Privacy Policy

Effective date: July 6, 2026 · Last updated: September 10, 2026

ViVek AI Tutor (“ViVek,” “we,” “us,” or “our”) operates the website and application at https://vivekaitutor.mavvk.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Service.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Who this policy applies to

This policy applies to:

Students who use ViVek for ICSE-aligned study, practice, and AI tutoring;
Teachers and school administrators who manage classes, content, and analytics;
Parents or guardians who create parent accounts and link to student accounts;
Platform administrators who operate and test optional Google Workspace integrations for the Service;
Visitors who browse our public pages without signing in.

ViVek is designed for educational use in schools. If you are under 18, you should use the Service only with permission from a parent, guardian, or school, as described in Section 10.

2. Information we collect

2.1 Account and profile information

When you register or sign in, we may collect:

Full name and preferred display name;
Email address;
Password (stored in hashed form if you sign up with email and password);
Profile picture (including from your Google account if you use Google sign-in);
Account type (for example, school member or parent);
School, grade, division, and related profile fields you or your school provide;
Student identifiers (such as a 4-digit UID used for parent linking);
Role information (student, teacher, school admin, parent, or platform administrator).

2.2 Google sign-in

If you choose “Continue with Google,” we use Google OAuth to authenticate you. For sign-in, we request the openid, email, and profile scopes. From Google we receive information such as your Google account ID, email address, name, and profile picture. We use this to create or update your ViVek account and keep your profile in sync. We do not receive your Google password.

Google’s use of information is governed by Google’s Privacy Policy.

2.3 Optional Google integrations

In addition to Google sign-in, ViVek may offer optional Google connections that you explicitly authorize. We request only the Google API scopes needed for the feature you enable, and we access Google user data only after you grant consent through Google’s OAuth consent screen. You can disconnect a connection in ViVek (where offered) or revoke access at any time in your Google Account permissions.

Depending on which integrations you connect, we may process the following Google data:

Google Drive — files and metadata you select or authorize, so we can import study materials, export generated documents, or preview files you choose.
Google Classroom — courses, coursework, announcements, and related read-only Classroom data you authorize, so you can ask questions about classroom materials.
Gmail — message metadata and content needed to search, read, compose, send, and reply to email on your behalf when you use Gmail features (including Developer Hub testing tools and any assistant tools that call Gmail with your authorization). We use Gmail scopes such as gmail.readonly and gmail.send. We do not request full mailbox scope (https://mail.google.com/) for these features.
Google Forms — form structure, questions, responses, and related metadata needed to list, open, create, or update forms and review responses when you use Forms features. This may include limited Drive metadata access solely to discover Forms files when Google’s Forms API does not provide a list endpoint.
Google Calendar — calendar lists, event details, free/busy information, and event create/update/delete actions you request, using narrow Calendar scopes (for example event and calendar-list access rather than unrestricted calendar access where possible).
Google Keep — where available under Google’s enterprise Keep API program and your organization’s authorization, note content needed to list, read, create, update, or delete notes for authorized Platform Admin / enterprise testing. Keep is not offered as a consumer OAuth consent-screen feature in the same way as Gmail/Calendar/Forms.
Google Workspace directory (People / Directory lookup) — for authorized Platform Admins, name and email directory matches used to resolve school roster / directory email lookups you explicitly run.
Google Maps Platform — place search, geocoding, routing, and related location results for Maps features. Maps typically uses a restricted server API key rather than reading your personal Google account content.
Google Home — if and when enabled through ViVek’s official mobile Home APIs client, structure/room/device and permission data needed to list and control devices you authorize. Web/backend alone does not scrape Home or use unofficial Home APIs.

OAuth access and refresh tokens for user-authorized Google connections are stored securely on our servers so the connection can continue until you disconnect it in ViVek or revoke it in your Google Account. We do not sell Google user data. We do not use Google user data for advertising. We do not use Gmail, Forms, Calendar, Keep, Drive, Classroom, or directory data to train generalized AI/ML models.

Google API Services User Data Policy / Limited Use. ViVek’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data obtained through these APIs is used only to provide or improve user-facing features that are prominent in ViVek’s interface, is not transferred to others except as necessary to provide/improve those features, for security, or as required by law, and is not used for serving advertisements.

2.4 Educational activity and content you create

When you use ViVek, we process information you provide or generate, including:

Chat messages and AI conversation history;
Study notebooks, chapters, study spaces, and conversation pages;
Files and documents you upload (processed into searchable study context);
Generated content such as worksheets, mind maps, flashcards, summaries, and test papers;
Assessment answers, scores, progress data, and learning analytics;
Voice input if you use speech-to-text, and text you send to text-to-speech features;
YouTube links you submit for summarization or recommendations;
Feedback, bug reports, and support messages you send to us.

2.5 Usage and technical information

We automatically collect certain technical and usage data, including:

Session identifiers and authentication cookies;
Approximate usage time and app-surface activity (for example, terminal, admin, or parent views);
Action logs related to security, auditing, and product improvement (such as sign-in events, file uploads, and errors);
Browser type, device information, IP address, and request timestamps in server logs;
Settings and preferences you save in the app (language, theme, notification options, and similar choices).

2.6 Information from schools

If your school uses ViVek, administrators may provide or manage roster information, class allocation, permissions, and institutional settings. That information is used to operate the Service for your school community.

3. How we use information

We use the information we collect to:

Provide, maintain, and improve the Service;
Authenticate users and secure accounts;
Deliver AI tutoring, content generation, curriculum-aware study tools, and analytics;
Process uploads and connect study materials to your conversations;
Enable optional Google features you request (including Drive, Classroom, Gmail, Forms, Calendar, directory lookup, Maps, and Home where available);
Allow authorized Platform Administrators to test and operate Developer Hub Google integrations;
Display progress to students, teachers, parents (where linked), and authorized school staff;
Send service-related emails such as verification codes, password reset messages, and admin invitations;
Respond to feedback, error reports, and support requests;
Monitor abuse, enforce our Terms of Service, and protect the security of our users;
Comply with legal obligations and resolve disputes.

4. AI processing and third-party providers

ViVek uses artificial intelligence to answer questions, generate study materials, and analyze educational content. To provide these features, content from your prompts, uploads, and selected study context may be sent to third-party AI and infrastructure providers, including:

OpenAI — for large-language-model responses and content generation;
Microsoft Edge TTS — for optional text-to-speech playback;
Google APIs — for sign-in and optional Drive, Classroom, Gmail, Forms, Calendar, Keep (enterprise), directory lookup, Maps Platform, YouTube-related, and Home features where enabled;
Hosting and database providers — to store accounts, messages, files, and analytics.

We send providers only what is reasonably necessary to perform the feature you request. These providers process data under their own terms and privacy policies. We do not sell your personal information to third parties for their independent advertising purposes.

5. Cookies and similar technologies

We use cookies and similar technologies for essential Service functions, including:

Session cookie (session_token) — keeps you signed in. It is HTTP-only and used for authentication.
Session storage — may remember UI state (such as your current workspace view) during a browser session.

We do not use third-party advertising cookies on the core learning application. You can control cookies through your browser settings, but disabling essential cookies may prevent you from staying signed in.

6. How we share information

We may share information in these circumstances:

With your school — teachers and authorized school administrators may access student activity, progress, and class-related data within their institution’s use of ViVek;
With linked parents — if a parent account is linked to a student, the parent may see information permitted by the Service for that link;
With service providers — hosting, email, AI, and analytics vendors who process data on our behalf under confidentiality obligations;
For legal reasons — when required by law, court order, or governmental request, or to protect rights, safety, and security;
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to continued protection of your information.

We do not publicly disclose your private chat content except as you choose to share it (for example, by exporting a file).

7. Data retention

We retain information for as long as your account is active and as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Retention periods may vary by data type:

Account and profile data — until you delete your account or we delete it in accordance with school or platform policy;
Chat history and generated content — until you delete it using in-app tools, your account is removed, or a longer retention period is required by your school;
Server logs and security records — typically for a limited period unless needed for investigation;
Google OAuth tokens for optional integrations — until you disconnect the integration in ViVek or revoke access in Google Account settings;

In Settings → Account & Privacy, you can clear conversation history and delete generated content associated with your account. Account deletion requests can be sent to us using the contact details below.

8. Security

We use administrative, technical, and organizational measures designed to protect information, including access controls, encrypted connections (HTTPS) in production, hashed passwords, and restricted access to production systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

Depending on where you live, you may have rights to:

Access, correct, or update your profile information in the app;
Delete chat history and generated content through privacy settings;
Disconnect optional Google integrations (for example Drive, Classroom, Gmail, Forms, or Calendar) where the Service provides a disconnect control;
Revoke Google account access from your Google Account security / permissions settings;
Request account deletion or a copy of your data by contacting us;
Object to or restrict certain processing where applicable law provides those rights.

If you are in India, you may also have rights under applicable Indian privacy law, including the Digital Personal Data Protection Act, 2023, to the extent it applies to our processing.

10. Children’s and students’ privacy

ViVek is built for school-age learners. We do not knowingly permit children to create standalone accounts without appropriate school or parental involvement where required.

Students typically access ViVek through school-managed accounts or signup flows coordinated with their school. Parents may link to a student using the student’s authorized UID. If you believe we have collected personal information from a child without proper authorization, contact us and we will take appropriate steps to review and delete it.

11. International data transfers

ViVek is operated from India. If you access the Service from outside India, your information may be processed in India and in other countries where our service providers operate (for example, the United States for certain AI APIs). We take steps designed to ensure appropriate safeguards when data is transferred internationally.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes may also be communicated through the Service or by email where appropriate. Continued use after an update means you accept the revised policy.

13. Contact us

For privacy questions, data requests, or concerns, contact us at: