Your child's data, explained simply
We wrote this page for parents — not lawyers. No 40-page legalese. Just clear answers to the questions you actually have.
We never sell student data — not to advertisers, not to anyone
Data encrypted in transit and at rest (TLS + AES-256)
DPDPA 2023 compliant — India's student data protection law
What information do we collect?
We collect the minimum needed to make the platform work.
We do not collect: home address, phone number, Aadhaar, payment details of students, or any biometric data.
Who can see your child's data?
Their teacher
Can see / do
- See test scores and topic-wise performance
- See name on class roster
- See if the test was submitted or pending
Cannot see / do
- ×See the student's email address
- ×See scores from other teachers' tests
- ×Export a full data dump
Other students
Can see / do
- See a first-name-only leaderboard (optional, can be hidden)
Cannot see / do
- ×See scores, answers, or any personal details of other students
Platform admins (us)
Can see / do
- Access data only to fix bugs or investigate abuse reports
Cannot see / do
- ×Share data with third parties
- ×Use student data for advertising
Parents / guardians
Can see / do
- View their child's score history, weak topics, and streak via the Parent Portal
- Receive a weekly email digest of their child's learning progress — only after giving explicit consent via the consent link sent by the teacher
Cannot see / do
- ×See other students' data
- ×Access the platform or change test settings
Parental consent — under-13 students
For self-registering students in Class 7 or below (typically under 13), we require parental consent before the account is activated.
This is determined automatically by the class the student selects at signup — no self-declaration or date of birth needed. We send a one-click approval link to the parent email provided. The account stays inactive until the parent approves — no personal data is processed until consent is confirmed.
Teachers who create emailless accounts for whole-class use on behalf of students take institutional responsibility for consent, in the same way a school does when purchasing any edtech tool.
Parent weekly digest email
If a teacher has added your email address to your child's record and you have given consent (via the link we send), you can receive a weekly learning summary. It contains:
- Number of tests completed in the past week
- Average score for the week
- Current study streak (days in a row with activity)
- Strongest subject and subject that needs more practice
Consent is required and revocable. Your email is never shared with other parents or students. To stop receiving digests, email support@thecrisp.in and we will remove it immediately.
Students without email accounts
Many students — especially in Classes 5–8 — don't have personal email addresses. Teachers can create accounts for their whole class without requiring any email from students. Here's how it works:
- 1Teacher adds student names to their class on The Crisp.
- 2The system generates a placeholder internal address (never used for sending emails) and a one-time temporary password.
- 3Teacher prints the credential card, showing that placeholder address and password, and hands it to the student.
- 4Student logs in with that placeholder address and password — no personal email required.
- 5If the student later wants to add a real email (to receive score reports), they can do so in their profile.
Deleting an account
Students can request account deletion at any time from their Profile → Delete my account page. Deletion is processed immediately — your name, email, and login are removed and your account is deactivated the moment you confirm.
What gets deleted immediately: name, email, avatar, and all other personally identifiable profile fields — your login is invalidated and cannot be recovered. What gets kept (anonymised, no longer linked to your identity): your test attempts, answers, and scores, so the class-level statistics teachers rely on for curriculum planning stay accurate.
Parents can request deletion on behalf of a minor by emailing us at privacy@thecrisp.in.
How we protect data
Encrypted in transit
All data travels over HTTPS/TLS. No plain-text connections.
Encrypted at rest
Database-level encryption on all stored records.
Row-level security
Database rules enforce that teachers can only read their own classes.
No password storage
We never store raw passwords — only salted hashes via Supabase Auth.
Secure cloud infrastructure
Hosted on Supabase with SOC 2 certification. We are working towards India-region storage as DPDPA guidance is finalised.
No third-party ad tracking
We do not embed Google Ads, Meta Pixel, or any behavioural tracker.
We never sell student data.
Not to advertisers. Not to data brokers. Not to universities. Not to anyone. Student data is used for one purpose: making The Crisp better for students. That's it. This is a promise, not a policy — it's baked into how we make money (subscriptions, not ads).
Third-party tools we use
A short, complete list of the services the platform relies on.
Supabase
Database and authentication. SOC 2 certified. Data encrypted at rest and in transit. · Data shared: User accounts and test data.
Razorpay
Payment processing for subscriptions — teacher/school plans, and student plans when a student subscribes directly. · Data shared: Name and email of the person paying — no other student data.
Resend
Sending transactional emails (score reports, confirmations). · Data shared: Email address and first name only.
We do not use Google Analytics, Facebook Pixel, Hotjar, or any other behavioural analytics tool on student-facing pages.
Questions or concerns?
You can reach our privacy team at any time:
Email: privacy@thecrisp.in
Response time: We aim to respond within 48 hours, and resolve all deletion or access requests within 30 days as required by DPDPA 2023.
Grievance Officer (DPDPA): Owner, The Crisp, Pune, Maharashtra.
Last updated: May 2026. Compliant with the Digital Personal Data Protection Act 2023 (India).
This page is the plain-language summary. The full Privacy Policy and Terms of Service are also available.
Still have questions? Our FAQ covers the most common parent concerns.