Welcome to Menteez, accessible at menteez.in and through its associated mobile applications.

This platform is owned, operated, and managed by Spherical-Lab Innovation Private Limited, a company incorporated under the Companies Act, 2013 (CIN: U74909OD2025PTC048511), having its registered office at:

Software Technology Park of India, Sector-5, Rourkela, Odisha 769002, India

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Spherical-Lab Innovation Private Limited acts as the Data Fiduciary, the entity that determines the purpose and means of processing your personal data.

In this policy, "we", "us", "our", and "Menteez" refer to Spherical-Lab Innovation Private Limited. "You" refers to the parent or lawful guardian who holds an account. "Your child" refers to a student whose profile you create and control.

This policy explains what personal data we collect about you and your child, why we collect it, how long we keep it, who we share it with, and the rights you can exercise.

It applies to the Menteez website, the Menteez mobile applications, and all related services.

Menteez is a learning-support platform. Only adults may hold an account. Children access the platform exclusively through a profile that you create, control, and can delete at any time.

Because we process children's personal data, this policy carries obligations beyond those that apply to an ordinary service. Those are set out in §8, Your child's personal data, which we encourage you to read in full.

We process personal data based on your consent, under section 7(a) of the DPDP Act.

Before we collect anything, we show you a notice describing what we will process and why, and ask you to consent. You give consent separately for distinct purposes. You are never asked to accept everything in a single bundled tick-box.

You may withdraw any consent at any time, from Settings, as easily as you gave it. Withdrawal does not affect processing that already took place lawfully. Where a consent is essential to providing the service, withdrawing it will end the service, and we will tell you clearly before you confirm.

We do not rely on any "legitimate use" or business-necessity ground to process a child's personal data. Consent is the only basis we use.

The DPDP Act places specific obligations on anyone processing children's data. This section explains how we meet them.

We use strictly necessary cookies only, to keep you signed in and to keep your session secure. These cannot be switched off without preventing you from using the service.

We do not use advertising or cross-site tracking cookies. Our mobile applications do not use advertising identifiers.

You can control cookies through your browser settings. Blocking strictly necessary cookies will prevent you from signing in.

Each provider is bound by a data-processing agreement requiring them to process data only on our instructions and to protect it appropriately.

We may also disclose personal data where we are legally required to, for example in response to a lawful order from a court or a government authority. Where we are permitted to tell you, we will.

If our business is ever transferred to another entity, we will give you notice before your data moves, and your rights under this policy will continue.

All personal data we hold, yours and your child's, is stored on servers located in India. None of it leaves the country.

Your account data, your child's profile, worksheets, results, consent records, and technical logs are stored in the Mumbai region of Amazon Web Services. Payment data held by Razorpay is stored in India, as required by the Reserve Bank of India.

We transfer no personal data outside India, for any purpose. There are no exceptions to this, and there is nothing further to disclose under section 16 of the DPDP Act.

When you delete your account, we place it in a 30-day grace period during which you can change your mind. After that, we permanently erase your data.

Two categories survive erasure because the law requires it: payment records, which we retain with your identity detached, and consent and audit records, which exist to prove we handled your data properly.

Most rights are exercisable directly in the app:

• See and correct your data: Settings → Profile
• Download everything: Settings → Export Data. We prepare a machine-readable file and email you a secure link, valid for 7 days
• Delete your account and all your child's data: Settings → Delete Account
• Manage your consents: Settings → Consents, where each consent can be withdrawn individually

You may also write to our Grievance Officer (§17).

Our timelines: we acknowledge every request promptly and complete it within 30 days. Complaints to the Grievance Officer are answered within 7 days. If a request will take longer, we tell you why and when to expect completion.

We may need to verify your identity before acting on a request. We will not use information provided for verification for any other purpose.

You can delete your account at any time from Settings → Delete Account, on the web and in the mobile applications. No email, phone call, or explanation is required.

When you do:

• Your account and your child's profiles are immediately deactivated and access ends.
• Any active subscription is cancelled and will not renew.
• A 30-day grace period begins. You can restore the account by following the link in the confirmation email.
• After 30 days, we permanently erase your data and email you to confirm.

Payment and consent records are retained as described in §12.

• All data in transit is encrypted using TLS.
• All personal data at rest is encrypted using keys we control.
• Your child's data is encrypted at rest and is never written to our application logs.
• Your PIN is stored only as a cryptographic hash and is never recoverable in readable form.
• Access to personal data by our staff is restricted by role, granted only where necessary, and recorded.
• Consent and audit records are held in a form that cannot be altered or deleted.

We monitor for unauthorised access and maintain a documented incident-response procedure.

In the event of a personal data breach, we will notify the Data Protection Board of India and every affected person as soon as practicable, in clear language, describing what happened and what we are doing about it.

No system is perfectly secure, and we do not claim otherwise. If you believe your account has been compromised, contact us immediately (§17).

If you have a question, concern, or complaint about how we handle personal data, contact our Grievance Officer. This is the route the DPDP Act gives you, and we take it seriously.

We respond to every grievance within 7 days.

Please include the email address on your account and enough detail for us to investigate.

If you are not satisfied with our response, or we do not respond within 7 days, you may complain to the Data Protection Board of India, established under the DPDP Act, in the manner prescribed by the Board.

Raising a grievance with us first is required before approaching the Board, so please allow us to put things right.

If we change how we handle personal data, we will update this policy and change its version number.

For any change that materially affects you or your child, we will notify you by email and in the app before it takes effect, and where the law requires it, ask for fresh consent. We will not apply a new purpose to previously collected data without asking you first.

Previous versions are available on request.

This policy is published in English. On request, we will provide it in Hindi or any other language listed in the Eighth Schedule to the Constitution of India. Write to the Grievance Officer (§17) and we will arrange it.

Only an adult can create a Menteez account. You must be 18 or older, and you must be the parent or lawful guardian of every child you add.

A child cannot sign up for Menteez by themselves. Children do not have their own login. They use a profile that you create and control from your account.

Before we save anything, we show you a short notice and ask you to make three separate confirmations. They are separate on purpose. Bundling them into a single "I agree" box would not be real consent, and we do not do it.

• You are the parent or lawful guardian of the children you are about to add.
• You consent to us processing your and your children's personal data for the purposes described.
• You accept our Terms & Conditions.

None of these boxes is ticked in advance. You have to tick each one yourself. If you tick only some of them, we do not proceed.

The notice you see is short and in plain language. It tells you:

• What we collect about you: your name, date of birth, email, phone number and location.
• What we collect about your child: their name, date of birth, board, class, and school details, and optionally information about outside tuition and a profile photo.
• What we use it for: to match worksheets to your child's board and class, to show you their progress, to bill you, and to help you when something goes wrong.
• Who we share it with: only the two service providers we need to run Menteez, both in India. They are named in our Privacy Policy.
• What we never do: we never use your child's data for advertising, we never use it to train an AI model, and we never sell it. See our AI Usage & Responsible AI Policy.
• Your rights, and how to reach our Grievance Officer.

You can read the full Privacy Policy before you decide. Nothing is saved until you have made your three confirmations.

We verify that a real adult is making the decision by:

• Verifying your email address.
• Verifying your phone number with a one-time code.
• Recording your date of birth, which must show you are 18 or older.
• Recording your explicit attestation that you are the parent or lawful guardian.

We keep a record of that attestation. Falsely claiming to be a child's parent or guardian is a serious matter, and the record exists so that it can be traced.

We deliberately do not ask you to upload identity documents. Collecting a copy of your ID would mean holding far more sensitive data about you than the service needs, and it would not make the check meaningfully stronger.

When you consent, we write a record that includes:

• Which consent you gave, and for which child
• The date and time
• The exact version of the notice you were shown
• Your IP address and browser information, as evidence that the consent happened

This record is write-once. We cannot edit it, and neither can anyone at Menteez. That protects you: it means we can always show what you actually agreed to, and we can never quietly rewrite it.

We are required to keep this evidence even after you close your account, though we reduce it to an anonymous record once your data is erased.

You can withdraw your consent at any time, and it is as easy as giving it. Go to Settings → Privacy and switch off the consent you want to withdraw.

Here is what happens:

• Withdrawing consent for a child's data means we can no longer provide the service to that child. Their profile and worksheets are removed following our Account Deletion Policy.
• Withdrawing consent for your own account data means closing your account.

Withdrawal is not retrospective. It stops future processing. It does not undo what was lawfully done while your consent was in place.

A few records survive withdrawal because the law requires it: payment and tax records, and our audit trail. We keep these with your identifiers separated where we can. This is explained in our Data Retention Policy.

If you cancel during your trial, you are not charged. See our Refund & Cancellation Policy.

We ask for fresh consent, rather than relying on the consent you already gave, whenever:

• We want to use your or your child's data for a new purpose. A new purpose needs a new consent, not a quietly updated policy page.
• You add another child. Each child is a separate person with separate rights.
• We make a material change to what we collect or who processes it.

When we change the notice, we give it a new version number and keep a copy of the old one, so the record of what you agreed to stays accurate.

Children do not consent to anything, because in law they cannot. But we still tell them, in language suited to their age, what Menteez does with their work. That is in our Child Privacy Policy.

A child's profile can only reach their own assigned worksheets. It cannot reach your account settings, your billing information, or another child's work.

Write to our Grievance Officer:

We respond within 7 days. If you are not satisfied, you may complain to the Data Protection Board of India. We would rather you came to us first.

For anything else, write to support@menteez.in.

Menteez is used by children. That places a higher duty on us than an ordinary service carries, and we think you should be able to read what we do with your child's information without working through a long legal document.

This is that shorter document. It is written for parents and guardians, and it covers only children. Our full Privacy Policy covers everything, including your own information as an account holder. Where the two overlap, they say the same thing. This one just says it in fewer words.

Menteez (menteez.in and its mobile applications) is owned and operated by Spherical-Lab Innovation Private Limited, a company incorporated under the Companies Act, 2013 (CIN: U74909OD2025PTC048511), with its registered office at Software Technology Park of India, Sector-5, Rourkela, Odisha 769002, India.

Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for your child's personal data. Section 9 of that Act sets specific rules for children's data. This document explains how we follow them.

A child cannot register for Menteez. There is no way for a child to create an account, and no sign-up path that a child can complete alone.

You create the account. You create your child's profile inside it. You control both.

Before you create a profile for your child, we show you a notice explaining what we will collect and why. You then confirm two separate things:

• That you are the parent or lawful guardian of the child you are about to add.
• That you consent to us processing that child's personal data for the purposes described.

These are separate confirmations, not a single bundled tick-box, and neither is ticked for you in advance.

We record your confirmation along with the date, the time, and the version of the notice you were shown. Your account is tied to a verified email address and phone number, and where you subscribe, to a payment method in your name.

You can withdraw your consent at any time from Settings.

We collect the minimum needed to give your child work at the right level.

We collect:

• First and last name
• Date of birth
• Board and class
• The worksheets assigned, the answers given, the score, and the time taken

We collect these only if you choose to provide them:

• School name and location, where your child is enrolled through a partner school or institution
• Whether your child attends outside tuition, and the name of that institute
• A profile photo

We do not collect:

• Your child's gender
• Your child's home address
• Your child's phone number or email address
• Any information about health, religion, caste, or community
• Your child's location
• Anything from your child's contacts, photo library, microphone, or camera

Three things, and nothing else:

• To choose the right work. Board, class, and date of birth decide which questions your child sees.
• To show you how your child is doing. Scores, time taken, and worksheet history are what your dashboard displays.
• To keep the service working and secure.

We do not use your child's information for any other purpose. If that ever changes, we will tell you and ask for your consent again before it does.

This list is a commitment, not a description of our current settings.

• We will never show your child advertising. We carry no advertising software of any kind.
• We will never track your child's behaviour. We do not measure how they move through the app, how long they hesitate on a question, what they scroll past, or when they are active.
• We will never record your child's screen or session. We use no session-recording software anywhere in the product.
• We will never build a profile, cohort, or audience segment from your child's data.
• We will never use your child's data to train artificial intelligence models.
• We will never sell your child's data or share it so that anyone else can market to them.
• We will never process your child's data in a way likely to harm their wellbeing.

The simplest way to guarantee we are not watching your child is to have nothing installed that could. That is the choice we have made.

This is the question we get asked most, so we want to answer it directly.

Our questions are written in advance, in bulk, organised by board, class, subject, and difficulty. Every question is checked by qualified teachers before it can reach a child.

No information about your child is used to create questions, and no information about your child is ever sent to an artificial-intelligence service. When your child opens a worksheet, we are choosing from a library that already exists. We are not generating something from their personal details.

The only thing that decides which questions your child sees is their board, their class, the subject you picked, and the difficulty you picked.

From your account, at any time, you can:

• See everything we hold about your child
• Correct anything wrong
• Download a copy of it in a machine-readable file
• Delete your child's profile and all of their data
• Withdraw any consent you have given

You exercise these rights on your child's behalf, as their parent or guardian.

• Your child's personal data is stored in India and does not leave it.
• It is encrypted while it travels and while it is stored.
• It is never written into our application logs.
• Access by our staff is restricted by role, granted only where genuinely needed, and recorded.
• Our record of your consent is stored in a form that cannot be altered or deleted.

We keep your child's information for as long as you have an account with us, and delete it 90 days after your subscription ends, unless you delete it sooner.

If you delete your account, there is a 30-day grace period in which you can change your mind. After that, the deletion is permanent.

You can delete a child's profile, or your whole account, from Settings. No email, phone call, or explanation is needed.

When the grace period ends, we permanently erase your child's profile, worksheets, answers, results, and any photo you uploaded.

Two things survive, because the law requires it: records of payments, which are kept with your identity detached, and the record that you gave consent, which exists to prove we handled your child's data properly. Neither contains your child's schoolwork.

This part is for you, not your parent.

Menteez shows you worksheets your parent has given you. When you answer them, we save your answers, your score, and how long you took, so your parent can see how you are getting on. That is the whole point of the app.

We do not watch anything else you do. We do not record your screen. We do not show you adverts. We do not give your information to anyone else.

If something in the app worries you, or you think something about you is wrong, tell your parent or guardian. They can see everything we hold about you, fix it, or delete it. If you would rather tell us directly, you can write to us at the address in the next section, and we will help.

If you have a question or a complaint about how we handle your child's data, contact our Grievance Officer.

We respond within 7 days.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India, established under the DPDP Act. We ask that you come to us first so that we have a chance to put things right.

If we change how we handle children's data, we will update this document and its version number, and tell you by email and in the app before the change takes effect. Where the law requires it, we will ask for your consent again.

We will not apply a new purpose to information we have already collected about your child without asking you first.

This document covers children only. For everything else, including what we collect about you, who our service providers are, and the full list of your rights, see our Privacy Policy.

Version v1.0, effective 23-07-2026