Privacy Policy

Mingi ("we", "our", "us") is an AI-powered learning platform for students in India, operated by Mingi Education Private Limited. We are committed to protecting the privacy of our users, especially children and minors, in compliance with India's Digital Personal Data Protection Act 2023 (DPDP Act).

For privacy-related queries, contact us at privacy@mingi.in.

We collect only the data necessary to provide and improve our services:

• Account data: name, email address, role (student/parent), grade level, school name
• Usage data: modules used, study sessions, test scores, mastery metrics
• Payment data: transaction IDs and payment status via Razorpay (we do not store card numbers)
• AI interaction data: subject/topic inputs you provide to generate learning content
• Device data: IP address (for rate limiting and security), browser type

We do not collect: biometric data, Aadhaar numbers, financial account details, or geolocation.

Mingi is designed for students, including those under 18. Under the DPDP Act 2023:

• Users under 18 must have a parent or guardian account linked before their data is processed.
• Parents/guardians provide explicit, verifiable consent during signup via the family-link flow.
• Children's data is never shared with advertisers or third-party marketing services.
• Parents can withdraw consent at any time by contacting privacy@mingi.in — this will result in account deletion within 30 days.
• We do not use children's data to track behavioural patterns for commercial profiling.

• To generate personalised AI learning content (flashcards, exam papers, bilateral activities)
• To track your study progress and build the Learnability Matrix dashboard
• To manage subscriptions and process payments via Razorpay
• To send account notifications (email verification, subscription alerts)
• To detect and prevent fraud, abuse, and security threats
• To improve our AI models using anonymised, aggregated data only

We do not sell your personal data. We do not use your data for advertising.

Mingi uses Google Vertex AI (Gemini models) to generate educational content. When you submit a request:

• Only subject, topic, grade level, and curriculum context are sent to the AI — no personal identifiers (name, email, school)
• AI-generated content is stored in our database linked to your account so you can revisit it
• Google processes this data under their Data Processing Addendum

• All data is stored on Supabase (PostgreSQL) with Row-Level Security — each user can only access their own data
• Data is stored in ap-south-1 (Mumbai) region, within India
• All communication is encrypted over TLS 1.2+
• Passwords are hashed using bcrypt and never stored in plaintext
• We conduct regular security audits and penetration tests

• Active accounts: data retained for the lifetime of the account
• Deleted accounts: personal data deleted within 30 days; anonymised usage statistics may be retained
• Payment records: retained for 7 years as required by Indian tax law
• Audit logs: retained for 2 years for security purposes

We use the following third-party processors:

• Supabase — database and authentication (EU/US)
• Google Vertex AI — AI content generation (US)
• Razorpay — payment processing (India)
• Upstash Redis — rate limiting (US)

Each processor is bound by a Data Processing Agreement and handles data only as instructed by us.

As a data principal, you have the right to:

• Access: request a copy of your personal data
• Correction: update inaccurate or incomplete data (available in Account Settings)
• Erasure: request deletion of your account and all associated data
• Grievance redressal: raise a complaint with our Data Protection Officer
• Nominate: designate another person to exercise rights on your behalf in case of death or incapacity

To exercise any right, email privacy@mingi.in. We will respond within 30 days.

We use only essential cookies required for session management and authentication. We do not use tracking, advertising, or analytics cookies without your consent.

We may update this policy as our services evolve. For material changes, we will notify you by email at least 15 days before they take effect. Continued use of Mingi after the effective date constitutes acceptance.

Data Protection Officer
Mingi Education Private Limited
Email: privacy@mingi.in

You may also file a grievance with the Data Protection Board of India once it is constituted under the DPDP Act 2023.