Privacy Policy for Kedovo

Last updated: 8 September 2026

1. Who we are, and who our users are

Kedovo (kedovo.com) is operated by Kedovo Technologies Private Limited, a company registered in India ("Kedovo", "we", "us"). Kedovo is built for school students, most of whom are minors. We designed the platform so that studying requires as little personal information as possible, and so that a parent or guardian stays in control of the account. This policy is written to meet India’s Digital Personal Data Protection Act, 2023 and its Rules, and reflects our obligations under the Information Technology Act, 2000 and the rules made under it. For anything in this policy, reach us at support@kedovo.com.

2. Information we collect

3. How we use it

We do not sell personal data, and we show no advertising, so your data is never used for ads, by us or anyone else.

4. Parental consent

For every student under 18, a parent or guardian approves the account: at signup we email a one-time code to the parent’s address, and the account cannot be used until that code is entered. That approval covers talking to the tutor as well as typing to it. It does not switch anything on by itself: the browser asks the student for microphone permission the first time they try to speak, the microphone works only while the talk button is held, and the permission can be withdrawn in the browser at any time without affecting the rest of the account. Later sensitive actions, such as paying for a plan, changing the parent contact on file, or deleting the account, are each confirmed the same way, with a fresh code to the verified parent contact. Every confirmation is stored in an append-only consent ledger, so there is always a verifiable record of what a parent approved and when. A parent can withdraw consent at any time, as easily as it was given, by deleting the account or writing to support@kedovo.com; withdrawal does not affect what was lawfully done before it.

5. What a parent can see and control

Because the parent or guardian is the person who consents to a child’s account, the parent stays in control of it. Through the account, or by writing to support@kedovo.com, a parent can review the information held about the child, including the child’s saved tutor conversations, correct it, ask for a copy, change the class or the verified parent contact, and delete the account entirely. A question asked out loud is held in the same place and read the same way, as its text; there is no recording to ask for, because none is kept. The student is told, in the chat itself, that a parent can ask to see saved conversations. We act on a verified parent’s request the same way we would act on the account holder’s own request.

6. Cookies and analytics

Kedovo shows no advertising and uses no advertising cookies or ad trackers. We use a small number of cookies and similar tools for two purposes only: keeping you signed in, and product analytics (PostHog, Google Analytics and Vercel Analytics) that help us understand, in aggregate, which features help students and where the product is confusing or slow. We do not record your screen or replay your sessions. We do not sell this data, and we never use it to advertise to, target, or build advertising profiles of anyone, and specifically never of an account declared as under 18. You can clear cookies in your browser at any time; staying signed in simply sets them again. Where your browser sends a "Do Not Track" signal, we honour it where technically supported.

7. Deleting your account

You can delete your account yourself: go to Account → Delete account, type the confirmation, and enter the one-time code emailed to the parent address on file (or to the account’s own email for adult and older accounts). The account then locks for a 7-day cooling-off period during which one click undoes everything. After those 7 days, an automatic job permanently erases the account.

What is erased: the login identity, profile, all learning progress and quiz history, saved tutor conversations, the voice usage counters, support requests and usage counters.

8. What we keep after deletion (with your identity removed)

Cancelling a paid plan does not refund the current billing period, and undoing a deletion does not restore a cancelled plan.

9. How long we keep your data

We keep an account’s personal data for as long as the account is active. If a paid plan lapses, we keep the account’s progress at least until the end of the academic session, and never less than 3 months, so a returning student finds everything where they left it. Accounts that stay dormant for a long period may then be reviewed and deleted. When you delete your account, the process in section 7 applies; after it, we keep only the de-linked records in section 8 for as long as the law requires (for example invoice and payment records), and no longer.

10. Where data lives, and who else touches it

Your data is stored with Supabase, our database and sign-in provider, hosted in the AWS Singapore region; every record is access-locked to its own account. Indian law currently permits storing personal data outside India (no restricted-country list has been notified under the DPDP Rules); if that changes, we will move the data accordingly. The other services we use, each only for its narrow job:

11. How we protect your data

We take reasonable technical and organisational measures to protect personal data, as Indian law requires. Data is stored with Supabase and travels over encrypted (HTTPS) connections. A voice recording travels over the same encrypted connection as everything else, is held only for the seconds it takes to turn it into text, and is never written to our database. Access to personal data is locked to each account by database row-level security, so one account cannot read another’s data. Administrative keys that can bypass those locks live only on our servers and are never placed in the app that runs in your browser. No system is perfectly secure, but we work to keep these safeguards current, and section 14 explains what we do if something goes wrong.

12. AI and your data

Kedovo’s study material and the tutor’s answers are generated by AI. The tutor, the translation of study material into Indian languages, and the voice features all run on Sarvam AI. When you ask the tutor a question, your message is sent to the AI provider only to generate that answer. To keep the tutor fast and affordable, Kedovo keeps a shared library of common questions and their answers, so a question already answered for a chapter does not have to be generated again. That library is tied to the question and the chapter, not to you: it carries no name or identity and is not a personal record of your conversations. From 9 September 2026, Kedovo also saves your own tutor conversations to your account so you can come back to them: the text of what you asked and what the tutor answered, including the transcript of voice calls. Before that date no personal history was kept. When you talk to the tutor, two things go to Sarvam AI and nothing else does: the recording of the question you just spoke, so it can be turned into text, and the tutor’s written answer, so it can be read aloud. The sound your browser plays is discarded as soon as it has played. Kedovo stores neither. You can delete any saved conversation from the chat at any time; all of them are erased with the account (section 7). A parent or guardian can ask to see or delete a student’s saved conversations by writing to support@kedovo.com from the verified parent address. We do not use your questions or conversations — typed or spoken — or your voice to train AI models, and we do not permit our provider to. AI answers are checked by quality processes but can still occasionally be wrong: the tutor is a study aid, not a replacement for a teacher, and important answers should be checked against the textbook.

13. Your rights

For a student account, these rights are exercised by the parent or guardian.

14. If something goes wrong (data breaches)

If personal data is ever exposed by a security incident, we will inform the Data Protection Board of India as the rules require, and tell affected users plainly: what happened, what data was involved, what we have done, and what (if anything) they should do, without burying it in jargon.

15. Grievances and contact

For privacy concerns, data requests or complaints, contact our Grievance Officer, appointed under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023:

Gaurav Gupta — Grievance Officer
Email: grievance@kedovo.com (or support@kedovo.com for general help)
Kedovo Technologies Private Limited, Crossings Republic, Ghaziabad - 201016, Uttar Pradesh

We acknowledge complaints within 48 hours and resolve them within 15 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

16. Communications from us

We send the messages an account needs: one-time security and consent codes, a single welcome email, notices about changes to this policy or to our terms, and, on a paid plan, payment and renewal notices. We also send occasional updates about new Kedovo features and improvements, so you know what the platform can now do. We do not sell advertising and we do not promote anyone else’s products or services.

Every letter goes to the contact address for the account. On a student account that is the verified parent or guardian, which is the same address that approved the account — so our messages reach an adult, not a child. You can opt out of the feature updates at any time, using the link in any of those emails or by writing to support@kedovo.com; opting out does not affect your account. Transactional messages (security codes, legal and payment notices) are necessary to run the service and cannot be switched off while the account is open.

17. Changes to this policy

We may update this policy from time to time. If a change materially affects children’s data or reduces anyone’s rights, we will notify parents by email before it takes effect; smaller changes are announced by updating the date at the top of this page.