Privacy Notice

THE FIRST STEP CHARITY (trading as "TFS – The First Step") operates TFS EduVerse – Bharat Exams AI. We are the data controller for the personal data described here, which means we decide why and how it is processed. Contact us at tfsngo@gmail.com for anything relating to your data.

• Account data — name, email, phone number, password credentials, class/grade, stream, target exam, preferred language, state and district. Used to create and secure your account and personalise your dashboard. Legal basis: performance of our contract with you.
• Learning data — study logs, planner tasks, quiz and exam attempts, scores, streaks, notes and bookmarks. Used to deliver progress tracking, report cards and adaptive practice. Legal basis: contract performance.
• AI tutor content — the prompts you send and the responses generated. Used to provide the tutor, apply fair-use limits and improve answer quality. Legal basis: contract performance and our legitimate interest in a reliable service.
• Support messages — the content of enquiries, feedback and volunteer or scholarship applications. Used to respond to you and run those programmes. Legal basis: contract performance and legitimate interests; consent where you volunteer extra information.
• Technical data — IP address, device and browser identifiers, approximate location and usage telemetry. Used for security, abuse and fraud prevention, and product improvement. Legal basis: legitimate interests.
• Marketing preferences — where you opt in to updates. Legal basis: consent, which you can withdraw at any time.

We do not knowingly collect more data than we need, and we do not sell personal data. Where required by law we may also process data to meet legal obligations.

• Service providers and subprocessors: cloud hosting, database and authentication, AI model providers, email delivery and analytics tooling.
• Professional advisers such as legal and accounting support, where necessary.
• Authorities and regulators where we are required to disclose by law.

Some of our providers process data outside India. Where that happens we rely on appropriate safeguards such as standard contractual clauses and provider security commitments.

Account and learning data are kept while your account is active and for up to 12 months afterwards, so you can return without losing progress. Support messages are kept for up to 24 months. Records needed for tax or legal reasons are kept as long as the law requires. After that, data is deleted or anonymised.

You may request access to your data, correction of inaccurate data, deletion, restriction of processing, portability, or object to processing based on legitimate interests. Where processing is based on consent you may withdraw it at any time. Write to tfsngo@gmail.com and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your local supervisory authority.

We use appropriate technical and organisational measures including encryption in transit, database row-level access controls, authenticated APIs and least-privilege access for administrators. No system is perfectly secure, but we work to protect student data and to respond quickly to any incident.

We use essential cookies and browser storage to keep you signed in, remember your language, theme and text size, and enforce fair-use limits. We may use privacy-friendly analytics to understand how features are used. You can clear or block cookies in your browser settings; essential ones are required for sign-in to work.

The platform is designed for school and competitive-exam learners. If you are below the age of majority in your country, please use TFS EduVerse with the consent and supervision of a parent, guardian or teacher.