An independent service by BYTETRIC
Curiloom is an independent service created and operated by BYTETRIC. It is not affiliated with, endorsed by, or part of the Government of India, any State Government, PARAKH or NCERT.
Who handles your information
BYTETRIC, a sole proprietorship in India, creates and operates Curiloom. In this policy, “we”, “us” and “our” mean BYTETRIC. Contact support@bytetric.com for privacy questions, concerns or requests about your information.
This policy covers this service. The official Digital HPC portal and other websites you choose to visit have their own privacy policies. We do not receive your official portal login or retrieve student records from that portal.
What we collect and why
- Account information
- Your name, email address, account identifier, verification status and sign-in information support your account, access security and account emails. Your password is handled by our authentication provider, Appwrite; it is not included in AI requests or activity records.
- Lesson requests and prepared content
- Your concept, grade, domain or subject, language and activity preferences are used to suggest curriculum matches and prepare activities, assessment questions and rubrics. Requests and their results are stored so you can reopen work and reuse your own recent results.
- Saved activities
- When you save to your account, we store your activity, curriculum selections, edits, timestamps and previous saved versions to provide your private library and protect against conflicting saves. Browser-only saving is described below.
- Service and security information
- Account-linked request identifiers, statuses, usage counts and technical error information help enforce limits, secure the service and investigate problems. Our infrastructure and providers may also process IP addresses, browser details and access logs when handling requests.
- Plans and payments
- We keep your selected plan, subscription and payment references, payment status, paid-period dates and allowance usage to provide access, avoid duplicate charges, handle cancellations and resolve billing issues. Razorpay handles payment details in its checkout; card numbers, CVVs and UPI PINs are not stored in your Curiloom account.
- Support messages
- If you contact us, we receive your email address, message and any information you choose to include so we can respond. Do not send passwords, verification codes or student records.
We do not sell personal information. This service does not currently include advertising trackers or optional analytics. We do not make your activity library public or share your private requests with other teachers.
AI processing and service providers
When you request AI suggestions or an activity draft, we send the lesson details needed for that request, relevant curriculum context and, where needed, the selected or previously suggested ideas to OpenAI. We do not automatically include your account name, email address or password. Information you type into the concept itself may be sent, so keep it free of personal or confidential details.
BYTETRIC does not use your private requests or saved activities to train an AI model. OpenAI states that API content is not used for model training by default unless a customer opts in. We request that responses are not stored for later retrieval through OpenAI, but this does not remove its separate safety or legally required retention. Its default abuse-monitoring logs may retain content for up to 30 days, with exceptions described in OpenAI’s data controls.
Appwrite provides account authentication and cloud storage for account activities and preparation records. Our current Appwrite project uses its Singapore region. OpenAI and other service infrastructure may process information outside India; this service does not promise India-only storage or processing. See Appwrite’s privacy information for its own practices.
If you open checkout, Razorpay receives the details needed to process and secure your payment, including payment-method and device information you provide there. We use its payment references and confirmed status to manage your plan. Its own handling is described in Razorpay’s privacy policy. Test-mode checkout does not collect real money.
Information is shared with providers as needed to deliver and secure these features, with authorised people handling support, or where disclosure is required by law or reasonably necessary to address fraud, abuse or security incidents.
Cookies and saving in your browser
We use essential cookies to keep you signed in, securely complete email verification or password reset links, and resume a password-confirmed account closure if it is interrupted. Blocking these cookies can prevent account features from working.
“Save on this browser” keeps an activity in this browser’s local storage. It does not save it to your account or to Digital HPC. Browser drafts remain on the device until that site data is cleared and may be accessible to someone using the same browser profile. Signing out does not erase browser drafts.
You can clear this site’s cookies and local storage through your browser settings. Clearing local storage permanently removes browser-only drafts, so copy any work you need first. We cannot remotely clear these copies or copies you paste elsewhere.
How long information stays
- Account details and saved activities: kept to provide your account and library, including saved versions, until you remove them or request removal. Deleting an account activity also removes its saved versions. Account closure removes account activities and preparation content and cancels subscription renewal; limited records described below are retained.
- Temporary preparation content: normally available for up to seven days. Expired request and generated-result text is then eligible for automated cleanup; removal is not instantaneous. Saving an activity to your library creates a separate copy that is not removed by this cleanup.
- Security, usage, billing and support records: retained separately to enforce limits, reconcile payments, resolve issues and meet legal obligations. Limited account identifiers and a protected, non-readable reference derived from your email can remain after closure to prevent resetting the one-time free allowance by registering again. These retained records currently have no fixed automatic deletion period. Ask us about retention or request deletion using the contact below.
- Provider records and backups: may persist under provider retention, backup cycles or legal requirements. Deleting a record from our active service does not guarantee immediate removal from every provider backup.
Your choices and privacy requests
In My account, choose Download my data to export your account details, saved activities, saved versions and retained preparations as JSON. You can delete an account activity from My activities or close your account with password confirmation. Browser-only activities have a separate download and delete option. Closing your account does not erase copies on your device or work pasted elsewhere.
For corrections, additional access or deletion requests, or a privacy complaint, contact support@bytetric.com from your account email. Signing out does not delete your account. We may need reasonable identity confirmation, will explain information we need to retain and respond in accordance with applicable law. You do not need a paid plan to export your data or make a privacy request. Some service features cannot be provided without the information they need.
Your rights under applicable law, including available complaint and legal remedies, are not limited by this policy.
Keep student information out
Curiloom is intended for teachers and other adults aged 18 or over. It is not a student account service and does not need identifiable information about children.
Do not enter student names, roll numbers, photographs, contact details, individual progress records, health information or identifiable disability details. Describe classroom access needs in general terms. If personal information about a child is entered by mistake, contact support@bytetric.com so we can investigate and arrange appropriate removal.
Security and policy updates
We use access controls and account authentication to protect account information and private activities. No online service can guarantee complete security. Use a unique password, keep email links private and report suspected unauthorised access to support@bytetric.com.
We will update the date on this page when this policy changes and give appropriate notice of material changes. Where the law requires a fresh choice or consent, we will seek it. Read our Terms of use for how the service may be used.