Privacy Policy

Last Updated: February 5, 2026

Turnip Innovations Private Limited ("we," "us," or "our") operates the Turnip AI Learning Platform ("Platform"). This Privacy Policy explains how we collect, use, and protect your personal data in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data We Collect

1.1 Information You Provide

• Email Address: Used for account authentication, OTP verification, and sending quiz results when requested.
• Instructor Account Information: Name, email, and organization details for instructors who create content.
• Uploaded Content: Educational materials (PDFs, documents) uploaded by instructors for AI-powered learning experiences.

1.2 Information Collected Automatically

• Quiz/Learning Session Data: Scores, completion status, and learning progress.
• Technical Data: IP address, browser type, device information, and access timestamps for security and analytics.
• Usage Data: Interactions with quizzes, case studies, and AI tutor for improving the platform.

1.3 Information We Do NOT Collect

• Sensitive personal data (health, religion, political opinions, etc.)
• Payment card details (processed securely by Razorpay)
• Location data or contact lists

2. Purpose of Data Collection

We use your data solely for:

• Service Delivery: Generating personalized quizzes, case studies, and AI tutoring based on your content.
• Authentication: Verifying your identity via email OTP.
• Progress Tracking: Allowing instructors to view student learning outcomes (only when authenticated links are used).
• Communication: Sending quiz results, account notifications, and essential service updates.
• Platform Improvement: Analyzing anonymized usage patterns to improve our services.

3. Third-Party Services

We share data with the following third-party services only as necessary to provide our Platform:

• Google Cloud Platform: Hosting, data storage, and infrastructure (servers in India).
• Google Gemini AI: AI-powered content generation for quizzes, case studies, and tutoring. Content is processed but not stored by Google for model training.
• SendGrid: Email delivery for OTPs and quiz results.
• Razorpay: Payment processing for instructor subscriptions (we do not store payment details).

4. Data Storage and Security

• Data is stored on secure Google Cloud servers with encryption at rest and in transit.
• Access to personal data is restricted to authorized personnel only.
• We implement industry-standard security measures including HTTPS, secure authentication, and regular security audits.
• OTP codes expire within 5 minutes and are automatically deleted after use.

5. Data Retention

• Student Data: Quiz scores and learning progress are retained for 2 years or until the instructor deletes the associated content.
• Instructor Data: Account information is retained while the account is active and for 90 days after deletion.
• Uploaded Content: Retained until deleted by the instructor or upon account termination.
• Technical Logs: Retained for 30 days for security purposes.

6. Your Rights Under DPDP Act

As a Data Principal under the DPDP Act, you have the following rights:

• Right to Access: Request a summary of your personal data and how it is processed.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data (subject to legal obligations).
• Right to Grievance Redressal: Lodge complaints regarding data processing.
• Right to Nominate: Nominate another person to exercise your rights in case of death or incapacity.

To exercise any of these rights, contact us at mail@turnipcourses.com.

7. Children's Privacy

Our Platform is intended for users aged 13 and above. Users under 18 should use the Platform under parental or guardian supervision. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately.

8. Cookies

We use essential cookies only for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights, we will notify the Data Protection Board of India and affected users within the timeframe specified by the DPDP Act.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be notified via email or a prominent notice on the Platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.

11. Grievance Officer

For any concerns or complaints regarding your personal data, please contact our Grievance Officer:

12. Contact Us

For questions about this Privacy Policy or our data practices: