How Techwave Academy uses your personal data
The short version. We collect only what we need to run free courses for you. Learners under 18 need a parent or guardian's approval. We never show ads, never sell data, and never track or profile children. You can download or delete your data, or change your choices, at any time from Dashboard → Privacy & data. Questions go to our Grievance Officer, who replies within 15 working days.
This notice is also available in Hindi on request — write to grievance@techwaveacademy.com. यह सूचना हिंदी में भी उपलब्ध है — ईमेल करें।
1. Who we are
Techwave Academy (techwaveacademy.com) is run by Indrashikha Educational (OPC) Private Limited, which decides how and why your personal data is used. Under the DPDP Act we are the Data Fiduciary.
- CIN: U62011UP2018OPC104206 · GSTIN: 09AAECI8731P2ZU
- Registered office: Mishirpur, Surwa, Fatanpur Raniganj, Patti, Pratapgarh, Uttar Pradesh 230306, India
- Grievance Officer: Amrrish Anand — grievance@techwaveacademy.com, +91 70339 76796
- General contact: contact@techwaveacademy.com
Some learners join after buying a course on indrashikha.in. That site is run by the same company.
2. What we collect and why
Each item below is used only for the purpose next to it.
| Data | When we get it | What we use it for |
|---|---|---|
| Full name, username, password (stored only as a one-way hash), optional phone number | Sign-up | Creating your account and signing you in. Your name is never shown in full to other learners. |
| Date of birth | Sign-up (or a one-time check for older accounts) | Working out whether a parent or guardian must approve the account, and applying the extra protections for under-18s. |
| Parent or guardian's name and email | Sign-up, learners under 18 | Asking for and recording their consent, and contacting them about the child's account. |
| Contact email and a one-time 6-digit code | When you first open a course, and before a certificate download | Sending and verifying your certificate. The code is deleted within 24 hours of expiring. |
| Lesson progress (which lessons you completed, and when) | As you learn | Showing your progress, issuing certificates and, only if you opt in, the leaderboard. |
| Certificate details (name to print, class, school) | When you finish a course | Printing your certificate. Anyone you give the certificate link to can view it. |
| Consent records (which choices you or your parent made, when, and against which notice version) | Whenever consent is given, changed or withdrawn | Proving what was agreed, as the law requires. |
| What you type or say into AI features (questions, code, answers, voice recordings, image or story ideas) | Only when you use an AI feature you have switched on | Giving you the answer, score or picture. We do not store it; see AI features. |
| Community posts and replies | When you post | Showing them to other signed-in learners, with a masked name (first name + initial, or your nickname). |
| Name, email and phone typed into an "I'm interested" or course-interest form | When you send the form | Replying to you. Nothing else. |
| Usage events (pages opened, lessons started) | As you use the site | Understanding which lessons work. For verified adults these are linked to the account; for children and anyone whose age we have not confirmed they are anonymous counts only. We do not store IP addresses or device details with them. |
| Network address (IP) in short-lived anti-abuse counters, and platform security logs | Automatically | Stopping spam, password guessing and attacks. |
| Grievances and rights requests | When you contact us | Handling your request and showing we met the deadline. |
| Nominee's name and email (adults, optional) | When you add one | Letting that person exercise your rights if you die or become unable to. |
| Name, email, phone and purchased courses from indrashikha.in | After a purchase there | Setting up your account with the courses you bought. Payments are handled on indrashikha.in; no card or bank details reach this site. |
In your browser we keep your sign-in session, cached progress and an invite code in local storage. We use no advertising or third-party tracking cookies.
We do not sell personal data, show advertising, build marketing profiles, or use your data to train AI models.
3. Children and teenagers (under 18)
- Parent or guardian approval first. When someone under 18 signs up, we email the parent or guardian they name. The account opens only after that adult follows the link, confirms they are the parent or lawful guardian and an adult, and chooses what to allow. If nobody approves within 7 days, the account and everything entered is deleted.
- No tracking or behavioural monitoring. A child's activity is never linked to their identity in our analytics, never put into activity reports, and never used to profile them. The AI Kids Lab sends us no analytics at all.
- No advertising, ever, and no targeted content based on behaviour.
- No public full names. Leaderboards are opt-in (only with the parent's consent) and show a nickname or first name + initial.
- AI features are off unless the parent switches them on. A child can switch features off; switching one on sends the parent a fresh approval email.
- Invite-a-friend rewards are not offered to children.
- The AI Kids Lab (ages 3–10) only works when a parent-approved account, or an adult such as a parent or teacher, is signed in on that device.
A parent or guardian can use every right in section 8 on the child's behalf: write to grievance@techwaveacademy.com from the email they gave us, or sign in with the child.
When a school enrols its students, we apply the same protections to them.
4. Your choices (consent)
We ask separately for each purpose. Only the first is needed to have an account; the rest are off unless you (or, for a child, the parent) switch them on.
| Purpose | What it switches on | |
|---|---|---|
| Account and learning | Your account, lessons, progress, certificates, community | Required |
| AI features | AI tutor chat, AI scoring of answers and spoken English, AI images and stories | Optional |
| Leaderboard | A masked name and points on course leaderboards | Optional |
| Course updates | Occasional emails about new courses | Optional |
You can withdraw any choice at any time from Dashboard → Privacy & data; it is as easy as giving it. Withdrawing does not affect what was done before. Withdrawing "Account and learning" means deleting the account.
Accounts created before 30 September 2026 are asked once to confirm their date of birth and choices. Until they do, we treat them like children for analytics (anonymous only) and keep only the core service and AI tutor working.
5. AI features
If you switch on AI features, what you type, the lesson text on screen, code you submit for scoring and spoken-English recordings are sent to Microsoft Azure OpenAI Service and Azure AI Speech to produce the answer or score. Before sending, we remove email addresses, phone numbers and your own name. We do not store your questions or recordings; we keep only a daily count of AI-tutor questions to apply a usage limit, deleted after 30 days. Microsoft processes this data for us under its online services terms, which state that it is not used to train its models. AI answers can be wrong — see our Terms.
6. Who handles your data for us, and where
We use these service providers (Data Processors) only to run the site. They act on our instructions.
| Provider | What they do | Location |
|---|---|---|
| Microsoft Azure — Static Web Apps and Functions | Hosting the website and its server code | Microsoft data centres (global edge network) |
| Microsoft Azure — Storage (Tables and Blobs) | Storing accounts, progress, consent records, certificates | Microsoft data centres |
| Microsoft Azure OpenAI Service | AI tutor, answer scoring, images, stories | Microsoft data centres, currently including the United States (East US 2) |
| Microsoft Azure AI Speech | Scoring spoken-English recordings; lesson read-aloud audio | Microsoft data centres, currently the United States (East US 2) |
| Microsoft Azure Communication Services (Email) | Sending parent-approval, verification-code and grievance emails | Microsoft data centres |
| Microsoft Azure Logic Apps | Running scheduled jobs (activity totals, data-deletion sweep) | Microsoft data centres (East US 2) |
| Google (Gmail) | Hosting the mailbox that receives email sent to grievance@techwaveacademy.com and contact@techwaveacademy.com, and copies of grievance form submissions. Holds your name, email, phone (if given), your message and our replies. | Google data centres, which may be outside India |
| Compiler Explorer (godbolt.org) | Compiling and running C/C++ code you run in a lesson. Only the code is sent; please don't put personal details in code. | Outside India |
Your browser also loads fonts and code libraries from Google Fonts, cdnjs (Cloudflare) and jsDelivr. These services see your IP address when your browser fetches a file, as with any website; we send them no personal data.
Some processing happens outside India. The DPDP Act allows this except to countries the Government restricts; none of our providers' locations is restricted today. If you join our WhatsApp community, WhatsApp's own terms apply to what you share there.
7. How long we keep it
| Data | Kept for |
|---|---|
| One-time email codes | Deleted within 24 hours of expiry |
| Accounts waiting for parent approval | Deleted after 7 days if not approved |
| Learner accounts and learning data | Until you delete the account. Accounts unused for 2 years are deleted, after an email warning 48 hours before. |
| Interest-form and course-interest requests | 12 months |
| Raw usage events (adults only) | 90 days; after that only totals remain. Children's events are never linked to them. |
| Anti-abuse counters and AI usage counts | 30 days |
| Security logs | 1 year |
| Payment records | None held on this site. Records of purchases made on indrashikha.in are kept there for 8 years, as tax law requires. |
| Consent records | For as long as the law requires us to prove consent. When an account is deleted, its identifier is removed from these records. |
| Grievances and rights requests | 3 years after closure |
A certificate is deleted with the account; its link then stops working.
8. Your rights and how to use them
| Right | How |
|---|---|
| Access: a summary and a copy of your data, and who we shared it with | Dashboard → Privacy & data → Download my data. Our list of providers is in section 6. |
| Correction and updating | Use the grievance form (category "Correction") or email us. Certificate details are asked again before each new certificate. |
| Erasure | Dashboard → Privacy & data → Delete my account. This removes your account, progress, certificates, posts and activity from every table we use. |
| Withdraw consent | Dashboard → Privacy & data → Manage consent. |
| Nominate someone to act for you if you die or become unable to | Dashboard → Privacy & data → Nominate someone (adults). |
| Grievance redressal | Grievance form or grievance@techwaveacademy.com. We reply within 15 working days. |
We may ask you to confirm it is really you (for example, by signing in, or replying from the email on the account) before acting.
9. Grievance Officer and complaints
Amrrish Anand, Grievance Officer, Indrashikha Educational (OPC) Private Limited
Phone: +91 70339 76796
Email: grievance@techwaveacademy.com (you can also write to contact@techwaveacademy.com)
Post: Mishirpur, Surwa, Fatanpur Raniganj, Patti, Pratapgarh, Uttar Pradesh 230306, India
We acknowledge every request with a ticket number and respond within 15 working days. If you are not satisfied, you can complain to the Data Protection Board of India under section 13 of the DPDP Act. Please contact us first; the Board expects that.
10. Security and data breaches
We use HTTPS everywhere, store passwords only as salted PBKDF2 hashes, never email or display passwords, limit admin access to named staff, and keep IP addresses and device details out of analytics. If a personal-data breach happens, we will tell affected users and the Data Protection Board of India without delay, send the Board a detailed report within 72 hours, and report to CERT-In within 6 hours, as the law requires.
11. Changes to this notice
If we change how we use personal data, we will update this page, give it a new version number and, where the change needs fresh consent, ask you (or your parent) again before it applies.