Privacy Policy

Last updated: June 2, 2026

This is the plain-English version of how Samajha handles your personal data. If you signed up on samajha.com, used the Samajha tutoring app at app.samajha.com, or interacted with any Samajha ad, this policy applies to you. We've written it without legalese. If anything is unclear, write to karan@samajha.com and we'll fix it.

Who we are

Samajha is a voice-first AI tutoring product for Indian school students, operated by the founder Karan Thapar. References to “we,” “us,” or “Samajha” in this policy mean the same entity.

Our website is samajha.com. You can reach us at karan@samajha.com.

What we collect from you

When you fill out the form on samajha.com, we collect:

  • Your first name (so our founder can address you by name)
  • Your mobile number (so we can WhatsApp you)
  • Whether you're a parent or a student, your child's (or your own) board, class, subjects of interest, and the specific learning struggles you selected
  • Your preferred language for the conversation (English / Hindi / Hinglish)

We also automatically collect basic technical data when you visit the site: your IP address, browser and device type, the page that sent you to us, and anonymous cookies set by analytics providers (see “Third-party services” below). None of this technical data is used to identify you personally unless you also submit the form.

What the app collects

If you create an account and use the Samajha tutoring app at app.samajha.com, we collect more than the landing-page form, because the app is a personalised tutor that has to remember the student:

  • Your name and email address, and a password (stored only as a salted one-way hash — we never see or store it in plain text), plus the student's class and board.
  • The conversations the student has with the tutor — text and voice — so the tutor can teach, follow up, and stay on syllabus.
  • Learning and progress data — which topics the student has practised, where they're strong or struggling, proficiency over time, and similar signals we use to personalise the tutoring and produce progress summaries.

We use this data only to provide and improve the tutoring service for that student. We do not use it for advertising, and we do not train our public AI models on private tutoring sessions.

Why we collect it

Short version: to have a conversation with you about whether Samajha is a fit for your child, and to improve the product.

Specifically:

  • To contact you. Our founder personally sends you a WhatsApp message within 24 hours of your submission, from a U.S. number. This is the only reason we ask for your phone.
  • To understand product-market fit. Your answers about board, class, subjects, and pain points help us decide who to build for and what to build next.
  • To measure ad effectiveness. We pass anonymous signals (like a hashed version of your phone number) back to Meta so we can tell which ads worked. The hash is one-way — Meta cannot reverse it into your actual number. If you didn't click an ad, this doesn't apply to you.
  • To comply with the law. We keep records of your consent for as long as the law requires us to.

We do not sell your data to anyone. We do not share it with tutoring companies, coaching institutes, data brokers, or anyone outside the vendors listed below.

Third-party services we use

To run the site we rely on a small number of third-party services. Each has its own privacy policy — links below.

  • Vercel — hosts the website. Vercel privacy policy
  • Supabase — stores your form submission in a Postgres database inside AWS. Supabase privacy policy
  • PostHog — product analytics. Captures anonymous page views, clicks, and session replays. PostHog privacy policy
  • Meta (Facebook / Instagram) — if you arrived from one of our ads, Meta's pixel records the click and the conversion. We send Meta a SHA-256 hash of your phone number so it can close the loop on ad measurement. Meta privacy policy
  • Slack — our founder gets a Slack notification when you submit the form so he can WhatsApp you quickly.
  • WhatsApp (Meta) — the 1:1 conversation itself happens on WhatsApp. WhatsApp privacy policy

How long we keep your data

Form submissions are kept indefinitely while Samajha is active, because the decision to become a customer can take months and we want context when you come back to us. If you'd like your data deleted before then, email karan@samajha.com and we'll remove it within 30 days.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

  • Ask us what personal data we hold about you
  • Ask us to correct inaccurate or incomplete data
  • Ask us to delete your data
  • Withdraw your consent at any time (future processing stops)
  • Nominate someone to act on your behalf
  • Complain to the Data Protection Board of India

To exercise any of these rights, write to karan@samajha.com. We'll respond within 30 days.

Children's data

Samajha is built for school students, and under India's DPDP Act anyone under 18 is treated as a child. Many of our students are under 18, so we treat parental consent as a requirement, not an afterthought.

The landing-page form on samajha.com is filled out by an adult (a parent, or a student who is 18+).

In the app, when a student creates an account they confirm at sign-up that they agree to our Terms and this Privacy Policy, and that — if they are under 18 — a parent or guardian has reviewed them and consents to Samajha collecting the student's name, learning conversations, and progress data to provide tutoring. When an account moves to a paid plan, we capture the parent or guardian's consent directly as part of payment, since the paying adult is the parent or guardian.

We do not show advertising to children or use a child's learning data for behavioural profiling or ad targeting. If an account is created but never confirms a parent or guardian and never converts to a paid plan, we delete its data within 30 days.

If you believe a minor is using Samajha without parental consent, email us and we'll delete their data within 30 days.

Security

All data is transmitted over HTTPS. Form submissions are stored in Supabase with row-level security enabled; only our server-side code with the service role key can write to or read the table. App passwords are stored only as a salted one-way hash — never in plain text. We don't store credit card numbers, bank details, or government IDs; when paid plans go live, card and UPI details are handled directly by our payment processor, not stored by us.

Grievance officer

As required under the IT Rules, 2021 and the DPDP Act, our designated grievance officer is:

Karan Thapar

Email: karan@samajha.com

Response time: 30 days or sooner.

Changes to this policy

If we change this policy in a way that affects how we handle your data, we'll update the “Last updated” date at the top and, for material changes, email everyone whose phone number is on file.