Privacy policy

The short version in plain language

01Institutes decide what student data goes into Sapty. We process it for them, to run the platform.
02Voice recordings and essays are stored so they can be marked by AI and by teachers. We do not sell them or use them for advertising.
03Each institute has its own separate database. One institute cannot see another’s students.
04We share data only with the services that make Sapty work, such as payment providers and hosting.
05You can ask to see, correct, export or delete your data. Students should ask their institute first.

This summary helps you read the full text. It does not replace it.

01What we collect#

We collect different data depending on who you are:

Institutes: institute name, address, PAN or registration number, plan, payout details (Khalti, eSewa or bank account) and invoices.
Staff: name, work email, phone, role and sign-in records.
Students, through their institute: name, email or phone, target exam and test date, purchases, practice answers, scores and progress.
For marking: voice recordings from speaking tasks and written answers such as essays and letters.

We also keep basic technical logs (IP address, device and browser) to keep the service secure.

02How we use it#

to run each institute’s app and show students what they bought;
to take payments and send payouts to institutes;
to mark answers and show progress to students and their teachers;
to support institutes and fix problems;
to improve the product, using statistics that do not identify anyone.

What we never do We do not sell personal data, and we do not use student answers for advertising.

03AI processing#

When a student submits a speaking or writing answer, we send the recording or text to an AI model that scores it against the official criteria and writes feedback. The model is provided by a third-party AI service under a contract that stops it from using the data to train its models.

Human review AI marks are estimates. Teachers at the institute can review and change any mark, and students can ask for a teacher’s second opinion where their institute offers it.

We share data only with companies that help us run Sapty, and only what they need:

payment providers (Khalti, eSewa and banks) to take payments and send payouts;
our cloud hosting and storage provider;
our email and SMS delivery provider;
our AI marking provider, as described above.

We may also share data if Nepali law requires it, for example with a court order.

05Each institute’s data is kept separate#

Every institute on Sapty has its own database. Students, answers, recordings and payments in one institute are never stored alongside another’s. Sapty staff can reach an institute’s data only to give support or keep the service safe, and every such access is logged.

Who is responsible For student data, the institute decides what is collected and why, and Sapty processes it on the institute’s behalf.

06Retention#

Student accounts and progress: while the institute’s plan is active, then 30 days after it ends.
Voice recordings: 12 months after they were made, unless the institute deletes them sooner.
Payment and payout records: as long as Nepali tax law requires.
Technical logs: 90 days.

07Your rights#

Under the Individual Privacy Act, 2075 (2018) and other Nepali law, you can ask to see, correct, export or delete your personal data, and to stop some kinds of processing.

Students Please ask your institute first: they control your account. If they cannot help, write to us and we will work with them.

08Children#

Sapty is meant for students aged 16 and over. If an institute enrols a younger student, the institute must get permission from a parent or guardian first. If we learn that a child’s data was added without that permission, we will ask the institute to fix it or delete it.

09Security#

Data is encrypted in transit and at rest. Staff sign in with passkeys or two-factor sign-in, and access is limited by role. We test our systems regularly. If a breach affects your data, we will tell the institute without undue delay and help them inform their students.

10Contact#

Questions or requests about privacy: [email protected] with “Privacy” in the subject, or 9869723240, Sunday to Friday, 10:00–18:00 NPT. Post: Sapty, Kathmandu, Nepal.

Privacy policy. What we collect, and why.