This Privacy Policy explains how Akcero Private Limited (“Akcero”, “we”, “us”) collects, uses, stores, shares and protects personal data when you use QuriOS, an AI learning companion for students in Classes 6–12 and for university learners, at qurios.akcero.ai and through related services.
QuriOS is used by families. A parent or legal guardian creates the account and adds their child as a learner profile. This policy covers data about both parents and children. We have written it in plain language. If anything is unclear, write to us at qurios@akcero.ai.
1Who we are and how to reach us
QuriOS is operated by Akcero Private Limited, registered office: K Block 1201, Rainbow Vistas Rock Garden, Greenhills Road, Moosapet, Hyderabad, Telangana 500018, India. Under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) we are the “Data Fiduciary” for the personal data described here.
- Privacy questions, requests and support: qurios@akcero.ai
- Grievance Officer: Prarthana Kuradi, prarthanak@akcero.ai
- Product website: akcero.ai
2Who QuriOS is for
- The account holder must be a parent or legal guardian aged 18 or over. A parent may sign in with Google, with an email address, or with a mobile number.
- A child does not have their own login. Children use a learner profile inside their parent’s account, which may be protected by a PIN.
- QuriOS is meant for school students in Classes 6–12 and for university learners, in India. We do not ask for a child’s date of birth, school name or photograph.
- By creating an account you confirm that you are a parent or legal guardian and that you agree to this policy and our Terms, including on behalf of any child whose profile you add. Our sign-in provider records your agreement at sign-up.
- If you believe a child is using QuriOS without a parent’s knowledge, write to us and we will remove the profile.
3What we collect
We collect only what QuriOS needs to work. This is everything we collect, grouped by who it is about.
About the parent or guardian
- Name, email address and mobile number. The mobile number is verified with a one-time code. If the parent signs in with Google, we receive their name and email from Google.
- Passwords are handled by our sign-in provider, Clerk. We never see or store them.
- A PIN (stored only in scrambled, hashed form) if the parent sets one to protect “browse as parent”.
- If the parent turns on optional WhatsApp updates: the exact wording they agreed to, the time, and where they agreed. If they turn on browser notifications: the technical details their browser gives us to deliver them.
About the child (learner profile)
- A display name chosen by the parent (a nickname is fine), an avatar picture from our list (not a real photo), grade or university stage, school board, exam targets such as JEE Main or NEET, and a PIN stored in hashed form.
Homework and learning content
- Photos or PDFs of homework, diary and worksheet pages that the parent or child uploads, and cropped pictures of diagrams from them.
- The text read from those pages, the AI’s explanations, hints and practice questions, the child’s answers, and the AI’s feedback. We also keep the AI’s internal working for each grading decision so that mistakes can be investigated. It is never shown to the parent or child.
- Practice, revision and mock-exam attempts and results, and revision-note audio.
- If the parent uses the document scan: the result of the analysis. The photo of the scanned page is not kept.
Chat and voice
- The text of the child’s messages and the AI tutor’s replies.
- If the child talks to the tutor, the voice is sent to our speech provider to be turned into text. We do not store recordings of the child’s voice. We keep the text, and we keep the audio of the tutor’s spoken replies so they can be replayed.
- The wake word (“Hey Quri”) is detected inside the browser. While it is waiting, no audio is sent to us.
The learning profile
- To teach well, QuriOS builds a learning profile for each child: short notes such as topics the child finds hard, an estimate of how well each topic is known, and a schedule for revision reminders. See section 5.
Safety screening
- Every message a child sends to the tutor, and every reply, is automatically screened for signs of self-harm, abuse or unsafe requests. When something is flagged, we keep the exact text, along with the category, severity and time, so a person can review it. See section 6.
Support, bug reports and feedback
- If you send a bug report: what you wrote, an optional screenshot (which can show whatever was on the screen), the page address, your browser and device details, your name and the contact number you gave, and the child’s name and grade.
- If you post on the feature wishlist: what you wrote, shown under the name on the account that posted it (a parent’s name, or a student’s display name). Wishlist posts can be seen by other QuriOS families, so please do not put personal details in them, and consider giving your child a nickname as their display name.
WhatsApp updates (optional)
- Only if the parent opts in: the mobile number, which message was sent (such as “homework finished”), and its delivery status (sent, delivered, read, failed). The messages contain only fixed wording plus the parent’s first name, the child’s display name and short details such as a time or a count. They never contain what a child said to the tutor.
Technical data
- Our servers record the technical details needed to run and secure the service, such as your IP address, the page or address requested, the time, the result, and error information. Web server and system logs are kept for 30 days. See section 13 for cookies and local storage.
4Why we use it, and on what basis
- To run QuriOS: sign-in and profiles, tutoring, homework help and grading, practice, revision, mock exams and progress.
- To personalise learning: the learning profile (section 5).
- To keep children safe: safety screening and alerts to parents (section 6).
- To keep parents informed: progress, homework updates and safety alerts in the app, by browser notification, and, if the parent opts in, on WhatsApp.
- For support and improvement: to answer questions, fix bugs and read feedback.
- For security and the law: to prevent abuse and to meet our legal duties.
Our basis is the consent of the parent or legal guardian, given when they create the account, when they add a child, and separately for optional features such as WhatsApp. Where the DPDP Act allows, we also process data that is necessary to meet a legal obligation. A parent can withdraw consent at any time (section 12).
What we do not do: we do not show advertising, we do not sell personal data, we do not build marketing profiles of children, and we do not use children’s content to train AI models of our own.
5How QuriOS personalises learning
To teach each child at the right level, QuriOS keeps a learning profile: short notes written from the child’s sessions (for example, “confuses speed and velocity”), an estimate of how well each topic is known, and when a topic is due for revision. It is used only to improve the teaching, to schedule revision and to show the parent progress. It is not used for advertising, and it is not shared except with the service providers listed in section 7, who help us run QuriOS.
What parents can see: progress summaries, homework tasks, the child’s answers and feedback, the pages they uploaded, and safety alerts. Parents cannot read the child’s conversations with the tutor in the app. The parent can delete the child’s profile at any time, which removes the learning profile too.
6AI and safety screening
QuriOS uses AI. AI can be wrong, so answers should be checked against a textbook or a teacher, as our Terms explain.
Every message a child sends, and every reply, is checked automatically for signs of self-harm, abuse or unsafe requests. If a message is serious, the tutor replies with a supportive message that points the child to a trusted adult, instead of continuing as normal. When something is flagged:
- we keep the exact text, so a person can review it;
- the parent gets an alert in the app, by browser notification and, if they opted in, on WhatsApp. The alert says that something was flagged and its general category, but it does not include the child’s words;
- authorised members of our team may read the flagged text in order to review it. A designated safety reviewer leads this, with backups from the team. We aim to review serious (high-severity) flags within 7 days and all others within 30 days.
This is a safety aid. It is not a replacement for a parent’s supervision or for emergency help. Messages typed by a parent in their own chat with Quri are not screened.
7Who we share data with
We share data only with the companies that help us run QuriOS, as listed here, or where the law requires it. They receive only what they need for the purpose shown. We do not sell personal data.
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Sarvam AI | AI tutoring chat; turning speech into text and text into speech; reading homework pages; safety screening | The child’s messages and voice, homework pages, the tutor’s replies | India (per Sarvam’s terms) |
| Google (Gemini API) | Reading homework photos; creating tutoring and practice content; checking answers | Homework photos and text, the child’s answers | Google’s global infrastructure |
| Clerk | Parent sign-in and verification codes | The parent’s name, email, mobile number, password (held by Clerk) and Google sign-in details | Outside India |
| Meta (WhatsApp Business Platform) | Optional WhatsApp updates to parents | The parent’s mobile number, first name, the child’s display name and short fixed text | Meta’s global infrastructure |
| Cloudflare | Storing uploaded files and audio, and our database backups | Homework photos, audio files, screenshots and database backups | Cloudflare’s global network (not limited to India) |
| Hostinger | The servers that run QuriOS and its database | All data held by the app | India (Mumbai) |
| Browser push services (Google, Mozilla, Apple) | Delivering browser notifications the parent turned on | The notification text, such as “Aarav finished homework” | Set by your browser |
| Google Fonts | Loading the fonts on our pages | Your IP address and browser details when a page loads |
Each provider handles data under its own terms and privacy policy. We may disclose data to a court, police or authority when the law requires it, and we will tell the parent where we are allowed to. If Akcero is ever sold or merged, this policy will continue to apply to your data unless you are told otherwise and given a choice.
8Who at Akcero can see data
Only a small number of named team members can see account data, and only for support, safety review and keeping the service running. They can look up accounts, see a child’s learning content and (for support or safety) read conversations and flagged messages. Changes made by staff, and every time a conversation is viewed, are recorded in an internal log. Access needs a password and is limited to staff who need it.
9Where data is processed
Our servers are in India. Some of the providers in section 7 process data outside India, for example Clerk, Meta and Google. We choose providers that publish privacy and security terms, and we share only the data they need. Under the DPDP Act, personal data may be transferred outside India except to countries the Government restricts.
10How long we keep data
| Data | How long we keep it |
|---|---|
| Parent account, learner profiles, homework, chats, practice, revision and the learning profile | Until the parent deletes the item or the account |
| Homework photos and files | Until the parent deletes them (a homework, or just its photos, can be deleted in the app) or deletes the account. Photos and audio left in our file storage after an account is deleted are removed in batches, which can take some time; write to us if you want them removed sooner |
| Document-scan photos | Not kept (only the analysis result) |
| Voice recordings | Not stored. Only the text and the tutor’s reply audio are kept, like chat |
| Flagged safety messages | Until reviewed, and afterwards for as long as needed for safety or legal reasons. They are deleted with the account |
| Bug reports and screenshots | For as long as needed to fix the problem and help you. A bug report can remain after an account is deleted; write to us if you want one removed |
| WhatsApp message log | While the account exists. It is deleted with the account |
| Server logs (IP address, page requested, errors) | 30 days |
| Backups | 14 days, then automatically deleted |
When you delete your account, we remove your sign-in, your account and every child profile under it, with all their records, from our live systems straight away. Uploaded photos and audio that belonged to a deleted account are removed from our file storage in batches, which can take some time. If you would like them removed sooner, write to us at qurios@akcero.ai. Copies in our backups are deleted automatically within 14 days.
We may keep limited records longer where the law requires, for example to deal with a legal claim.
11How we protect data
- Data travels over encrypted (HTTPS) connections.
- PINs are stored in scrambled form, so we cannot read them.
- Staff access is limited, needs a password and is logged as described in section 8.
- Our database is not open to the internet, and the server is protected by a firewall.
- Backups are kept for a short, fixed time.
No system is completely secure. If a breach could affect you, we will tell the affected parents and the Data Protection Board of India without undue delay, and no later than 72 hours after we confirm the breach.
12Your rights and how to use them
A parent can exercise these rights for themselves and for their child:
- See your data: in Parent Settings you can download an export of your account and your children’s profiles and homework summaries. For anything else, write to us and we will provide a copy.
- Correct data: you can edit your details and your children’s profiles in Parent Settings and Manage Family, or write to us.
- Delete data: delete a homework session, a child’s profile (in Manage Family) or the whole account (in Parent Settings). See section 10.
- Withdraw consent: turn off WhatsApp updates in Settings, or reply STOP to any WhatsApp message from us. You can withdraw other consents by deleting the child’s profile or the account.
- Nominate someone to exercise your rights if you die or cannot do so yourself.
- Complain: write to our Grievance Officer (below). We will reply and aim to resolve your request within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
13Cookies and local storage
QuriOS does not use advertising or analytics cookies, and we do not run advertising or tracking tools. Our sign-in provider, Clerk, sets the cookies needed to keep you signed in. Your browser also stores a few small items on your device so the app works: for example your last-used email on the sign-in page, your theme, the active child profile, and unfinished homework drafts. Clearing your browser data removes them.
14Our marketing website
Visiting akcero.ai does not require an account. The site does not use analytics or advertising tools. Loading its fonts from Google Fonts sends your IP address and browser details to Google.
15Changes to this policy
If we change this policy in a way that matters, we will tell parents in the app or by email before it takes effect, and we may ask them to agree again. The date at the top shows when it was last updated.
16Contact and grievance
- General privacy and support: qurios@akcero.ai
- Grievance Officer: Prarthana Kuradi, Akcero Private Limited, prarthanak@akcero.ai
- Postal address: K Block 1201, Rainbow Vistas Rock Garden, Greenhills Road, Moosapet, Hyderabad, Telangana 500018, India