Privacy Policy

This Privacy Policy explains what personal data Ziova collects, how it is used, who can see it, and the choices you have over it. It applies to everyone who uses ziova.ai, including students, parents and guardians.

Ziova is operated from India and is governed by Indian law, including the Digital Personal Data Protection Act, 2023.

This policy should be read alongside our Terms & Conditions at ziova.ai/terms.

Ziova is designed for school students in Grades 9 to 12 preparing for university applications, across both Indian and international pathways.

Most Ziova users are under the age of 18. We treat the protection of children’s data as a core obligation, not an afterthought, and this policy sets out specifically how we handle it in Section 07.

We collect only what the platform needs in order to generate personalised guidance. All of it is entered by the student, or generated by the platform from what the student has entered.

Account information — Name, email address, school, grade, curriculum, and expected graduation year.

Profile information — Academic results and predicted grades, subject choices, extracurricular activities, leadership roles, awards, volunteer work, work experience, intended major, and target universities.

Uploaded documents — CVs and school timetables, where a student chooses to upload them. Text is extracted from these to populate the profile.

Guardian information — A parent or guardian email address, provided at sign-up by students under 18, and used as described in Section 07.

Generated content — Profile scores, roadmaps, gap analyses, weekly challenges, and AI Mentor conversations. This is produced by the platform from the information above.

Technical information — Basic sign-in and session data required to keep accounts secure and working.

We do not collect payment information. Ziova is currently free to use.

Your data is used to:

• Generate personalised insights, scores, roadmaps, and recommendations.
• Provide profile-aware guidance through the AI Mentor.
• Display relevant opportunities, deadlines, and university information.
• Send occasional emails about your profile, where you have not opted out.
• Enable parent or guardian access, where a student has chosen to grant it.
• Notify a parent or guardian that an account has been created, where the student is under 18.
• Operate, test, debug and improve the platform.

We do not use personal data for advertising. We do not sell, rent, or trade personal data to anyone, and we never will.

You. Each student’s profile is visible to that student. Access is enforced at the database level, not only in the interface, so no student can see another student’s profile.

A parent or guardian you choose to link. A student may invite a parent or guardian to view their profile. Linked parents see a read-only summary of the profile, progress and suggested next steps. They cannot edit anything. A student can remove a linked parent at any time, and access ends immediately.

Ziova’s operator. Ziova is run by its founder. As the platform’s operator, she can access profile information — including name, email address and profile content — where this is necessary to run the platform, provide support, diagnose problems, and improve the product. This access is used for those purposes only. Profile data is never shared with other students, other schools, or any outside party.

Your school does not get access. Where Ziova runs a session at a school, the school does not receive student profiles, scores, or any individual student data. Students’ profiles remain their own.

Ziova relies on the following service providers, each of which may process data as part of delivering the platform:

Supabase — Database and authentication. Account credentials and profile data are stored here.

Anthropic (Claude API) — AI processing. Profile content is transmitted to Anthropic’s systems in order to generate scores, roadmaps, gap analyses and AI Mentor responses. Anthropic does not use this data to train its models.

Vercel — Hosting and delivery of the platform.

Resend — Sending platform emails, including guardian notifications and profile reminders.

We recommend reviewing their respective privacy policies. We do not permit any of these providers to use your data for their own purposes.

Most Ziova users are minors, and we handle their data accordingly.

Guardian notification at sign-up. Students under 18 will be asked to provide a parent or guardian email address when creating an account. We will send that address a notification explaining that an account has been created, what Ziova collects, and how to have the account removed.

Guardian right to object. A parent or guardian may request deletion of their child’s account and data at any time by contacting hello@ziova.ai. We will action this without requiring the student’s agreement.

No advertising or profiling. We do not use children’s data for advertising, behavioural profiling, or tracking of any kind.

Minimal collection. We collect only the information needed to generate the guidance the platform provides.

School sessions. Where Ziova is introduced through a school, the school’s own consent and safeguarding processes apply in addition to the above, not instead of them.

We retain your personal data for as long as your account remains active.

If you delete your account, or ask us to, we will delete or anonymise your personal data within 30 days, except where retention is required by law.

You have the right to:

• Access the personal data Ziova holds about you.
• Request correction of anything inaccurate.
• Request deletion of your account and all associated personal data.
• Withdraw consent to processing, subject to any legal obligation we have to retain data.
• Ask a question or raise a concern about how your data is handled.

To exercise any of these rights, email hello@ziova.ai. We respond to all requests within 30 days.

Parents and guardians may exercise these rights on behalf of a student under 18.

We may ask for information to verify a request before acting on it.

Access to student data is enforced at the database level through row-level security, so the database will not serve one student’s data to another.

Data is stored on encrypted infrastructure provided by Supabase.

As set out in our Terms, Ziova is in a demo and beta testing phase and cannot guarantee the level of security and stability that will be in place at full launch.

We may update this Privacy Policy as the platform develops. Where changes are material, we will notify users by email or through a notice on the platform.

A final Privacy Policy will be issued prior to Ziova’s public launch.

For any question, concern, or request relating to your data:

Email hello@ziova.ai
Website ziova.ai