Who we are
NYGTLYF is an AI powered self study and learning platform operated by Nygtlyf Private Limited, a private limited company incorporated in India with its registered office in Maharashtra. The registered office address is published on our contact page.
For the purposes of Indian data protection law, Nygtlyf Private Limited is the data fiduciary for personal data processed through the platform, and decides how and why that data is used. This policy applies to the website at nygtlyf.com and to the NYGTLYF platform itself.
NYGTLYF is sold directly to students. We do not licence the platform to schools or coaching institutes, and no school, institute or teacher receives access to a student account as a result of that student using NYGTLYF.
What we collect
We collect only what the learning engine needs in order to work. There is no location tracking, no access to contacts, and no requirement for a camera or microphone.
Account information
- The student's name and the email address used to receive login details and service messages.
- Class or grade, board or syllabus, and the list of subjects selected. These determine how explanations are written and how the ladder is sequenced.
- Where a parent account is linked, the parent's name and email address.
- Plan and billing status. Card details are handled by our payment processor and are never stored on our systems.
Learning information
- Diagnostic results and the ladder position they produced.
- Ladder and mastery state: which concepts are mastered, flagged for review or locked, and the history of those changes.
- Practice attempts, including answers submitted, working where it is shown, the classification of any error, the difficulty level of the question and the time taken on it.
- The text of doubts asked and the explanations returned, for as long as needed to hold the thread and identify the sub skill involved.
- Active study time. Idle time is discarded rather than recorded, because a figure that counts an open tab as study is not useful to anyone.
Technical information
- Sign in events, including time and approximate region derived from IP address.
- Device type, operating environment and browser version.
- Error traces and diagnostic logs generated when something fails.
Information you send us directly
- What you submit through the sign up form and the contact form on this website, including the message content and any class, board or subject context you provide.
Why we use it
Each use below maps to a specific function of the product.
- To create and run your account. Sending login details, authenticating you, and keeping your subject list and plan current.
- To write explanations at the right level. Class and board are used so that a Class 10 answer does not reach for a Class 12 shortcut.
- To sequence your learning path. Diagnostic and practice evidence decide which concepts appear on your ladder and in what order, including inserting prerequisites from earlier classes.
- To generate practice. The sub skill that a doubt or a wrong answer reveals is used to generate the next set of questions.
- To adjust difficulty. Accuracy, error type and time on question are used to move the level within a session.
- To report progress. Mastery figures, flagged concepts and study time are shown to you, and to a linked parent account within the limits set out below.
- To keep the service secure and working. Technical logs are used to detect abuse, investigate faults and protect accounts.
- To answer you. Contact form submissions are used to reply and for nothing else.
We do not use learning data to build advertising profiles, we do not sell or rent personal data, and we do not use a student's weak concepts to target marketing at that student or their parent.
Student and parent accounts
A parent account is linked to a student account. It is never the other way round, and the student can see that the link exists for as long as it is active.
A linked parent account can see concepts mastered, concepts currently flagged for review and for how long, difficulty level reached, active study time by subject and day, study streaks, and the outcome of the starting diagnostic.
A linked parent account cannot see the text of any doubt the student asked, the explanations returned, individual wrong answers, the working behind them, how many times a step was re asked, or how long any single question took.
This restriction is applied where the data is read, not through a preference setting. There is no configuration on either side that exposes session contents to a parent, no plan on which they become visible, and our support team cannot retrieve them on request. A student always has access to everything a linked parent account can see, so there is no view of a student that is hidden from that student.
Children's data and consent
NYGTLYF is used by school age students, so we treat the data we hold as children's data by default and apply the additional care that Indian law requires for it.
- Where a student is below the age of eighteen, the account is expected to be created by, or with the knowledge and consent of, a parent or lawful guardian. The sign up form accepts a parent email address for exactly this reason.
- We do not undertake tracking, behavioural monitoring for advertising, or targeted advertising directed at children.
- We do not process children's data in a way that we assess to be likely to cause a detrimental effect on their wellbeing. The deliberate absence of aggressive streak mechanics and of late evening notifications is part of that assessment.
- A parent or guardian may ask us to correct or delete a student account at any time, using the process in the rights section below.
How long we keep it
Retention is bounded by category rather than left open ended.
- Account information: kept while the account is open, and deleted on account deletion.
- Ladder and mastery state: kept while the account is open, because it is the record of learning the product exists to maintain.
- Doubt text and explanations: kept for ninety days, then reduced to the sub skill signal derived from them. The transcript is removed and the useful learning signal survives.
- Practice attempts and working: kept for twelve months, then aggregated into mastery figures.
- Technical logs: kept for thirty days.
- Billing records: kept for as long as tax and accounting law requires us to keep them.
- Contact form submissions: kept for as long as needed to resolve the matter raised, and then for a reasonable period as a record of the exchange.
Who we share it with
We share personal data only with service providers who process it on our instructions, under contract, and only to the extent needed for their function. The categories are:
- Cloud infrastructure and managed database hosting.
- Model providers that process the text of a doubt in order to generate an explanation or a practice question. See the section below.
- Email delivery for login details, service messages and replies to you.
- Payment processing for paid plans.
- Error monitoring and diagnostics.
We may also disclose personal data where we are legally required to do so, or where it is necessary to protect the safety of a person or the security of the service. If the company is ever involved in a merger, acquisition or transfer of assets, personal data may transfer as part of that, and this policy will continue to apply to it until it is replaced by one that is no less protective.
We do not share personal data with advertisers, data brokers, schools or coaching institutes.
AI processing of doubts
Generating an explanation or a practice question involves sending the relevant content to a language model. You should understand three things about that.
- What is sent. The doubt or question content, together with the context needed to pitch the answer correctly, such as class, board and the concept in question. We do not send your name or email address as part of that content.
- Training. We use model providers on terms that do not permit your content to be used to train their general purpose models.
- Accuracy. AI generated explanations can be wrong. Where you believe an explanation or a generated question is incorrect, please report it through the contact form, because that is how the engine improves.
How we protect it
All traffic to and from the platform runs over TLS. Stored account data, ladder state and session records are encrypted at rest by the managed database and storage services we operate on. Internal access to production data is role based, restricted to the smallest number of people needed to run the service, and logged.
We do not currently hold an independent ISO 27001 certificate or a SOC 2 report, and we do not describe our infrastructure providers' certifications as our own. Our current posture is set out in plain terms on the security page.
No system is perfectly secure. If we become aware of a personal data breach affecting you, we will notify you and the relevant authority as required by law.
Your rights
These are available on every plan, including the free tier, and you do not need to give a reason.
- Access. Ask for confirmation of what we hold about you and a summary of how it is processed and shared.
- Export. Ask for a machine readable copy of your account details, ladder state and mastery history.
- Correction. Correct inaccurate or incomplete details. Changing a class triggers a fresh diagnostic rather than reusing an old placement.
- Deletion. Ask us to delete the account. This removes account details, ladder state, session records and practice history. Aggregate figures that cannot identify you may remain, technical logs age out on their own thirty day cycle, and records we must keep for legal reasons are retained for that period only.
- Withdraw consent. Where processing rests on consent, you can withdraw it. Some withdrawals mean the service can no longer function, and we will say so clearly rather than degrade it silently.
- Unlink a parent account. Either side can ask for a link to be removed, and removal is visible to both.
- Nominate. Nominate another person to exercise these rights on your behalf in the event of death or incapacity.
Requests can be raised from within the account or through the contact form. We acknowledge requests promptly and action them within thirty days. We may need to verify that a request genuinely comes from the account holder or their parent or guardian before acting on it.
Cookies and local storage
This website does not run advertising cookies, third party trackers or analytics that profile you across other sites.
- Strictly necessary. The platform sets a session cookie to keep you signed in, and uses local storage to hold interface state such as a partially completed practice session.
- Form protection. The sign up and contact forms present a short arithmetic check, generated in your own browser and verified again on our server, to confirm that a submission is not automated. It sets no cookie and carries no information about you.
- Fonts. Display and body typefaces are loaded from font delivery services, which receive the request as part of serving the file.
Where data is processed
We aim to process and store personal data in India wherever the service allows it. Some of the service providers described above operate in other jurisdictions, which means limited processing may take place outside India. Where that happens we rely on contractual protections with those providers, and we restrict what is sent to the minimum needed for the function concerned.
Changes to this policy
If we change how personal data is handled in a way that materially affects you, we will tell you by email to the address on the account before the change takes effect, and we will not apply a materially less protective policy to data already collected without saying so directly.
Deliberately, this page carries no revision date banner. A date does not tell you what changed. If something changes that matters, you will receive an email that explains what it is.
Raising a concern
If you are unhappy with how your personal data has been handled, write to us through the contact form and select the privacy or data request topic. Mark it as a grievance and it will be treated as one.
We will acknowledge it, tell you who is looking at it, and respond with an outcome. If you remain dissatisfied, you are entitled to escalate the matter to the relevant data protection authority in India.
Correspondence can also be sent to the registered office of Nygtlyf Private Limited, the address for which is published on the contact page.