student’s record remains auditable.
Everything else, after a deletion request	Deleted within 30 days of us verifying the request.

Your rights

As a Data Principal under the DPDP Act, 2023 — or as the parent exercising these rights on behalf of a child — you can ask us to do any of the following. There is no charge, and we answer within 30 days.

Access: a summary of the personal data we hold about you or your child, and of who we have shared it with.
Correction: correct anything inaccurate, complete anything missing and update anything out of date.
Erasure: delete the account and the data we hold, except the financial records the law requires us to keep.
Withdraw consent: stop the processing you consented to at enrolment, which in practice ends the enrolment.
Nominate: name someone to exercise these rights if you are unable to.
Grievance redressal: complain to us first, and then to the Data Protection Board of India if we have not resolved it.

To delete an account and its data, use the account deletion page. We verify the request with the parent or guardian on record before acting on it, so that a request cannot be made by anyone else, and we confirm by SMS when it is done.

How we protect it

Passwords are stored only as one-way bcrypt hashes. Nobody at Zoroo can read a password, and support can only reset one.
Sign-in uses short-lived signed tokens; the longer-lived refresh token is stored as a hash and can be revoked, and the app keeps it in the device keychain or keystore.
Homework photographs and profile photos live in a private bucket. Every request is checked against who you are and what you are entitled to see, and the file is then served through a signed link that expires within the hour.
Staff access is role-based: a teacher reaches only their own batches, and each role carries only the permissions it needs.
Staff actions on student, payment and refund records are written to an audit log with the IP address they came from.
All traffic between the app, the website and our servers is encrypted with TLS.
If a personal data breach affects you, we will notify you and the Data Protection Board of India as the DPDP Act requires.

No system is perfectly secure, and we do not claim otherwise. If you find a vulnerability, please write to us before disclosing it publicly and we will fix it.

Changes to this policy

If we change what we collect, why, or who we share it with, we will update this page and change the date at the top. Where a change materially affects a student or parent, we will also tell you in the app or by SMS before it takes effect.

Contact us

Privacy queries and grievances

Write to us about anything in this policy, to exercise a right, or to raise a grievance. Mark a privacy request for the attention of the Grievance Officer and we will acknowledge it within one working day.

Phone: +91 91876 09081
WhatsApp: +919187609081
Post: Zoroo Learning Pvt. Ltd., K No. 1177/205, Arcadia Grace, Pattandur Agrahara Road, Pattandur Agrahara, Bengaluru, Bengaluru Urban, Karnataka 560066, India

Grievance officer — The Grievance Officer, Zoroo Learning Pvt. Ltd., at the address and e-mail above.
Escalation — The Data Protection Board of India, if we have not resolved your complaint.