Scoreyo legal
Privacy Notice
A clear account of the personal data Scoreyo uses, why we use it, who receives it, and the choices available to you.
Effective and last updated: September 25, 2026
1. Scope and responsibility
This notice applies to the Scoreyo website, mobile applications, learning tools, community features, subscriptions, and support services (together, the Service). Scoreyo is the data fiduciary responsible for personal data processed through the Service. A third-party service you choose to open is governed by that provider's own notice.
Privacy and grievance contact: support@scoreyo.in, Bengaluru, Karnataka, India. Send account-specific requests from your registered email address so we can verify and protect the account.
2. Access and account data
You may view public pages without an account. We receive ordinary technical request data when you do so. An account is required for personalized learning, saved progress, purchases, uploads, community participation, and other signed-in features.
Registration and sign-in may require your name, email address, verification records, and, if selected, a Google account identifier and profile image. Optional profile fields are identified as optional. You are responsible for keeping account information accurate.
3. Personal data we collect
The data depends on the features you use:
- Account and profile: name, email, optional age, phone number, location, school or coaching institute, username, avatar, language, exam, study goals, preferences, and authentication or session records.
- Learning activity: attempts, answers, scores, time and pace, mastery, weak topics, error patterns, study plans, flashcard reviews, game activity, assessments, streaks, reminders, and feature-usage counts.
- Content you provide: Tutor prompts and conversations; documents, images and extracted text; lecture audio, transcripts and notes; flashcards; posts, answers, reports, votes, and group content.
- Payment and subscription: plan, amount, currency, status, invoice or transaction information, and payment-provider identifiers. Scoreyo does not receive or store your full card number, CVV, UPI PIN, or banking credentials.
- Technical and security: IP address and request metadata made available by infrastructure, browser or device information, access times, pages and features used, searches, clicks, rate-limit events, security events, and diagnostic logs.
- Support: correspondence, attachments, reports, and information supplied with a support or privacy request.
Do not upload Aadhaar numbers, financial credentials, health information, confidential examination material, or another person's sensitive data unless a feature expressly requests it and explains why.
4. How personal data is collected
- From you: when you register, complete a profile, answer questions, upload material, communicate, buy a plan, publish content, or request support.
- Automatically: from your browser, device, session, and interaction with the Service, including necessary cookies and security logs.
- From providers: for example, Google sign-in details you authorize, payment status from Razorpay, and delivery status from email providers.
- Derived learning data: progress, mastery, recommendations, review queues, difficulty adjustments, and similar inferences generated from your activity.
5. Purposes and legal grounds
We process personal data only for a lawful purpose, including to:
- create, authenticate, secure, and support your account;
- provide requested learning, community, upload, Tutor, payment, and support features;
- save progress and personalize difficulty, explanations, recommendations, and study plans;
- process purchases, activate access, keep transaction records, and address refunds or disputes;
- send OTPs, receipts, security alerts, legal notices, and communications you request;
- operate, debug, protect, measure, and improve the Service; prevent misuse and enforce our Terms;
- comply with legal, accounting, tax, security, and regulatory obligations.
The applicable ground may be your consent, performance of a service you requested, compliance with law, or another ground permitted by applicable law. Where processing depends on consent, you may withdraw it through the relevant setting or by contacting us. Withdrawal does not invalidate earlier lawful processing, but the affected feature may stop working.
6. AI-assisted features
Scoreyo uses AI services to generate or explain study material, answer Tutor questions, create quizzes and flashcards, search content, produce study modes or visuals, transcribe lecture audio, and generate notes. Depending on your request, we may send a prompt, selected study context, extracted document text, image, audio, transcript, or minimized learning snapshot to OpenRouter and its model providers, Google AI services, or Groq.
Arjuna can use activity within Scoreyo—including the current topic or page, recent attempts, mistakes, strengths, weak areas, learning goals, and selected Tutor Sources—to personalize an answer. This automatic personalization is part of the service when you use Arjuna; it is intended to make the response relevant to your course and progress rather than provide a generic answer.
We aim to send only data needed for the request and do not intentionally include direct identifiers in personalized Tutor context. We use provider settings that restrict model-provider data collection where supported, but handling and retention can differ by provider and feature. Do not include unnecessary personal or confidential information in an AI prompt or upload.
AI output can be incomplete or wrong. Recommendations affect your learning experience only. Scoreyo does not use AI output to make decisions about admission, employment, credit, insurance, healthcare, or access to an essential service.
8. Public and shared content
Community posts, answers, display names, avatars, votes, and group content are visible according to the audience shown by the feature. Content made public or shared through a public link may be viewed and copied by others. Review the audience before publishing.
Tutor threads, private sources, documents, and lecture recordings are not made public merely because you save them. A clearly labelled sharing action is required. Removing public content may not remove copies already saved or lawfully shared by others.
10. International processing
Some providers or their subprocessors may process data in India or other countries. Provider locations and routing can change. We use contractual and technical safeguards appropriate to the service and comply with applicable restrictions on cross-border processing. We do not represent that every item is stored only in one country.
11. Retention, account deletion, and backups
Tutor Deletion Controls
We retain account data, learning records, and user content while your account is active and for as long as needed to provide the relevant feature. Short-lived security, session, cache, and diagnostic records expire or are rotated according to their operational purpose. Payment, tax, fraud, security, dispute, and compliance records may be retained for the period required by law or a documented legal need.
You can delete a Tutor source or an entire Tutor thread using its available controls. Deleting a source removes that source from future retrieval and citations. Answer text previously derived from that source remains in the conversation until you delete the associated thread, because the answer is stored as part of the conversation record.
Where controls are available, you can delete individual Tutor threads, sources, documents, recordings, notes, flashcards, or shared content. To delete the account, use the in-product control or email support@scoreyo.in from the registered address. The in-product flow removes private uploads and learning activity, revokes active sessions, and de-identifies the profile. Account deletion is irreversible and does not itself cancel an external payment mandate.
After verification, we erase or irreversibly de-identify data no longer required. Protected backups and caches may remain inaccessible until their normal deletion cycle completes. Data required for legal compliance, security, fraud prevention, or an active dispute may be isolated and retained only for that purpose.
12. Your choices and rights
Subject to identity verification, applicable law, and lawful retention requirements, you may:
- ask for a summary of personal data being processed and relevant categories of recipients;
- correct, complete, or update inaccurate personal data;
- request erasure of personal data that is no longer required;
- withdraw consent and change optional communication or feature preferences;
- raise a grievance and receive a response;
- nominate another person to exercise applicable rights in the event of death or incapacity.
Email support@scoreyo.in with the subject “Privacy request” and explain what you need. We may request limited information to verify identity and protect the account. If we refuse or limit a request, we will explain the lawful reason.
13. Children
Under India's Digital Personal Data Protection Act, a child is a person under 18. Scoreyo does not currently provide a verified parental-consent flow. An individual under 18 must not create an account or submit personal data; a parent or lawful guardian should contact us before any proposed use.
We do not knowingly track or behaviourally monitor children or direct targeted advertising to them. If we learn that a child's data was provided without legally valid consent, we will restrict the account and erase the data unless retention is required by law. Parents and guardians may contact support@scoreyo.in.
14. Security and personal-data breaches
We use safeguards appropriate to the nature and risk of the data, including HTTPS in transit, access controls, private storage for user files, server-side authorization, rate limiting, and hashed or time-limited authentication tokens where applicable. We review access and provider arrangements as the Service changes.
No internet service can promise absolute security. If a personal-data breach requires notice under applicable law, we will notify affected users and the relevant authority in the required form and manner. If you believe your account or data is at risk, contact us promptly and change any affected credentials.
15. Privacy grievances and escalation
Send complaints to support@scoreyo.in with the subject “Privacy grievance.” Include the registered account email, a concise description, relevant dates, and the resolution requested. We will acknowledge the grievance, investigate it, and respond within the period required by applicable law.
Where the relevant provisions are in force, you may escalate an unresolved grievance to the Data Protection Board of India through its official filing mechanism. This notice does not limit a right or remedy available under consumer, data-protection, or other applicable law.
16. Applicable framework and changes
This notice is designed around India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their provisions come into force. Official materials are available from the Ministry of Electronics and Information Technology.
We may update this notice when the Service, providers, or law changes. We will highlight material changes in the Service or through an appropriate account channel before they take effect where required. The date at the top identifies the current version.
Questions or requests: support@scoreyo.in. For account-specific requests, write from your registered email address.