Privacy Policy
Privacy Policy for skovo educations
Effective Date: October 24, 2025 Last Updated: October 24, 2025
1. Introduction
1.1 Our Commitment to Your Privacy
Skovo educations is fundamentally committed to creating a safe, secure, and effective learning environment for our students, educators, and all members of our community. We take the protection of your personal data seriously and operate on the principle that your trust is paramount to our mission. This Privacy Policy is built on the core tenets of lawfulness, fairness, and transparency. As a Data Fiduciary, we recognize our duty to handle your information with the utmost care and responsibility, ensuring that our data practices are designed to protect your privacy from the outset and throughout your entire learning journey with us. We collect and process your data for one primary reason: to provide and continuously improve a world-class educational experience.
1.2 Who We Are and the Scope of This Policy
This Privacy Policy is issued by skovo educations ("we," "us," or "our"). It describes how and why we might collect, store, use, and share ("process") your information when you use our services ("Services"). This includes your interactions with our websites, mobile applications, learning management systems (LMS), and any other platform or service we own or operate that links to this policy.
This policy applies to all individuals who interact with our Services, including:
-
Registered users, such as students, educators, and parents or legal guardians.
-
Representatives from our partner educational institutions.
-
Visitors to our public-facing websites ("you").
1.3 Definitions of Key Terms
To ensure this policy is clear and unambiguous, we define key terms as follows, consistent with leading global data protection regulations :
-
Personal Data: Any information relating to an identified or identifiable individual. This includes not only direct identifiers like your name and email address but also indirect identifiers such as your IP address, cookie IDs, location data, and learning analytics data when it can be linked back to you.
-
Sensitive Personal Data / Special Category Data: A subset of Personal Data that is subject to a higher level of protection due to its sensitive nature. This may include information related to racial or ethnic origin, religious beliefs, health data, or other categories as defined by applicable laws like the EU's General Data Protection Regulation (GDPR) and the California Privacy Rights Act (CPRA). We only process such data when there is a clear legal basis and necessity to do so.
-
Processing: Any operation or set of operations performed on Personal Data, whether automated or not. This includes collection, recording, organization, structuring, storage, adaptation, retrieval, use, analysis, disclosure by transmission, sharing, and erasure or destruction.
-
Data Fiduciary / Data Controller: The entity that, alone or jointly with others, determines the purposes and means of the processing of Personal Data. For the purposes of this policy, skovo educations is the Data Fiduciary (under India's Digital Personal Data Protection Act) and Data Controller (under GDPR). The term "Fiduciary" reflects the relationship of trust we have with you regarding the protection of your data.
-
Data Processor: A third-party entity that processes Personal Data on behalf of the Data Fiduciary/Controller and under our explicit instructions.
-
Data Principal / Data Subject: The individual to whom the Personal Data relates. In the context of this policy, this is you.
2. The Information We Collect and How We Collect It
To provide our Services effectively, we collect information in several ways. We are committed to the principle of data minimization, meaning we only collect what is relevant and necessary for the specified purposes outlined in this policy. This section provides a transparent overview of what we collect and from where, fulfilling your "Right to Know" under various data protection laws.
2.1 Information You Provide Directly to Us
-
Account and Profile Information: When you register for an account or create a profile, we collect information such as your full name, email address, a password, your date of birth (for age verification purposes), your school or affiliated institution, and your designated role (e.g., student, teacher, parent). You may also choose to provide additional information, such as a profile picture.
-
User-Generated Content: Our Services are interactive, and we collect the content you create and submit. This includes, but is not limited to, homework assignments, quiz and exam responses, essays, forum posts, comments, peer-to-peer feedback, and personal notes you take within the platform.
-
Communications: When you contact us for customer support, provide feedback, participate in a survey, or otherwise communicate with us, we collect the information you provide in your communications, including your contact details and the content of your messages.
-
Payment Information: If you purchase a subscription or other paid service, we will require you to provide payment information, such as your credit card details and billing address. This information is collected and processed directly by our third-party payment processors, and we do not store your full payment card information on our servers.
2.2 Information We Collect Automatically
-
Learning and Usage Data (Learning Analytics): This category of data is central to the educational value of our platform. We automatically log information about your interactions with the Services. This is not for surveillance, but to understand and optimize the learning process for you and other users. The collection of this granular data is framed not as an optional feature but as a core component of the educational service we provide, enabling us to deliver personalized feedback and improve course design. This data includes:
-
Content Interaction: Which courses and modules you access, how long you spend watching lecture videos or reading materials, and whether you revisit content before assessments.
-
Activity and Performance: When you start and complete assignments or quizzes, your scores and grades, the number of attempts, and your progress through the curriculum.
-
Engagement Metrics: How often you log in, the timestamps of your activity, the frequency and content of your posts in discussion forums, and your interactions with instructors and peers.
-
-
Device and Technical Information: We collect technical information from your browser and device, including your IP address, browser type and version, operating system, device identifiers (such as IDFA/AAID), and general geographic location (country or city level) derived from your IP address.
-
Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to operate and improve our Services. These technologies help us authenticate your session, remember your preferences, analyze platform traffic and trends, and understand the effectiveness of our communications. We categorize our cookies as essential, functional, analytics, and marketing. For detailed information on our use of these technologies and your choices regarding them, please see our separate Cookie Policy.
2.3 Information from Third Parties
-
Educational Institutions: If you are using our Services through a school, district, or other educational institution, that institution may provide us with Personal Data about you to create and provision your account. This typically includes student roster information such as your name, student ID number, and institutional email address. In such cases, we act as a "school official" under the U.S. Family Educational Rights and Privacy Act (FERPA), processing the data on the school's behalf for legitimate educational interests.
-
Third-Party Integrations: If you choose to register or log in to our Services using a third-party account (such as Google or Microsoft), we receive certain profile information from that service. The information we receive depends on your privacy settings with that third-party service but typically includes your name, email address, and profile picture.
3. How and Why We Use Your Information (Purpose and Legal Basis)
We are committed to the principle of purpose limitation, meaning we only process your Personal Data for specified, explicit, and legitimate purposes. We will not process your data in a manner that is incompatible with these purposes. For users in jurisdictions like the EEA and India, we are also required to identify a valid legal basis for each processing activity.
3.1 Our Purposes for Processing
-
To Provide, Operate, and Maintain the Services: We use your information to create your account, authenticate your identity, provide access to course materials, track your learning progress, and deliver the core functionality of our platform.
-
To Personalize and Improve the Learning Experience: The learning analytics data we collect is crucial for tailoring the educational experience. We use it to identify areas where students may be struggling, recommend supplementary materials, provide personalized feedback, and allow instructors to adjust their teaching strategies. This data-driven approach is a fundamental feature of our educational methodology.
-
For Communication and Support: We use your contact information to send you important administrative messages about your account, security alerts, and updates to our policies. We also use it to respond to your support requests and inquiries.
-
For Research and Development: To improve our Services, we analyze aggregated and de-identified usage data to understand learning trends, evaluate the effectiveness of our content, and develop new features and pedagogical tools. We will not use identifiable student data for these purposes without explicit consent or as permitted by law.
-
To Ensure Safety, Security, and Legal Compliance: We process data to protect the security and integrity of our platform, prevent fraud and abuse, enforce our Terms of Service, and comply with our legal obligations, such as responding to lawful requests from public authorities.
-
For Marketing and Promotions: With your explicit, opt-in consent, we may use your email address to send you information about new courses, features, or promotions that may be of interest to you. You can withdraw this consent at any time.
3.2 Table of Processing Activities
The following table provides a transparent summary of our processing activities, the categories of data involved, and the legal bases we rely on under GDPR and the DPDP Act. Defining our use of learning analytics as a core, contractually necessary feature is a deliberate choice to ensure a robust legal foundation for our educational model. This alignment between our Terms of Service and this Privacy Policy is designed to provide legal clarity and transparency.
Category of Personal DataPurpose of ProcessingLegal Basis (under GDPR/DPDP Act)
Account & Profile InformationTo create and manage your account, authenticate you, and allow instructors/schools to identify you.Performance of a Contract with you (or with your institution).
User-Generated ContentTo deliver the educational program, enable assessment and feedback, and facilitate peer interaction.Performance of a Contract.
Learning & Usage DataTo monitor student progress, identify at-risk students, provide personalized feedback, and improve course design. This is an integral part of the service we provide.Performance of a Contract (as this is a core feature of the educational service); Legitimate Interest (to improve our Services).
Device & Technical InformationTo ensure security, prevent fraud, analyze platform performance, and ensure compatibility.Legitimate Interest (to maintain a secure and functional service); Legal Obligation (for security incident logging).
Communications DataTo respond to your inquiries and provide customer support.Performance of a Contract (if related to your account); Legitimate Interest (to provide excellent customer service).
Payment InformationTo process payments for subscriptions or services.Performance of a Contract.
Marketing Contact InformationTo send you promotional materials about our services.Consent (you must opt-in).
4. How We Share and Disclose Your Information
We do not sell your Personal Data for monetary consideration. We only share your information with trusted third parties in the limited circumstances described below, and we hold them to strict data protection standards.
4.1 With Instructors and Educational Institutions
Your Personal Data, including your profile information, user-generated content, and learning progress, is accessible to the instructors of the courses you are enrolled in and to the designated administrators of your affiliated educational institution. This sharing is essential for the delivery of the educational services.
4.2 With Service Providers (Data Processors)
We engage third-party companies to perform services on our behalf and help us operate our platform. These include cloud hosting providers, payment processors, customer support software providers, and email service providers. We conduct due diligence on all our service providers and enter into legally binding Data Processing Agreements (DPAs) that mandate strict confidentiality and security requirements, consistent with the standards of GDPR, the DPDP Act, and other applicable laws. Our vendors are contractually prohibited from using your data for any purpose other than what we have explicitly instructed them to do.
4.3 For Legal Reasons and to Protect Our Rights
We may disclose your information if we believe in good faith that it is required by law, such as in response to a subpoena, court order, or other legal process from a government or law enforcement agency. We may also disclose information to protect our legal rights, enforce our Terms of Service, prevent fraud, and protect the safety and security of our users and the public.
4.4 In Connection with a Business Transfer
If skovo educations is involved in a merger, acquisition, financing, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Services of any change in ownership or uses of your Personal Data, as well as any choices you may have regarding your Personal Data.
4.5 With Your Explicit Consent
Other than the scenarios listed above, we will not share your Personal Data with any other third parties for their own purposes without first obtaining your explicit, opt-in consent.
4.6 "Sale" or "Sharing" under the CCPA/CPRA
California law defines "sale" and "sharing" broadly. While we do not sell your Personal Data for money, our use of certain third-party cookies for analytics and advertising purposes may be considered a "sale" or "sharing" under the CCPA/CPRA. You have the right to opt out of this activity. For more information and to exercise your right, please see Section 10.2 of this policy and visit our "Do Not Sell or Share My Personal Information" page.
5. Data Security and Integrity
We have implemented and will maintain a comprehensive security program with appropriate technical and organizational measures designed to protect the Personal Data in our custody from unauthorized access, use, alteration, or destruction. The convergence of global data protection laws creates a de facto standard for "reasonable security," and we are committed to meeting this high bar.
5.1 Our Security Measures
Our security practices are based on industry standards and include:
-
Encryption: We encrypt your Personal Data both in transit using Transport Layer Security (TLS) and at rest using strong encryption algorithms. This is a baseline requirement to render data unintelligible to unauthorized parties.
-
Access Controls: We employ strict, role-based access controls (RBAC) and the principle of least privilege. This ensures that our employees, contractors, and agents can only access the Personal Data that is strictly necessary for them to perform their job functions.
-
Regular Audits and Training: We conduct regular internal and external security audits, penetration testing, and vulnerability assessments. All our employees undergo mandatory, recurring training on data privacy and information security to ensure they understand their responsibilities in protecting your data.
-
Secure Development: We integrate privacy and security into our software development lifecycle ("privacy by design") to ensure that our platform is built with data protection as a core principle.
5.2 Your Role in Protecting Your Information
The security of your account also depends on you. We urge you to use a strong, unique password for your skovo educations account and to never share your login credentials with anyone.
5.3 Data Breach Response Procedures
In the event of a personal data breach, we have an incident response plan designed to promptly assess and contain the incident. In accordance with applicable law, we will notify the relevant supervisory authorities (such as the Data Protection Board of India or European Data Protection Authorities) and affected individuals without undue delay if the breach is likely to result in a high risk to the rights and freedoms of individuals.
6. Data Retention and Deletion
We adhere to the principle of storage limitation, which means we will not keep your Personal Data in an identifiable form for longer than is necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations.
6.1 Our Principles for Data Retention
Our data retention policies are designed to retain data for the minimum period necessary. When Personal Data is no longer needed for its specified purpose, and we are no longer legally required to retain it, we will securely delete it or anonymize it in such a way that it can no longer be used to identify you.
6.2 Retention Periods for Different Data Categories
The retention period for your data depends on the type of data and the context in which it was collected. We must balance your right to have your data deleted against our legal and contractual obligations to retain certain information, particularly educational records.
-
Account Information: We retain your account and profile information for as long as your account is active. If you close your account, we will delete this information within a reasonable period (e.g., 12 months), unless we are required to retain it for legal or legitimate business purposes.
-
Student Educational Records: This category includes your user-generated content and learning analytics data.
-
For users affiliated with an educational institution: We act as a data processor for the institution. We will retain this data for the period specified in our agreement with the institution, which is designed to comply with their record-keeping obligations under laws like FERPA.
-
For independent users: We will retain this data for as long as your account is active and for a period of up to 5 years after your last activity to allow you to access your learning history. After this period, the data will be deleted or anonymized.
-
-
Technical and Log Data: Security logs and other technical data are retained for a short, fixed period (e.g., 90 days) for security analysis and troubleshooting, after which they are deleted.
-
Parental Consent Records: Records of verifiable parental consent obtained under COPPA will be retained for as long as the corresponding child's account is active.
6.3 Procedures for Data Deletion
You can request the deletion of your account and associated Personal Data by contacting us. We will honor your request subject to the exceptions outlined in Section 7 and our legal retention obligations. For example, we cannot delete data that is part of an official academic record that your school is legally required to maintain.
7. Your Privacy Rights and Choices
We believe in empowering you to control your Personal Data. All our users have certain fundamental rights over their information, and we have established clear processes to help you exercise them. Fulfilling these requests is a legal and operational priority, backed by our internal data mapping and management systems.
7.1 Your Rights Over Your Personal Data
Regardless of where you live, you have the following rights:
-
The Right to Access/Know: The right to request a copy of the Personal Data we hold about you and to receive information about how it is being processed.
-
The Right to Rectification (Correction): The right to request the correction of inaccurate or incomplete Personal Data we hold about you.
-
The Right to Erasure (Deletion): The right to request that we delete your Personal Data. This right is not absolute and is subject to our legal obligations and other legitimate reasons to retain your data, as detailed in Section 6.
-
The Right to Withdraw Consent: Where our processing is based on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time.
Additional rights may be available to you depending on your location, as detailed in Section 10.
7.2 How to Exercise Your Rights
-
Submitting a Request: To exercise any of your privacy rights, please submit a request to our dedicated email address: privacy@skovo.educations. You may also use any automated tools or forms we provide within the Services.
-
Verification Process: For your protection, we must verify your identity before we can act on your request. This is to prevent unauthorized access to or deletion of your Personal Data. We will ask you to provide information that matches the information we have on file for you.
-
Response Timelines: We will respond to your request within the timeframes required by applicable law (typically within 30 to 45 days of receipt). If we require more time due to the complexity of the request, we will inform you of the extension.
-
No Discrimination: We will not discriminate against you in any way for exercising your privacy rights. This means we will not deny you services, charge you different prices, or provide you with a different level of service.
7.3 Choices Regarding Communications and Cookies
-
Marketing Communications: You can opt out of receiving promotional emails from us at any time by clicking the "unsubscribe" link at the bottom of any marketing email.
-
Cookies: You can manage your cookie preferences through our cookie consent banner and by adjusting your browser settings. Please see our Cookie Policy for more details.
8. Children's Privacy
Protecting the privacy of children is especially important. This section outlines our practices in compliance with the U.S. Children's Online Privacy Protection Act (COPPA), the GDPR, India's DPDP Act, and the CCPA. Our compliance strategy recognizes the different legal frameworks and consent models required in various jurisdictions.
8.1 Our Policy Concerning Minors
Our Services are designed for educational use by users of all ages. We define a "Child" according to the age thresholds set by applicable law in your jurisdiction:
-
Under the age of 13 in the United States.
-
Under the age of 16 in the European Economic Area (this age may be lowered to 13 by individual member states).
-
Under the age of 18 in India.
-
Under the age of 16 for consent purposes under the CCPA in California.
8.2 Collection and Use of Children's Data
We collect Personal Data from Children solely for the purpose of providing our educational Services. We strictly prohibit any other use of this data. Specifically:
-
We do not use Personal Data collected from Children for targeted advertising or any other commercial purpose not related to education.
-
We do not build commercial profiles of Children.
-
We do not allow tracking or behavioral monitoring of Children for non-educational purposes.
8.3 Verifiable Parental/Guardian Consent
Before collecting any Personal Data from a Child, we will obtain verifiable parental consent (VPC). Our method for obtaining consent depends on how the Child is using our Services:
-
Direct-to-Consumer Use: If a Child attempts to register for an account directly, we will use a neutral age-gate to determine their age. If they are identified as a Child, we will halt the registration process and initiate a direct notice to a parent or legal guardian to obtain VPC. Methods for VPC may include a signed consent form or an email with a confirmation step.
-
School/Institutional Use: In cases where a school or district uses our Services for a purely educational purpose, we may rely on the school to provide consent on behalf of parents. This is permitted under COPPA's "school consent" exception. We provide schools with detailed notice of our data practices to ensure they can make an informed decision. This model is primarily used for our U.S. institutional customers. For institutional users in other jurisdictions, such as India, where the legal framework for school-based consent is different, we may require direct parental consent even for school-provided accounts.
8.4 Parental Rights
Parents and legal guardians of Children using our Services have the right to:
-
Review the Personal Data we have collected from their Child.
-
Request that we delete the Personal Data we have collected from their Child.
-
Refuse to permit the further collection or use of their Child's Personal Data.
To exercise these rights, please contact us at privacy@skovo.educations. If your Child is using our Services through a school, we may direct you to contact the school first, as they are the primary controller of the data in that context.
9. International Data Transfers
Skovo educations operates Nationally, which means your Personal Data not be transferred to, stored, and processed in a country other than your own. We ensure that appropriate safeguards are in place to protect your data if any issue.
10. Jurisdiction-Specific Provisions
This section provides additional information and outlines specific rights for users in certain jurisdictions.
10.1 For Users in India (DPDP Act)
-
Your Rights as a Data Principal: Under the DPDP Act, you have the right to obtain information about your Personal Data, the right to seek correction and erasure of your data, and the right to grievance redressal.
-
Consent Management: Your consent for processing Personal Data will always be free, specific, informed, unconditional, and unambiguous, given through a clear affirmative action. You have the right to withdraw your consent at any time. We will facilitate this through our platform and may integrate with registered Consent Managers to give you a single point of control.
-
Grievance Redressal and Data Protection Officer (India): In compliance with the DPDP Act, we have appointed a Data Protection Officer who is situated in India and will also serve as our Grievance Officer. If you have any complaints or grievances regarding the processing of your Personal Data, please contact them at dpo.india@skovo.educations. We will acknowledge your complaint and resolve it within the legally prescribed timelines. You also have the right to register a complaint with the Data Protection Board of India.
-
Duties of Data Principals: As a user under the DPDP Act, you have a duty not to register false or frivolous complaints and not to furnish any false particulars or impersonate another person.
11. Changes to This Privacy Policy
The world of data privacy is constantly evolving, and we may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by email (sent to the email address specified in your account), by means of a prominent notice on our Services, or as otherwise required by applicable law, prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices. The "Last Updated" date at the top of this policy indicates when it was last revised.
12. How to Contact Us
If you have any questions, comments, or concerns about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please do not hesitate to contact us. We have dedicated channels to ensure your inquiries are handled efficiently.
-
For General Inquiries: Email: info@skovoeducations.com
-
Mailing Address: Support@skovoeducations.com.
-
For Privacy-Specific Inquiries and to Exercise Your Rights:
Email: privacy@skovoeducations.com -
Contact our Data Protection Officers: dpo.india@skovoeducations.com