Why2Wise — Privacy Policy

Effective from: 22 October 2026

1. About this Policy

1.1 This Policy explains how Why2Wise processes personal data in connection with the Platform, in accordance with the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and other applicable law. Capitalised terms have the meanings given in the Terms of Service.

1.2 Why2Wise is identified in Clause 2 of the Terms of Service.

2. Our Role

2.1 Where You use the Platform directly, Why2Wise determines the purposes and means of processing Your personal data.

2.2 Where You use the Platform through an Institute, the Institute may determine the purposes of processing for the data relating to Your enrolment, and Why2Wise processes that data on the Institute's behalf, in addition to processing for the purposes in Clause 4 that Why2Wise determines itself.

3. Personal Data We Process

3.1 We process the following categories of personal data:

3.1.1 identity and contact data, such as name, email address and phone number;

3.1.2 account data, such as credentials, role, Institute, plan, preferences, and records of the terms You have accepted, including the version, the time and the device details sent with it;

3.1.3 Content You submit or exchange on the Platform, such as questions, answers, messages, files, audio and video. Calls with a Mentor are not recorded and no transcript is made of them. The live captions shown during a call may be saved;

3.1.4 learning and activity data, such as the features You use, Your progress, attempts, time spent and interactions on the Platform;

3.1.5 transaction data, such as orders, amounts and payment references (card details are handled by the payment gateway and are not stored by Why2Wise);

3.1.6 technical data, such as device, browser, log and network information;

3.1.7 communications with Why2Wise;

3.1.8 for Mentors, professional, verification and payment-account details, including bank account or UPI details; and

3.1.9 wellbeing records You choose to keep on the Platform, such as sleep, meals, exercise and mind-training results.

4. Purposes

4.1 We process personal data to:

4.1.1 create and administer accounts and provide the Platform and its features;

4.1.2 personalise the Platform to You;

4.1.3 process payments, Credits and refunds;

4.1.4 keep the Platform and its Users safe, including by screening communications and Content, including by automated means, and by preventing fraud, misuse and circumvention;

4.1.5 provide support and communicate with You about the Platform;

4.1.6 only with Your optional consent under Clause 5.2, improve and develop the Platform and Why2Wise's products and services, using Your content in a form that does not identify You; and

4.1.7 comply with law and enforce Our terms.

4.2 Some features of the Platform use automated systems to produce responses, evaluate written answers, classify requests and screen communications. Fixed rules in the Platform also close a question with a Mentor in some cases, for example when a call is not joined or a verdict is not given in time.

5. Grounds

5.1 We process personal data on the basis of Your consent, which You give by a separate tick on the Platform, apart from accepting the Terms, for the purposes in Clause 4 other than Clause 4.1.6, and which You may withdraw under Clause 11, and for the legitimate uses permitted by Section 7 of the DPDP Act. We keep a record of the consent You gave, when You gave it, and the device details sent with it. Withdrawal does not affect processing already carried out, and may mean that some or all of the Platform can no longer be provided to You.

5.2 The purpose in Clause 4.1.6 is optional. It has its own tick, which is empty until You tick it, and You may use the whole Platform without it. Where You give it: a Mentor's answer to Your question may be shown, without Your name, to other Users who ask the same question; and the words of a request that the Platform's assistant could not understand are kept, without Your name, for thirty (30) days to improve the assistant. You may withdraw it at any time under Clause 11.4. We keep a record of whether You gave it, as in Clause 5.1.

6. Disclosure

6.1 We may disclose personal data:

6.1.1 to Your Institute, where You use the Platform through it, to the extent needed for the Institute to administer Your enrolment and follow Your progress. This includes Your questions, the answers and messages on them, Your session records and ratings, and Your Credit records. Features that the Platform identifies as private to You are not disclosed to Your Institute;

6.1.2 to Mentors and other Users, to the extent needed to provide a feature You use;

6.1.3 to service providers that process personal data on Our behalf for the hosting and operation of the Platform, authentication, storage, communications, payments and the automated features of the Platform, under written contracts requiring them to act only on Our instructions and to apply appropriate security safeguards;

6.1.4 where required by law, court order or a lawful request of an authority, or to protect the rights, safety or property of Why2Wise, its Users or others; and

6.1.5 to a successor in the event of a merger, acquisition, reorganisation or transfer of the business.

6.2 We may use and disclose data that has been de-identified or aggregated so that it no longer identifies You, without restriction.

7. Storage and Transfer

7.1 Personal data is stored primarily in India. It may be processed outside India by service providers, in accordance with applicable law.

8. Retention

8.1 We retain personal data for as long as it is needed for the purposes in Clause 4, for the performance of Our agreements, and for compliance with legal, accounting and dispute-resolution obligations. Thereafter it is erased or de-identified.

8.2 Security records kept in Our database in India, such as the record of an account being signed out on one device because it signed in on another (with the IP address and browser details involved), the record of Your acceptance of these documents and of Your consent, and records of payments and Credits, are kept for at least one hundred and eighty (180) days, as the Directions of the Indian Computer Emergency Response Team (CERT-In) require. Where You delete Your account, Clause 11.5 applies to them.

9. Security

9.1 We apply reasonable security safeguards to protect personal data against breach. No system is completely secure, and We do not guarantee the security of data transmitted to or stored on the Platform.

9.2 In the event of a personal data breach, We shall notify the Data Protection Board of India and affected persons as required by law.

10. Children

10.1 The Platform is only for persons aged eighteen (18) or older (Terms 4.1), and We do not knowingly process the personal data of a person under eighteen (18). Where We learn that an account belongs to a person under eighteen (18), We shall suspend the account and deal with the data as required by law.

11. Your Rights

11.1 Subject to the DPDP Act, You may request a summary of Your personal data processed by Us, correction, completion or updating of it, and its erasure; You may withdraw consent, nominate another person to exercise Your rights in the event of death or incapacity, and seek redress of a grievance.

11.2 You may delete Your account yourself, at any time, with "Delete my account" on the Profile page of the Platform. Deletion takes effect at once and cannot be undone. It signs You out on every device, ends Your ability to sign in, withdraws Your consent under Clause 5.1, and erases or de-identifies Your personal data as set out in Clause 11.5. The Platform refuses deletion, and says why, while work involving another person is in progress, such as a question with a Mentor, a booked call or an answer being evaluated, while You are the named Mentor of a student, or while You are the only administrator of an Institute with enrolled students. You may delete Your account once that is resolved.

11.3 We may retain data where required or permitted by law notwithstanding a request.

11.4 Any other request under Clause 11.1, including withdrawal of consent without deleting the account, is made to grievance@why2wise.in from the email address registered on the account. We may verify Your identity before acting. Where You use the Platform through an Institute, We may refer a request to that Institute.

11.5 When an account is deleted, data that only You used, such as Your notes, practice records, study log, wellbeing records, preferences, notifications, and the files You uploaded with Your questions and answers, is erased. Records on which another person's rights or Our legal obligations depend are kept with Your name and contact details removed: questions answered by a Mentor and the conversation in them, calls, evaluations, payments, payouts, seat and plan records, and the record that You gave consent. Where You use the Platform through an Institute, the Institute is told that the account was deleted.

11.6 Deleting an account does not entitle anyone to a refund. Credits, plans, seats and any balance on the account are forfeited, as the Refund and Cancellation Policy states. An amount a Mentor has already earned remains payable to that Mentor.

12. Cookies and Similar Technologies

12.1 We use cookies, local storage and similar technologies to keep You signed in, remember Your preferences, secure the Platform and understand how it is used.

13. Changes

13.1 We may amend this Policy by publishing the amended version on the Platform. Continued use after it takes effect constitutes acceptance.

14. Grievance Redressal

14.1 In accordance with Section 13 of the DPDP Act and the rules under the Information Technology Act, 2000, the Grievance Officer is:

• Grievance Officer: Mr. Manu Bharadwaj
• Designation: Proprietor, Why2Wise
• Email: grievance@why2wise.in
• Postal address: 105, 5th Cross, Teacher's Colony, KS Layout, Bengaluru – 560078, Karnataka, India

14.2 A grievance is acknowledged within twenty-four (24) hours of receipt and disposed of within fifteen (15) days of receipt, or within any shorter period prescribed by law.

14.3 If You are not satisfied with the response, You may complain to the Data Protection Board of India.

14.4 Why2Wise has not been notified as a Significant Data Fiduciary and has not appointed a Data Protection Officer.

15. Contact