Privacy policy

Murrics Technology (Ghaziabad, Uttar Pradesh, India) operates Murrics. For a parent's account we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). For a tutor's account we are a Data Processoracting for the tutor, who decides what is collected about their students — section 5 explains what that means for a parent whose child is taught by one. This policy explains what we collect, why, and the choices you have, and forms part of our Terms of use.

About you, the parent

• From Google sign-in: your name, email address and Google account identifier. We do not receive your Google password, contacts or any other Google data.
• If you turn on WhatsApp updates: your mobile number and the time and wording of the consent you gave.
• If you buy a plan: the plan, amount, dates and Razorpay order and payment references. Card, UPI and bank details are collected by Razorpay, not by us.

About your children — entered by you

• First name (or a nickname), class, board and preferred language.
• Photographs or files of answer sheets, homework and question papers you upload, and the text our system reads from them.
• What we derive from that work: marks, feedback, topic strengths and weaknesses, progress over time, practice papers, reports and learning-habit check-ins.

We do not ask for a child's date of birth, photograph of their face, school ID, address or contact details. Please avoid uploading pages that show them.

Technical data — IP address, browser type, and error and security logs, created automatically when you use the Service.

We use your data only to:

• sign you in and keep your account secure;
• read, mark and give feedback on the work you upload, and build your children's reports, progress and practice;
• send you the updates you ask for — email, and WhatsApp if you turn it on — and essential messages about your account and payments;
• take payment, issue invoices and meet tax and accounting law;
• fix problems, prevent abuse, and keep the Service working;
• respond to your requests and grievances.

We rely on your consent, given when you sign up and add a child, and on the legitimate uses the DPDP Act allows, such as complying with law.

Murrics is used by adults, not by children. A child or student has no account and never signs in. When a parent adds a child and uploads their work, they do so as that child's parent or lawful guardian and consent, on the child's behalf, to the processing in this policy.

When a tutor uploads a student's work, the permission comes from that student's own parent, given to the tutor — see section 5.

We do not use children's data for advertising, we do not profile children for marketing, and we do not show them targeted content. The progress and topic analysis we produce is shown only to you, to support your child's learning.

A tutor or coaching centre can use Murrics to mark the work of the students they teach. When they do, the tutor decides what is collected and why, and we act on their instructions — in the words of the DPDP Act, the tutor is the Data Fiduciary for their students' data and we are a Data Processor for them. The tutor is responsible for telling you that an AI service marks your child's work, and for having your permission before uploading it.

So if your child is a tutor's student and you want to see, correct or delete what is held about them, ask the tutor first — the record is theirs to manage. We will help them do it, and we will act ourselves where the law requires.

A tutor may offer you a copy of your child's record for your own account. If you accept, you get your own copy, in your own account: from that moment it is yours, it survives the tutor closing their account, and this policy applies to it exactly as it does to a child you added yourself. You are free to decline, and declining changes nothing about the teaching.

We hold a tutor's students' data for as long as their account is open, delete it with that account, and never use it for anything but running the Service for them. It is never mixed with another tutor's or another family's data.

To read handwriting and suggest marks, the page images and the relevant question and answer key are sent to the AI provider we use at the time — currently Google's Gemini API, which processes them under its own terms. We send only what the evaluation needs: your name, your email and your children's records are never included, although a sheet photographed from school may itself carry your child's name. We never use your child's work to train models of our own, and we never sell it.

If you connect your own AI key, the evaluation runs on your account with that provider and its privacy terms apply to that processing.

Marks are suggestions. A low-confidence answer is held for review rather than marked, and you can dispute any mark from the report.

We never sell or rent personal data. We share it only with service providers who process it for us under contract, and only as much as each needs:

• Google — sign-in, and AI evaluation (Gemini API).
• Razorpay — payments and refunds.
• Our cloud hosting provider in India — servers and databases.
• Cloudflare — secure storage of uploaded files, and network protection.
• Our email provider, and Meta's WhatsApp Business service if you turn it on.

If you create a share link for a report or card, anyone you send it to can see what that link shows until you revoke it. We may also disclose data where Indian law requires us to, for example to a court or a government authority acting lawfully.

Our application servers and databases are in India. Some providers above — notably the AI provider and file storage — may process data outside India. We use only providers bound to protect it, and we will not transfer data to any country the Government of India restricts under the DPDP Act.

• Every account's data is isolated from every other account at the database level.
• Data is encrypted in transit (HTTPS) and at rest; sensitive keys are encrypted separately.
• Uploaded sheets are never public. They open only through short-lived signed links.
• Only a small number of authorised staff can access production systems, and only to support you or run the Service.
• If a personal-data breach affects you, we will tell you and the Data Protection Board of India as the DPDP Act requires.

• Your account, children's records, sheets and reports: for as long as your account is open, so you can look back at them.
• If you remove a child, their records stop appearing and are deleted with your account, or sooner on request.
• When you close your account, we delete your personal data and your children's data within 30 days. Copies in encrypted backups are overwritten within a further 30 days.
• Payment and invoice records: as long as tax and accounting law requires (generally up to 8 years).
• Security and error logs: up to 90 days.

Under the DPDP Act you — and, through you, your child — have the right to:

• get a summary of the data we hold and how it is used, and a copy of it;
• correct or complete it;
• have it erased — for example, delete the sheet photographs while keeping the marks, or close the account entirely;
• withdraw consent at any time (this does not undo processing already done);
• nominate someone to exercise these rights if you die or become incapacitated;
• have a grievance heard.

Some of this you can do in the app — edit or remove a child, revoke share links, turn WhatsApp updates off. For everything else, email support@murrics.com from the address you sign in with. We acknowledge within 48 hours and complete the request within 30 days. Withdrawing consent to core processing means we can no longer mark your children's work, and we will close the account.

We use your browser's storage only for what the Service needs: keeping you signed in, and remembering choices such as the light or dark theme. We use no advertising cookies and no third-party analytics or tracking scripts.

Rajesh Tripathi, Grievance Officer
Murrics Technology, Ghaziabad, Uttar Pradesh, India
Phone: +91 78272 09591
Email: support@murrics.com

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

We will update this policy when what we do changes. The date at the top shows the latest version. For a material change we will tell you by email or in the app before it takes effect, and ask for fresh consent where the law requires it.