Privacy policy
Last updated 23 October 2026. This is a plain-language draft for launch and should be reviewed by a lawyer before the product takes payments at scale.
Who we are
ExplainCanvas is a learning product for school students in India, operated by its founder (the "operator"). A parent or guardian creates the account; a child uses it under that account.
What we collect
- Account: the parent's email and name from Google sign-in.
- Student profiles: a first name and class level, entered by the parent. No date of birth, address or school is required.
- Questions and photos the student submits, and the explanations we generate for them.
- Check-question answers and streaks, used for the daily parent report.
- Payment records from Razorpay. We never see card numbers.
- Technical logs needed to run and secure the service.
How we use it
- To generate explanations. Questions and photos are sent to our AI providers (Anthropic, and where enabled fal.ai and Google) solely to produce the explanation. They are not used by us to train models.
- To send the parent a daily report by email and the sign-in link.
- To build a shared library: an explanation may be reused for other students only after review and only if it contains no personal content. Uploaded photos are never shared.
- To bill and to prevent abuse.
Children's data
Accounts are created by a parent or guardian, who consents on the child's behalf in line with India's Digital Personal Data Protection Act, 2023. We collect the minimum needed to teach, do not show advertising, do not track children across other sites, and do not sell data.
Where data lives
Our database and file storage run on DigitalOcean in Bangalore, India. Email is sent through Resend. AI providers process requests in their own regions.
Your rights
You can see, correct or delete your account and your child's data by writing to hello@explaincanvas.com. Deleting the account removes chats, photos and reports within 30 days, except billing records we must keep by law.
Retention
Uploaded photos are kept for 90 days, then deleted. Chats are kept while the account exists. Sessions expire after 30 days of inactivity.
Changes
We will post changes here and, for material changes, email account holders.