Privacy notice

Effective 13 October 2026 · VKD Industries Private Limited, Lucknow, India

Vidya is a learning and building platform made by VKD Industries Private Limited ("VKD", "we"). This notice says what we collect when you use Vidya at vidya.vkdindustries.com, why, who else handles it, and what you can ask us to do with it. It is written to meet India's Digital Personal Data Protection Act, 2023.

The short version. We keep what you need Vidya to keep (your account, your chats, your files) and use it to run Vidya for you. We do not sell your data and we do not show you ads. We don't use your chats or files to train AI models without asking you first. You can ask us to delete your account and everything in it at any time.

What we collect

Account: your name, email address, password (stored only as a one-way hash), role (student, teacher and so on), and, if you give them, your institution, course, year and department.
Seat and devices: the devices signed in to your seat (a device identifier and a label such as "Chrome on Mac"), and for each sign-in the browser, IP address and approximate city. We use these to keep your seat yours: it works on up to two of your devices, one at a time.
What you make and send: your chats with Vidya, the files you attach, voice you record (turned into text), books you add to your Library, and what you create: documents, code, videos, music, posts, projects, agents and routines.
Learning progress: lessons and courses you complete, and topic-level signals of what you find hard, so Vidya can help you. Sensitive personal topics are filtered out of these signals and never stored.
Usage: how much "fuel" (Vidya's usage points) each request uses, and error reports when something breaks.
Accounts you connect: if you connect Google or Microsoft, the access Vidya needs for the files you choose (see below). If you connect other apps, the settings you give them.

Why we use it

To run Vidya for you: answer your questions, keep your chats and files, build what you ask for.
To keep your account and seat secure and stop seats being shared or misused.
To keep Vidya fair and working: usage limits, fixing errors, preventing abuse.
If your institution gives you your seat: to show the institution combined, anonymous insight into which topics its students find hard. Institutions never see your chats.
To send you emails you need, such as sign-in and password-reset codes.

We process your data because you use Vidya and agree to this notice. You can withdraw that consent at any time by deleting your account (below); that does not affect what was done before.

Who else handles it

We share your data only with the services that run Vidya for us, only what each needs, and under contract:

Third-party AI model providers process your messages, attached files, images and voice to produce Vidya's answers, speech and transcripts, and run the web searches Vidya makes when you ask about current information.
DigitalOcean hosts Vidya's servers and database in Bengaluru, India. Netlify serves the website. Library books are processed on a GPU server we operate.
Brevo sends our emails.
Apps you choose to connect receive what you ask Vidya to send them.

Some of these providers may process data outside India. We may also disclose data where the law requires it.

Google and Microsoft accounts

If you connect a Google account, Vidya asks for your name and email address (to show which account is connected) and access to only the Google Drive files you pick in Vidya or that Vidya saves for you (the drive.file permission). Vidya cannot see the rest of your Drive. We use this access only to bring the files you choose into your chat and to save files you ask Vidya to save. If you connect a Microsoft account, Vidya can read and save files in your OneDrive so you can attach and save them; it opens or saves a file only when you ask.

Vidya's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train AI models, we do not sell it, and we do not use it for advertising. You can disconnect at any time in Vidya's Settings, which also gives the access back to Google, or at myaccount.google.com/permissions.

How long we keep it

Your account, chats and files: until you delete them or your account.
Files you attach to a chat are read and then deleted; videos and songs you bring to edit are held for 7 days.
Sign-in records: while your account exists, so you can see where your seat is signed in.
Deleted data can remain in our backups for up to 30 days, then it is gone.

Your rights

You can ask us to: tell you what data we hold about you; correct or complete it; delete it (your whole account or parts of it); and name someone to exercise these rights for you if you cannot. Email us from your account's address and we will act within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Children

If you are under 18, a parent or guardian must agree to this notice for you. We do not track children for advertising or build behavioural profiles of them.

Security

Data travels encrypted (HTTPS). Passwords are stored only as strong one-way hashes. Our database is not reachable from the internet, and access to production systems is limited to the people who run them. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board as the law requires.

Changes and contact

If we change this notice, we will update the date above and tell you in Vidya before important changes apply.

For questions, requests about your data and grievances, write to our privacy team at team@vkdindustries.com. VKD Industries Private Limited, Lucknow, Uttar Pradesh, India.