Medhavo

Privacy policy

Effective from 15 October 2026 · Version 3

Please read this alongside our Terms & Conditions and No Refund Policy.

1. Introduction

1.1 This Privacy Policy explains how Bhagwati Pitambara Trust ("Medhavo", "we", "us") collects, uses, shares, stores and protects personal data of users of https://medhavo.com, https://app.medhavo.com and related applications and services (the "Platform").

1.2 Medhavo is the Data Fiduciary for personal data processed through the Platform, within the meaning of the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This Policy is also published in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1.3 By using the Platform or giving consent through it, you agree to the processing of your personal data as described in this Policy. Capitalised terms not defined here have the meanings given in the Terms and Conditions (Part A).

2. Personal data we collect

2.1 Data you provide:

  • Identity and contact: name, date of birth or age, gender (optional), email address, mobile and WhatsApp number, city and state, and for Minors, the Parent or Guardian's name, contact details and relationship.
  • Academic profile: class, school or college, board, target examination, optional subjects, preferred language, previous scores and learning goals.
  • Account data: login credentials, profile photograph (optional) and preferences.
  • Payment data: transaction ID, amount, payment method and billing details. You pay directly through your own bank or UPI app; we never receive or store card numbers, UPI PINs or banking passwords.
  • Wallet and referral data: your referral code, the code you applied, who referred you and whom you referred, rewards, and your wallet balance and history.
  • Acceptance records: each time you accept our Terms, this Policy or the No Refund Policy (for example by ticking the box before an enquiry, enrolment, renewal or order), we record the date and time, the version accepted, the account or contact details used, the Programme or item concerned, your IP address and your device or browser.
  • Enquiries and demo bookings: information submitted through the enquiry form, calls, emails or WhatsApp.
  • Identity or age verification: where we request it to verify parental consent or eligibility.

2.2 Data generated while you learn:

  • attendance, class participation, chat messages and doubts raised in class;
  • test responses, scores, answer sheets, evaluations, mentor notes and progress reports;
  • audio and video recordings of live classes, mock interviews, group discussions and public speaking sessions in which the Learner participates, and speech metrics derived from them (such as pace or use of filler words);
  • feedback, ratings and support communications.

2.3 Data collected automatically: IP address, device and browser type, operating system, app version, login times, pages and content viewed, session duration, crash logs and approximate location derived from IP. We collect this through cookies, SDKs and similar technologies (see section 9).

2.4 We do not intentionally collect financial account passwords, biometric data, health records or other sensitive data. Please do not share such information in classes or chats.

3. Children's personal data

3.1 Many Learners on the Platform are Minors (under 18). We process a Minor's personal data only after obtaining verifiable consent from the Parent or Guardian, in accordance with Section 9 of the DPDP Act and the rules made under it. We may verify the Parent or Guardian's identity and age using details already available to us, an OTP to a registered number, documents, or another method permitted by law.

3.2 In relation to Minors, Medhavo does not:

  • undertake tracking or behavioural monitoring of Minors for purposes other than delivering education, safety and the progress reporting the Parent has chosen;
  • direct targeted advertising at Minors;
  • sell or rent Minors' personal data;
  • use a Minor's name, image, voice, result or testimonial for publicity without separate written consent from the Parent or Guardian.

3.3 Weekly reports, attendance, test scores and mentor notes of a Minor are shared with the registered Parent or Guardian.

3.4 For Learners aged 18 or above, progress reports are shared with a parent or any other person only if the Learner has consented to it.

3.5 A Parent or Guardian may review, correct or request deletion of their child's data, or withdraw consent, by writing to the Grievance Officer (section 12). Withdrawal of consent may mean we can no longer provide the Programme.

4. Why we use personal data

We process personal data on the basis of your consent, or for legitimate uses permitted under Section 7 of the DPDP Act, for the following purposes:

  1. creating and managing accounts and verifying age and parental consent;
  2. enrolling Learners, scheduling and delivering live classes, recordings, tests and mentoring;
  3. evaluating answers and speeches and preparing progress reports, including with the help of automated or AI-assisted tools;
  4. communicating class schedules, reminders, reports, payment and service updates by email, SMS, calls and WhatsApp;
  5. processing payments, issuing invoices and maintaining financial and tax records;
  6. responding to enquiries, demo bookings, support requests and grievances;
  7. ensuring safety in classes, preventing piracy, account sharing, fraud and misuse, and enforcing our Terms;
  8. improving the Platform, Content and teaching quality, using aggregated or de-identified data where possible;
  9. sending information about new Programmes to adult users and Parents who have not opted out (never targeted at Minors);
  10. complying with legal obligations, court orders and requests from competent authorities, and establishing, exercising or defending legal claims.

We do not use Learners' recordings, answers or personal data to train general-purpose AI models offered to third parties.

5. Recordings of classes and sessions

5.1 Live classes, mock interviews, group discussions and speaking sessions are recorded for revision, evaluation, quality assurance, safety and dispute resolution. By joining a session, the Learner (and, for a Minor, the Parent or Guardian) consents to being recorded, including their voice, image, name and chat messages.

5.2 Learners must follow the Educator's instructions on camera and microphone use. Medhavo may require cameras on for identity verification, tests, mock interviews, group discussions and speaking sessions.

5.3 Recordings are accessible only to Learners enrolled in that batch, the assigned Educators and authorised Medhavo staff. They are not published publicly without separate written consent.

5A. Educators and applicants

5A.1 When you apply to teach with Medhavo we collect your name and contact details, a professional photograph, your resume, your subjects and experience, your answers to our application and question-and-answer rounds, the details and outcome of any interview or demo class (which may be recorded), the identity and qualification documents we ask for, and your training record. We use them to assess your application, to verify your identity and qualifications, to train and engage you, and to meet our legal obligations.

5A.2 Any content you submit or create for, or on behalf of, Medhavo — whether as an applicant or as an Educator, and whether or not you are hired — is the intellectual property of Medhavo, as set out in clause 5.6 of our Terms & Conditions. Medhavo alone has the right to use it in Medhavo's interest, and may keep and use it after your application ends or your engagement stops. Deleting your account or personal data does not end that right; where such content contains your personal data, we will handle that data in line with this Policy.

6. Who we share personal data with

We do not sell personal data. We share it only as follows, and only to the extent necessary:

  1. Educators assigned to the Learner, for teaching, evaluation and mentoring.
  2. Parents or Guardians, as described in section 3.
  3. Data Processors acting on our instructions under written contracts, including cloud hosting and infrastructure (Cloudflare) and authentication, database and push-messaging services (Google Firebase), live-class and video services (YouTube), banks and UPI providers (payments are made by you directly — Medhavo does not use a third-party payment gateway), messaging and email services (including WhatsApp Business, SMS and email providers), analytics (Cloudflare Web Analytics), customer support tools and AI service providers (if any).
  4. The person who referred you, if you join using a referral code: they may see your name, that you joined, and whether your first paid enrolment was confirmed, so that their reward can be shown. Nothing else about you is shared with them.
  5. Professional advisers such as auditors, lawyers and chartered accountants, under confidentiality obligations.
  6. Law enforcement, courts, regulators and government authorities, where required by law or to protect the rights, property or safety of Medhavo, its Users, Educators or the public, including the safety of children.
  7. A successor entity, in the event of a restructuring, merger, transfer of the Platform or change in the operating entity, subject to this Policy.

7. Data retention

7.1 We retain your personal data only for as long as necessary to provide the Programme you have enrolled in. In general, we keep your account and learning data while your account is active and for the duration of the course you have opted for, and delete or irreversibly anonymise it after your course ends — unless a longer period is required by law or for a pending dispute.

7.2 Payment and invoice records are kept for as long as tax and accounting laws require. Anonymised, aggregated data that cannot identify you may be retained for statistics and improvement. Medhavo may retain any data for longer where required by law, for fraud prevention, or to establish, exercise or defend legal claims.

7.3 Records of your acceptance of our Terms, this Policy and the No Refund Policy, and your wallet and referral records, are kept for as long as your batch or course subscription lasts, and are then deleted or anonymised. If a complaint, dispute or proceeding about them is pending when your subscription ends, they are kept until it is resolved. Payment and invoice records are kept only for the period tax and accounting laws require (clause 7.2).

8. Data security

8.1 We implement reasonable security practices, including encryption in transit, access controls, role-based permissions, logging and periodic review, in line with the IT Rules, 2011 and the DPDP Act.

8.2 No method of transmission or storage over the internet is fully secure. While we take reasonable care, we cannot guarantee absolute security. You are responsible for keeping your password and devices secure. Medhavo is not liable for any unauthorised access or loss caused by events beyond its reasonable control, by a third-party service provider, or by your own acts or omissions.

8.3 In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required under the DPDP Act and its rules.

9. Cookies and similar technologies

9.1 We use essential cookies to keep you signed in and secure the Platform, and analytics cookies to understand usage. We do not use cookies for targeted advertising to Minors.

9.2 You can block or delete cookies through your browser settings, but parts of the Platform may not function properly without essential cookies.

10. Storage and transfer

Personal data is stored on servers located in India and/or in other countries where our service providers operate. Any transfer outside India will comply with the DPDP Act and any restrictions notified by the Government of India.

11. Your rights

11.1 Subject to the DPDP Act and its rules, you (or the Parent or Guardian, for a Minor) have the right to:

  • obtain a summary of personal data we process and the processing activities undertaken;
  • correct, complete or update inaccurate or incomplete data;
  • request erasure of personal data that is no longer needed, subject to legal retention requirements;
  • withdraw consent at any time, which will not affect processing already carried out;
  • nominate another person to exercise your rights in the event of death or incapacity;
  • have your grievance redressed by our Grievance Officer, and thereafter approach the Data Protection Board of India.

11.2 To exercise these rights, write to support@medhavo.com. We may verify your identity before acting on a request. We will respond within the period prescribed by law.

11.3 You also have the duties set out in Section 15 of the DPDP Act, including not to impersonate another person, suppress material information or file frivolous or false complaints.

12. Grievance Officer and contact

For any question, request or complaint about this Policy or your personal data, contact:

  • Grievance Officer: Grievance Officer, Bhagwati Pitambara Trust
  • Email: support@medhavo.com
  • Phone: +91 89579 39704
  • Address: Bhagwati Pitambara Trust, Sector 74 - Noida

We will acknowledge and resolve your complaint within the timelines prescribed by applicable law.

13. Changes to this Policy

We may update this Policy from time to time. The updated Policy will be posted on this page with a revised effective date. The revised Policy applies from that effective date, without any prior notice. We may, but need not, tell you about changes by email, WhatsApp or an in-app notice. Where the law requires fresh consent, we will seek it.

14. Governing law

This Policy is governed by the laws of India. Disputes relating to it are subject to clause 19 of the Terms and Conditions.