Terms & Conditions

By accessing or using the SPYRAL platform ("Platform") operated by AIRM Private Limited ("we", "us", or "Company"), you confirm that:

• You have read, understood, and agree to be bound by these Terms & Conditions.
• You have the legal capacity to enter into a binding agreement (or, in the case of a minor, your parent or guardian has agreed on your behalf).
• If you are accepting on behalf of a school or institution, you have the authority to bind that organisation to these terms.

If you do not agree with any part of these terms, you must not use the Platform.

SPYRAL is an AI-powered adaptive learning platform for schools and institutions worldwide, serving students in Grades 6–12. The Platform provides:

• Personalised learning tools for students (Grades 6–12), including simulations, AI challenges, practice zones, and competency tracking.
• Teacher tools including lesson notes builder, question generator, and AI simulator builder.
• Institutional analytics and Student Performance Index (SPI) reporting for school administrators.
• Parent dashboards for real-time progress visibility.
• SPYRAL Architecture — a keyword-first AI governance framework for institutions integrating AI into education.

Registration

Access to the Platform requires a registered account. Schools and institutions register through an onboarding agreement. Individual user accounts (Student, Teacher, Parent, Admin) are created by the institution's administrator.

Account Security

• You are responsible for maintaining the confidentiality of your credentials.
• You must notify us immediately at support@tryspyral.com of any unauthorised use of your account.
• We are not liable for any loss arising from unauthorised access due to your failure to protect your credentials.

Account Termination

We reserve the right to suspend or terminate accounts that violate these terms, engage in prohibited conduct, or upon request from the school administrator.

We collect the minimum data necessary to deliver the Platform's features. The table below describes the data categories:

We use collected data solely for the following purposes:

• Delivering the service: Personalising learning paths, generating SPI reports, and providing AI-driven recommendations.
• Platform improvement: Analysing aggregated, anonymised usage patterns to enhance features and fix issues.
• Communication: Sending account-related notifications, progress reports, and service updates.
• Safety and compliance: Detecting abuse, fraud, or violations of these terms.
• Research (anonymised): Contributing anonymised, aggregated data to educational efficacy research — individual students are never identifiable.

Student data is treated with the highest level of protection. We comply with applicable laws across jurisdictions, including:

• COPPA (USA) — Children's Online Privacy Protection Act for users under 13
• GDPR (EU/UK) — General Data Protection Regulation for European users
• DPDP Act 2023 (India) — Digital Personal Data Protection Act
• PDPA (Singapore/Thailand) — Personal Data Protection Act
• Other applicable national data protection laws

Consent for Minors

For students under the age of 13 (or the applicable age of digital consent in your country), accounts can only be created through a school or verified parent/guardian. By enrolling students on the Platform, the school confirms it has obtained appropriate parental/guardian consent under local law.

Data Minimisation

Student academic data is collected only to the extent necessary for generating learning insights and progress reports. We do not build commercial profiles of students.

Access Controls

• Student data is accessible only to the student themselves, their assigned teachers, parents linked to their account, and the school administrator.
• SPYRAL staff access student data only when required for technical support, and only with institutional knowledge.

Data Portability

Schools and parents may request a complete export of a student's data in machine-readable format by emailing support@tryspyral.com.

We do not sell or rent personal data. We may share data in the following limited circumstances:

• Service providers: Cloud infrastructure (hosting, database), email delivery, and analytics providers — bound by strict data processing agreements.
• Legal requirements: If required by applicable law, court order, or government directive in any jurisdiction, we will disclose the minimum data necessary and notify the affected institution where legally permitted.
• Institutional sharing: Aggregated, anonymised reports may be shared with the institution's management or relevant education authorities for curriculum compliance reporting.
• Business transfer: In the event of a merger or acquisition, data will transfer subject to the same protections, and users will be notified in advance.

We retain personal data only for as long as necessary:

• Active accounts: Data is retained for the duration of the school's subscription plus 12 months thereafter.
• Student academic records: Retained for 3 years after the student's last active session (to support alumni reports/transcripts), then deleted or anonymised.
• Deletion requests: Processed within 30 days of a verified request from the school admin, parent, or adult user.
• Backups: Encrypted backups are purged within 90 days of the data deletion request.

Regardless of where you are located, you have the following rights over your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to certain types of data processing (e.g., profiling).
• Right to withdraw consent: At any time, without affecting prior lawful processing.
• Right to lodge a complaint: Contact your local data protection authority.

EU/UK users may also exercise rights under GDPR by contacting your national supervisory authority (e.g., ICO for UK).
US users (California) may exercise rights under CCPA/CPRA.
Indian users may exercise rights under DPDP Act 2023.

To exercise any right, contact our Data Protection Officer at privacy@tryspyral.com. We will respond within 30 days.

We implement industry-standard technical and organisational measures to protect your data:

• All data in transit is encrypted using TLS 1.2+.
• Data at rest is encrypted using AES-256.
• Authentication uses bcrypt-hashed passwords and JWT tokens with short expiry.
• Access to production systems is restricted by role and audited.
• We conduct regular security reviews and vulnerability assessments.

In the event of a data breach that poses a risk to users, we will notify the affected institution and relevant authorities within 72 hours of becoming aware of the incident.

All content, software, designs, algorithms, and materials on the Platform — including the SPYRAL keyword-first architecture, SPI engine, and AI models — are the intellectual property of AIRM Private Limited and are protected under applicable international copyright and intellectual property law.

• You may use the Platform for its intended educational purpose only.
• You may not copy, reproduce, reverse-engineer, or create derivative works from any part of the Platform without written consent.
• User-generated content (e.g., student submissions, teacher-created notes) remains the property of the user/institution. By submitting content, you grant us a limited licence to process and display it within the Platform.

You agree not to use the Platform to:

• Impersonate another user, institution, or SPYRAL staff.
• Upload or transmit malware, viruses, or any malicious code.
• Scrape, harvest, or systematically extract data from the Platform.
• Attempt to bypass authentication, access controls, or security mechanisms.
• Use AI features to generate content that is harmful, discriminatory, or violates applicable law.
• Share your login credentials with unauthorised users.
• Use the Platform for any commercial purpose not authorised by SPYRAL.

Violations may result in immediate account suspension and legal action.

To the maximum extent permitted by applicable law:

• SPYRAL provides the Platform on an "as-is" and "as-available" basis without warranties of uninterrupted availability or fitness for a particular purpose.
• We are not liable for indirect, incidental, or consequential damages arising from use or inability to use the Platform.
• Our total aggregate liability to you for any claim shall not exceed the fees paid by your institution in the preceding 12 months.

Nothing in these terms limits liability for death, personal injury, or fraud caused by our negligence.

We may update these Terms & Conditions from time to time. When we do:

• We will update the "Last updated" date at the top of this page.
• For material changes, we will send an email notification to the school admin's registered address at least 14 days before the changes take effect.
• Continued use of the Platform after the effective date constitutes acceptance of the updated terms.

SPYRAL is operated by AIRM Private Limited, incorporated in India. These Terms are governed by the laws of India for the purposes of contract formation, however we respect the mandatory consumer protection laws of your country of residence.

Dispute Resolution

We encourage resolving disputes amicably by contacting us at legal@tryspyral.com. If a resolution cannot be reached within 30 days, disputes shall be settled by binding arbitration under the rules of the Singapore International Arbitration Centre (SIAC), conducted in English.

Jurisdiction-Specific Compliance

• India: DPDP Act 2023, IT Act 2000, Consumer Protection Act 2019
• European Union / UK: GDPR, UK GDPR — EU/UK users retain all rights thereunder
• United States: COPPA (for users under 13), CCPA/CPRA (California residents)
• Other jurisdictions: We comply with applicable local data protection law

Nothing in these terms limits any rights you have under the mandatory laws of your country of residence.

If you have any questions, concerns, or requests regarding these Terms & Conditions or your data, please reach out:

• General & Support: support@tryspyral.com
• Data Protection Officer: privacy@tryspyral.com
• Legal / Institutional: legal@tryspyral.com