Privacy Policy — Dheya

Last updated: 28 September 2026

Dheya Career Mentors (India) Private Limited ("Dheya", "we", "us", or "our") operates the Dheya learning platform available at https://lms.dheya.com and the Dheya Learner Android application, package name ai.dheya.learner.

This Privacy Policy explains what information we collect, how we use it, how it may be shared, and the choices available to you when you use the Dheya platform or application.

1. Information We Collect

1.1 Account and Profile Information

When you create or use a Dheya account, we may collect information such as:

• Name
• Email address
• Mobile number
• Account credentials and authentication information
• Profile information that you choose to provide
• Information identifying your school, college, institution, programme, batch or group where applicable

Passwords are not stored in plain text.

1.2 Learning and Assessment Information

When you use Dheya, we may collect information relating to your learning activity, including:

• Courses or programmes you are enrolled in
• Lessons and learning progress
• Assessment, quiz and test responses
• Scores and results
• Assignments and submissions
• Certificates and certificate-related information
• Points and leaderboard information where enabled
• Course reviews, feedback and discussion activity
• Other information that you voluntarily submit through the platform

Where Dheya is provided through a school, college, institution, organisation or programme, relevant learning and assessment information may be associated with that institution or programme.

1.3 Information Provided by Institutions

If you access Dheya through an educational institution, organisation, programme or authorised administrator, that organisation may provide information necessary to create or manage your learner account.

This may include your name, contact information, institution, programme, batch, enrolment information and other information required to provide the learning service.

1.4 Technical Information

When you use the website or application, technical information may be processed as necessary to operate and secure the service.

This may include:

• IP address
• Browser or application information
• Operating system information
• Device and network information
• Authentication and session information
• Security and error information

We use such information primarily to operate, maintain and secure the platform.

1.5 Android Application

The current Dheya Learner Android application does not request access to:

• Location
• Contacts
• Camera
• Microphone

The current Android application also does not use advertising SDKs or third-party analytics SDKs for advertising or behavioural profiling.

Push notification functionality is currently disabled in the Android application.

The Android application primarily acts as a secure client for the Dheya learning platform.

2. How We Use Your Information

We use information for purposes including:

• Creating and managing your account
• Authenticating users and maintaining account security
• Providing access to courses and learning content
• Tracking learning and assessment progress
• Recording assessment responses and results
• Providing certificates and enabling certificate verification
• Providing institution-specific learning services
• Displaying points or leaderboard information where applicable
• Providing customer and technical support
• Maintaining and improving the platform
• Detecting, preventing and investigating fraud, misuse and security incidents
• Complying with applicable legal and regulatory requirements

We do not sell your personal information.

We do not use learner information for targeted advertising.

3. Institution and Administrator Access

If you use Dheya through a school, college, institution, organisation or other programme, authorised administrators of that organisation may be able to access information necessary to administer the programme.

Depending on the configuration of the programme, this may include:

• Your name
• Contact information
• Enrolment information
• Course participation
• Learning progress
• Assessment results
• Points or leaderboard information

The information available to an institution is limited to information relevant to administering its Dheya programme.

4. Leaderboards

Some Dheya programmes may use points, rankings or leaderboards as part of the learning experience.

Where a leaderboard is enabled, other participants may be able to see information such as your name and points or ranking.

Institutions may configure whether such features are used for their programme.

5. Certificates

Dheya may issue digital or electronic certificates for completed courses, programmes or assessments.

Certificate verification may require information such as a certificate number or verification identifier.

Information made available through certificate verification is limited to what is necessary to verify the authenticity of the certificate.

6. Communication

We may use your contact information to send service-related communications, such as:

• Account-related messages
• Login or authentication messages
• Password or account recovery messages
• Enrolment information
• Course-related communications
• Certificate-related communications
• Important service or security notifications

These messages may be sent by email and, where you have provided a mobile number, by WhatsApp.

These communications are service communications and are not intended to constitute targeted advertising.

7. Third-Party Service Providers

We may use third-party service providers to operate and support parts of the Dheya platform.

These providers may provide services such as:

• Cloud hosting and infrastructure
• Database and backup infrastructure
• Email delivery
• WhatsApp business messaging
• Authentication or security services
• Payment processing, where applicable
• Other technical services required to operate Dheya

Where a service provider processes personal information on our behalf, the provider is expected to process that information only for the relevant service and in accordance with applicable contractual and legal requirements.

We do not permit service providers to use learner information for their own unrelated advertising purposes.

8. Payments

Where paid services or courses are offered, payment processing may be handled through a third-party payment service provider.

Payment-card or banking credentials are not intended to be stored directly by the Dheya learning application unless explicitly stated at the time of the transaction.

The payment provider may process payment information in accordance with its own privacy policy and applicable requirements.

9. AI and Automated Features

If Dheya provides AI-assisted learning or other AI-powered features, information submitted to those features may be processed to provide the requested functionality.

We will use such information only for the purposes disclosed to the user and will apply appropriate safeguards to information processed through such features.

AI-related functionality may change over time. Where an AI feature involves additional categories of personal information or a third-party AI service, the applicable disclosure will be updated as required.

10. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or destruction.

These measures may include:

• HTTPS/TLS encrypted communication
• Secure authentication mechanisms
• Password hashing
• Access controls
• Server and database security controls
• Monitoring and operational safeguards

However, no internet-based service can guarantee absolute security.

11. Data Retention

We retain personal information for as long as reasonably necessary to:

• Provide the Dheya services
• Maintain your account
• Maintain learning and assessment records
• Provide certificates and verification
• Meet contractual, legal, regulatory or security requirements
• Resolve disputes and enforce our agreements

When information is no longer required for these purposes, we will delete it, anonymise it, or otherwise handle it in accordance with applicable law.

Backup systems may retain information for a limited period while backups are rotated or securely deleted; database backups are overwritten within 30 days.

Payment and invoice records for paid orders may be retained for up to 8 years where required by law, including after an account is deleted.

12. Account Deletion

You may request deletion of your Dheya account and associated personal information.

You can initiate deletion through:

Dheya application:
Profile → Delete my account

You may also use the external account-deletion page:

https://lms.dheya.com/delete-account.html

When an account deletion request is processed, we will delete or anonymise personal information associated with the account, subject to information that we are required or permitted to retain for legal, security, fraud-prevention, financial, regulatory or other legitimate purposes.

Deleting the application from your device does not by itself delete your Dheya account.

13. Children's Privacy

Dheya may be used in educational programmes involving students who are under 18.

Where personal information of a child is processed, Dheya will apply the safeguards and consent requirements applicable under relevant law.

Where an institution is responsible for administering a learner programme, the institution may provide or facilitate the information and consent required for participation, where applicable.

We do not use children's personal information for targeted advertising or behavioural advertising.

14. Your Rights and Choices

Subject to applicable law, you may have rights relating to your personal information, including the ability to:

• Request information about personal data processed about you
• Request correction of inaccurate or incomplete information
• Request deletion of your account and personal information
• Withdraw consent where processing is based on consent
• Raise a question or grievance concerning the processing of your personal information

Requests may be subject to reasonable verification to protect account security and prevent unauthorised requests.

15. Privacy Contact

For privacy questions, data requests or concerns regarding this Privacy Policy, please contact:

Dheya Career Mentors (India) Private Limited

Email: care@dheya.com

Address: 504 Spectrum Business Spaces, Shivaji Nagar, Modern College Road, off Fergusson College Road, Pune – 411005, Maharashtra, India

If a specific person is designated to respond to privacy or data-protection requests, their contact details will be provided here.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Dheya platform, application, services, legal requirements or data-processing practices.

The latest version will be published at:

https://lms.dheya.com/privacy.html

The "Last updated" date at the beginning of this policy indicates when the policy was most recently revised.

17. Contact

If you have questions about this Privacy Policy or how Dheya handles personal information, please contact us using the privacy contact information provided above.