Privacy Policy
Last updated: November 2026
This Privacy Policy explains what personal data Master Scan collects, why, who handles it, and how long it is kept. It applies to students, parents and guardians, and anyone else using the Service.
Our purpose
Master Scan collects education data only: what a student answers, which topics are strong and which need work, and the study activity that follows. We use it for one purpose: to diagnose a student's learning and help the student reach the next level, and to keep that service accurate and secure. We do not use it for advertising or marketing, we do not sell it, and we do not use it for any purpose unrelated to the student's learning.
1. What we collect
| Data | Why |
|---|---|
| Name, email/username, password (hashed) | Account creation and login |
| Class/grade, board, subjects enrolled | To route you to the right curriculum content |
| Practice / DeepScan answers and study activity | To measure mastery and generate your personalised study plan |
| Your answers to the optional "Tell us about yourself" questions | To tailor how your report speaks to you; they are your own view, never a test result |
| Parent or guardian email (only if you invite a parent) | To give that parent their own read-only login |
| Payment/subscription amount and status | Billing -- card/UPI details themselves are handled by our payment partner, never stored by us |
| Basic device/browser information and technical error details | Security and service reliability |
2. How your data is used
Your diagnostic answers and study history are used to power the Service itself -- determining what you already know, what to teach next, and what your personalised study plan should contain. We do not sell personal data to third parties.
3. Service providers: who handles what
We use a small number of providers. Each one receives only what it needs for its job.
| Provider | What it does for us | What it receives |
|---|---|---|
| AI providers | Write questions, grade answers and write your report and study plan, using our knowledge base of curriculum content | The class, board and subject, the question, and the text of your answer, with a random reference code instead of your student id. Never your name, email, payment details, contact details or the private words you type in the "Tell us about yourself" step |
| Our database and knowledge base | Store your account, answers, reports and progress, and the curriculum content the questions come from | Everything described in section 1, protected by per-tenant row-level access control |
| Railway | Hosts our servers and database | Everything stored in our database (section 1). Hosted in the United States (San Francisco) |
| Sentry (EU region) | Tells us when something breaks so we can fix it | Technical details of a fault, such as the page address and the error message |
| Resend | Sends account emails (confirm your address, reset your password, notices) | The recipient's email address and the message |
| A search service | Looks up trusted explanations for school topics in the learning library | Search words about a school topic, never student data |
The AI providers act strictly as data processors under their own confidentiality and data-handling terms, and we do not allow them to use your data to train models available to other users. Because our hosting and some providers are outside India, your data may be processed outside India. Voice features are switched off.
Document Intelligence
Documents you upload to Document Intelligence are analysed to produce your report, using third-party AI providers that may process the text outside India under their own data-handling terms. Master Scan does not keep your private legal and business content for itself: it is never added to our shared knowledge base, never used to train anything, and you can delete any document and its report completely at any time.
4. Data retention and backups
Diagnostic and mastery data is kept for as long as your account is active, so your learning history stays continuous. If you ask us to delete your account, we delete it from the live system within 30 days. We also take a backup of our database every week; backups are kept for up to two months and are stored privately, and they contain the same data as the live system, so your data leaves the backups when they roll off, within about two months of your request.
5. Children's data and parent or guardian access
Master Scan is used by school-age students. For a student under 18 we ask that a parent or guardian has read this Policy and the guardian note on the signup page and agrees to the student using Master Scan; at signup the person creating the account confirms this, and we record the confirmation with its date. A parent or guardian can ask us at any time to see, correct or delete the student's data (section 6).
Parent or guardian access
A student can invite one parent or guardian. That person gets their own login and can see a short summary of the student's DeepScan, the weekly activity and what needs support. They cannot change anything, and the student can remove the access at any time.
6. Your rights
You may request a copy of your personal data, ask for corrections, or request account deletion by contacting us at the email below. We will respond within a reasonable time and in line with applicable law.
7. Security
Passwords are stored using industry-standard one-way hashing, never in plain text. Access to student data is restricted to what each system component genuinely needs to function -- enforced at the database level via per-tenant row-level access control, not only in application code.
Who at Master Scan can see your reports
A small number of authorised Master Scan staff can open your scan results and DeepScan reports, to check that the reports are accurate, to help you when you ask for support, and to improve the product. Every time a staff member opens a student's report, the view is recorded in an access log. Staff do not open the private words you type in the "Tell us about yourself" step: only you see those. Reports are never shown to other students, and we do not sell them.
8. Changes to this Policy
We may update this Policy from time to time; material changes will be reflected here with a new "last updated" date.
9. Contact
Privacy questions or requests can be sent to support@masterscan.in.