Skilltego Privacy Policy

• Account details: your name, email address and password (stored only in hashed form by our authentication provider). We ask for your date of birth at sign-up to confirm you are old enough and whether parental consent is needed; we record only whether you are under 18, not the date itself.
• Profile details: username, profile and cover photos, bio, account type, the country, state and city you enter, website, resume, skills, and any education, experience or social links you choose to add.
• Content and activity: posts, photos, videos, reels, stories, code, documents, comments, likes, saves, follows, messages (including voice notes and attachments), story responses, reports you submit, applications to opportunities, and mentor bookings and reviews.
• Organisation accounts: for company, college and mentor accounts, the information and documents you provide when requesting verification.
• When you contact us: the details you send us, for example in a grievance or support request.

• Device and log data: IP address, browser and device type, operating system, and the dates and times you use the Service, which we use to keep your account secure and the Service working.
• Cookies: essential cookies that keep you signed in and remember your settings (see section 10).
• Notifications: if you turn on push notifications, a notification token for your browser or device.
• Sign-in providers: if you sign in with Google or GitHub, we receive your name, email address and profile photo from that provider.
• Other members: information others provide about you, for example when they mention you, message you, or review a mentoring session.

Device permissions. We only use your camera and microphone when you choose to take a photo or video, record a voice note, or make a call, and only access the files you pick to upload. Skilltego does not access your contacts or your precise location.

Calls. Audio and video calls connect directly between the participants' devices. We do not record or store call audio or video. To set up a call, your device exchanges network information, including your IP address, with the other participant and with Google's public connection (STUN) servers.

• to create and run your account and provide the features of the Service;
• to show your profile and content to others according to your settings, and to help companies, colleges and mentors discover you;
• to personalise your feed and suggest people, content and opportunities;
• to deliver messages, calls and notifications, and to send you important service updates;
• to award and display Skill Coins, levels, streaks and badges;
• to keep Skilltego safe: to detect and prevent fraud, spam and abuse, moderate content, enforce our Terms, and respond to reports and grievances;
• to secure our systems and fix problems;
• to comply with the law, and with lawful requests from courts and government authorities; and
• to understand how the Service is used so we can improve it.

We process your personal data on the basis of the consent you give when you sign up (which you can withdraw, see section 8), and for the legitimate uses permitted under the DPDP Act, such as complying with the law or a court order, or responding to a medical emergency or threat to safety.

• Your name, username, profile photo, bio, skills and public activity are visible to other signed-in members. If you make your account private, only approved followers can see your posts and stories.
• Messages and calls are visible only to the people in that conversation.
• When you apply for an opportunity, the organisation that posted it can see your application and profile.
• Content you share can be seen, and re-shared, by the people you share it with. Please think before you post.

We share personal data only as described here. We use trusted service providers (Data Processors) that process data on our behalf and only as we instruct:

• Supabase: database, authentication, file storage and real-time messaging (hosted in Mumbai, India);
• Vercel: website and app hosting;
• Push notification services run by your browser or device maker (such as Google, Apple or Mozilla), if you turn on notifications;
• Email delivery for sign-up, verification and password emails; and
• Google and GitHub, only if you choose to sign in with them.

We may also share information:

• when the law requires it, or in response to a valid court order or lawful request from a government authority;
• to investigate fraud, abuse or violations of our Terms, or to protect anyone's safety;
• with a buyer or successor if TeachGrow LLP is involved in a merger, acquisition or sale of assets, who must continue to protect your data under this policy; or
• with anyone else, with your consent.

Some of our providers may process data outside India. Where they do, we transfer it only as permitted under the DPDP Act and with appropriate safeguards.

We keep your personal data for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or anonymise your personal data, except where we must keep some of it for longer:

• backup copies, which are overwritten on a rolling basis, typically within 30 days;
• information we are required to retain by law, for example registration information that intermediaries must keep for 180 days after an account is deleted under the IT Rules, 2021, or information needed for a pending investigation or legal claim; and
• content you shared that others still hold, such as copies they saved or forwarded.

We use reasonable security safeguards, including encryption in transit (HTTPS), database access controls that limit each account to its own data, hashed passwords, and access for our team restricted to what their role needs. No online service can be completely secure. If a personal data breach occurs, we will inform the Data Protection Board of India and affected users as required by law.

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how we process it;
• Correct, complete or update your personal data; most of it you can edit yourself in your profile and settings;
• Erase your personal data, for example by deleting your account;
• Withdraw consent at any time. This won't affect processing that already happened, but because the Service depends on processing your data, withdrawing consent generally means we will need to close your account;
• Nominate another person to exercise these rights for you in the event of your death or incapacity; and
• Grievance redressal: complain to our Grievance Officer (section 12).

To exercise any of these rights, email teach@teachgrow.in from the address linked to your account. We may need to verify your identity before acting. If you are not satisfied with our response, you can complain to the Data Protection Board of India once you have used our grievance process.

Skilltego is for people aged 13 and over. Under the DPDP Act, anyone under 18 is a child, so users aged 13 to 17 may use Skilltego only with the verifiable consent of a parent or legal guardian, which we ask for at sign-up.

• We do not track or monitor the behaviour of children for any purpose, and do not direct advertising at them.
• If we learn that a child under 13 has an account, or that a child's account was created without parental consent, we will suspend or delete it.
• A parent or guardian can contact us at teach@teachgrow.in to review, correct or delete their child's data, or to withdraw consent.

We only use essential cookies and similar storage: to keep you signed in, keep your session secure, and remember preferences such as your theme. We do not use advertising cookies or third-party trackers. We do not currently use a third-party analytics service; if we introduce one, we will update this policy first, and it will never be used for users under 18.

We may update this policy as Skilltego evolves or the law changes. We will notify you in the app or by email before material changes take effect, and where the law requires it, ask for your consent again.

For any question, request or complaint about your personal data or this policy, contact our Grievance Officer, who will acknowledge your complaint within 24 hours and resolve it within 15 days: