Data we hold,
held responsibly.

CodeYogi Foundation ("CodeYogi", "we", "our") is a not-for-profit organization working with school-age students from low-income backgrounds to enable early, equitable access to technology education. We are committed to protecting the privacy, safety, and rights of all learners—particularly children—and to using data responsibly, transparently, and ethically.

Our data governance practices are designed in alignment with the Digital Personal Data Protection Act, 2023 (India) and follow principles of data minimization, purpose limitation, fairness, transparency, and security.

We collect only the minimum data required to deliver and improve our educational services.

Categories of data include:

• Basic student identifiers (e.g., name or pseudonymous ID, school, grade), collected with appropriate consent
• Learning and activity data, such as lessons attempted, assignments completed, time spent, and progress indicators
• Platform interaction data, used to improve usability and learning outcomes
• Device and technical data (e.g., device type, browser), used solely for platform performance and support

We do not collect sensitive personal data (such as health, biometric, religious information) unless explicitly required for a specific program and only with appropriate consent.

Student data is used strictly for educational and operational purposes, including:

• Delivering learning content and practical coding exercises
• Providing feedback, progress tracking, and learning support
• Improving program design and learner experience
• Generating aggregated, non-identifiable reports for partners and funders
• Meeting legal and regulatory obligations

We do not:

• Sell or rent student data
• Use student data for advertising or commercial marketing
• Share identifiable student data with unauthorized third parties

As our programs primarily serve minors, we follow heightened safeguards:

• Consent is obtained through schools, or authorized guardians, as applicable
• Consent is informed, specific, and revocable
• Parents or guardians may request access, correction, or deletion of their child's data

Official contact for data requests: hr@codeyogi.org

AI systems are used to support learning (e.g., feedback, nudges, moderation), not to make high-stakes decisions.

We ensure:

• No automated decisions that materially harm or exclude learners
• Human oversight over AI-driven interventions
• Regular review to reduce bias, hallucinations, or unfair outcomes
• Clear separation between learning data and any evaluation or reporting used externally
• AI outputs are designed to be supportive, non-punitive, and age-appropriate

We use industry-standard safeguards to protect personal data, including:

• Secure servers and encrypted storage
• Role-based access limited to authorized personnel
• Periodic security reviews and audits

Data is retained only as long as necessary for educational purposes and securely deleted thereafter.

In the unlikely event of a data breach:

• We will promptly assess and contain the incident
• Affected users and relevant authorities will be notified as required under law
• Corrective actions will be taken to prevent recurrence

• This policy will be publicly available on our website
• Significant changes will be communicated clearly
• Consent will be re-obtained where legally required

We have a grievance redressal mechanism for data-related concerns.

CodeYogi Foundation's data practices are aligned with the Digital Personal Data Protection Act, 2023, and guided by principles of child safety, fairness, transparency, and ethical AI use.