Privacy guide

Do edtech apps track students? What we found.

Privacy questions for Indian edtech: student data, parent consent, learning analytics, advertising and vendor tools.

The simple answer

Edtech can collect student names, ages, classes, performance, attention, quiz results, parent details, payment records and communication history.

That data is useful for learning. It is also sensitive because children and parents may not understand how much is being collected or which vendors receive it.

What to check

1
Check whether the platform knows the user is under 18.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

2
Look for parental consent language.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

3
Ask whether learning analytics are used for ads or nudges.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

4
Check LMS, video, payment, email and support vendors.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

From our investigation

Student journeys create detailed data trails.

State of Privacy flags edtech because learning flows can create a record of a child, not just a customer. That makes consent, purpose and retention especially important.

What to do next

1
Ask schools and platforms for vendor lists.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

2
Separate parent data from student data.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

3
Ask how course-completion data is deleted or retained.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

People also ask

Do edtech apps collect children data?

Many do, because the service often needs age, class, parent contact and learning progress.

What is the main risk?

The risk is unclear consent, vendor sharing, profiling and retention of student behavior.

What should parents ask?

Ask what data is collected, who receives it, and whether the child can continue if consent is withdrawn.

If you are a company
Check your own website.

How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.

Talk to Meridian Bridge Strategy →
Your right under Indian law
Mera data mera hai.

Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.

Get the template email →
Read the full investigation.

We investigated 107 Indian company websites. The public report shows what we found.

Read the reportTry the experience