Privacy policy

Last updated 17 October 2026.

This policy covers the Ambiful Worksheets app for iPhone and Android and this website. It says what personal data we collect, why, who else handles it, how long we keep it and what you can do about it. We process personal data under India's Digital Personal Data Protection Act, 2023, and we have written this in plain English so that you can read it.

Who is responsible

Ambiful Solutions Private Limited, House No. 1145, Sector 9, Faridabad, Haryana 121006, India, decides how your data is used (the "data fiduciary" in the Act's words). For any question, request or complaint about your data, write to our Grievance Officer at contact@ambiful.com. We acknowledge a complaint within 24 hours and aim to resolve it within 15 days.

The account belongs to the parent

Ambiful Worksheets is for parents, guardians and tutors. Children do not have accounts and never sign in. For each child you add, we keep only what the worksheets need: a first name and their class (and board). We do not ask for a surname, date of birth, school, photo or anything else about the child. By adding a child you confirm that you are their parent, guardian or tutor and agree to us keeping these details for this purpose.

Children may use the app on your phone, signed in as you, to practise worksheets, read cheat sheets and take part in weekly leagues. From that use we keep only their answers in practice, as described below. Signing in, buying a plan, joining a school class and deleting data are done by the adult account holder. Your email sign-in is how we know an adult is in charge of the account.

What we store

• Your email address, to sign you in with a one-time code and to reach you about your account. If you sign in with Apple or Google, we receive your email address from them (with Apple, possibly a private relay address) and, from Apple, the name you choose to share, which we use only to greet you.
• Each child's first name, board and class, as above.
• The worksheets made for each child: the topic, the questions and answers, the worksheet ID and the date, so you can open and print them again.
• Which questions each child has had, so the app never repeats one. We keep this as a fingerprint of each question (a one-way code), not the question itself.
• Practice on the phone: for each practice or mistake review, which questions were answered right or wrong, the score and the points (XP) earned. From these the app works out the daily streak, badges, chapter stars and the mistakes still to fix. Explanations your child types for AI marking are kept with the verdict and the one-line comment.
• Weekly leagues: a made-up nickname for each child (for example "Speedy Fox 62"), their league, which weekly group they were in and their final place. Other families see only the nickname and the points earned that week, never a name, class or photo. You can switch leagues off under Account; your children then leave this week's league at once.
• Problems you report: the worksheet, the question number and the note you write, if any.
• Your plan (Free or Parent), when a Parent plan renews or ends, and how many worksheets you made today, to apply the daily limits.
• Purchases: if you subscribe, Apple or Google takes the payment; we never see your card or payment details. We receive a record of the subscription (the product, when it started, renews or ends, and whether it is a trial), linked to your account by an internal account number, not your email address.

Your app language (English or Hindi) is saved with your account, so reminder emails come in the same language. The sounds and daily-notification settings stay on your phone.

Reminder emails: we may email you when a streak is about to break, a short weekly summary, and a reminder after a few days without practice, never more than one a day. We keep a record of which reminders we sent. Every email has an unsubscribe link, and you can turn them off in the app under Account.

If you join a school class

Some schools give parents a class code. Nothing here applies unless you enter one on your child's profile. When you do, the teachers that school has named can see, for that child, over the last 30 days: their league nickname, how many worksheets were made and practices done, the share of answers right, points (XP), the streak, the last day they practised, and the chapters they need help with. Classmates see the nickname and weekly points in a class league. The teacher sees your child's first name instead of the nickname only after recording that the parents have agreed. The school never sees your email address or your child's answers. Leave the class at any time on the child's profile: the teacher stops seeing your child straight away. We keep the school's name and city, its teachers' email addresses (to sign them in) and a record of the school's plan.

Collected automatically

• Sign-in and server records: when the app talks to our server, our providers record the time, your IP address and the app making the request. We use these only to keep the service running and secure, for example to stop someone guessing sign-in codes.
• Basic phone details: once a day the app tells our server the kind of phone (for example "Apple iPhone 13 Pro"), the iOS or Android version, the app version and the country set in your phone's settings. We use these only as counts, to see which phones and versions to support. We do not collect any identifier of the phone, your location or your IP address for this.
• We use no advertising identifiers (the app does not request the Android advertising ID), no analytics or tracking tools and no crash-reporting service. The website sets no cookies.
• We do not track you across other companies' apps or websites.

Why we use it

Only to give you the service you asked for: to make worksheets for your children without repeating questions, keep them in your account, apply your plan's limits, send your sign-in codes, check the problems you report, and answer you when you write to us. You give it to us by entering it, and we rely on that consent. You can withdraw it at any time by removing a child or deleting your account; this does not affect what we did before. We never use your data for advertising, and never to decide anything about you or your child.

Worksheets are made by our own code from fixed templates. In practice on the phone, when your child types an explanation that our code cannot mark (a reason, an expression, a sentence), the question, its model answer and what your child typed are sent to an AI service to be marked, and the verdict and a one-line comment are kept with the practice. Nothing else about you or your child is sent: no name, email address, age or account details. The AI service does not use it to train its models.

Where it lives and who can see it

• Your data is stored with Supabase in Mumbai (ap-south-1), and our server runs on Vercel in Mumbai. Each request can only read the data of the account it is signed in as.
• The PDF of a worksheet is made on your phone. When you print or share it, your phone sends it where you choose; we do not keep a copy of what you share.

Services that handle some of it for us

• Supabase stores the data above and runs sign-in.
• Vercel runs our server.
• Resend sends the sign-in code and reminder emails to your email address.
• OpenAI marks the explanations your child types in practice (the question, the model answer and the typed answer only). Under its API terms it does not train its models on this data.
• Apple and Google take payment for a subscription through the App Store or Google Play, under their own privacy policies.
• RevenueCat keeps the subscription records from Apple and Google and tells our server when a plan starts, renews or ends. It receives your internal account number and the purchase records, not your name or email address.

Resend, RevenueCat and OpenAI may process this data outside India, mainly in the United States, under its own security and privacy commitments. We send each provider only what its job needs. The full terms for the subscription are in our terms of use.

How long we keep it

• Your account data: for as long as you use the app. Removing a child deletes their worksheets and question history straight away.
• After you delete your account: nothing, apart from database backups, which are overwritten within 30 days.
• Sign-in and server records: only as long as our providers need them for security and fault-finding.

Your rights

• See your data: it is all on the app's screens; ask us and we will send you a copy.
• Correct it: change a child's name or class in the app (Account → the child), or ask us.
• Delete it: remove a child, or delete your whole account, in the app, or ask us.
• Nominate someone to exercise these rights for you if you die or cannot do so yourself: tell us who by email.
• Complain: write to support@ambiful.com and we will reply within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Write from the email address on your account, so that we know the request is yours.

Keeping it safe

Everything travels over encrypted connections (HTTPS). Only the people who run the service can reach the database, and only to keep it working. No system is perfectly safe: if a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.

What we do not do

• We do not sell your data, or your child's, and we do not share it with anyone: not tutors, coaching centres or advertisers. The one exception is a school class you choose to join with a code, as described above.
• We do not show ads.
• We are not affiliated with CBSE or NCERT.

Deleting your data

Delete your account from inside the app (Account → Delete my account). That removes your login, your children, their worksheets, question history and reports at once. See how to delete your account. If you cannot get into the app, email support@ambiful.com from the address you signed up with.

Changes to this policy

When we change what we collect or how we use it, we update this page and the date at the top. For a change that matters, we also email you before it applies to data you have already given us.