Privacy Policy

This Policy explains how Gyanis collects, uses, discloses and safeguards personal data when you use Flow, Aura, Vibe and OneByZero, and when you visit our Site.

It also explains how Gyanis collects, uses, discloses and safeguards personal data in connection with Beyond Answers: International Student Thinking Championship, including related registration, participation, communication and event administration activities.

Where participants or guardians interact with Gyanis services, forms, websites or event systems in connection with Beyond Answers, this Policy applies to the personal data processed through those interactions.

We may collect the following types of personal data:

• Account and profile: name, age or grade, board or class, email address, parent or guardian information (for minors), and school or institution details.
• Usage and signals: information generated through participation in Gyanis services or event-related activities, including chat prompts, mindmap nodes, drill answers and timing, Gameplan actions, Pulse metrics, and Vibe transcripts or summaries, where applicable.
• Device and logs: IP address, device and browser information, identifiers, cookies, and crash logs.
• Payments: registration payments, GC wallet funding where applicable, transaction history, and settlement records (processed through licensed payment partners).
• Voice and video: audio, video and transcripts for Vibe and Aura features, where enabled. Consent is required where applicable, and retention is limited as described in Section 7.
• Event participation: registration information, team details, school information, guardian responses, participation records, submissions, results, and communications relating to Beyond Answers.
• Marketplace: OneByZero listings, orders, shipping addresses and seller KYC data, where applicable to other Gyanis services.

We use personal data to:

• provide and administer Beyond Answers, including registration, guardian consent, team management, event participation and communications;
• provide and personalise Gyanis services, including adaptive difficulty, recommendations and summaries, where applicable;
• process registration payments, GC wallet funding and settlements;
• moderate content and protect safety, including safeguarding signals relating to minors;
• operate voice and audio features, generate transcripts and summaries, and improve quality, where these features are enabled;
• fulfil marketplace orders and enable delivery, where applicable;
• analyse performance, fix bugs, prevent fraud, maintain security and comply with the law; and
• communicate with students, parents or guardians, teachers and schools about registration, participation, event updates and relevant support.

Depending on the region and the activity involved, we rely on one or more of the following:

• performance of a contract;
• legitimate interests, including safety, security and product improvement;
• consent, including guardian consent and consent to voice and recordings, where required; and
• legal obligations.

We may share personal data with:

• service providers (including payment, cloud, communications and delivery partners), under confidentiality and applicable data protection obligations;
• schools and institutions, for educational purposes, event administration, analytics and safeguarding, where applicable;
• authorities, where required by law or safety requirements, or to protect rights; and
• parties to a corporate transaction, such as a merger or acquisition, with appropriate safeguards.

Access to personal details relating to Beyond Answers teams is limited to authorised Gyanis personnel and relevant service providers who need access for event administration, safeguarding, support or compliance.

We may transfer data to countries where we or our providers operate. We implement measures, such as contractual clauses and security controls, to protect personal data during these transfers.

• We keep personal data only for as long as needed to provide the Services, administer Beyond Answers, meet legal or accounting requirements, maintain necessary records, or resolve disputes.
• Vibe and Aura voice recordings and transcripts are retained only as needed to operate the relevant feature. They are then deleted or aggregated or anonymised, subject to applicable legal or operational requirements.
• Event registration, guardian consent and participation records may be retained for as long as reasonably necessary to administer the event, demonstrate compliance, address disputes, or meet applicable legal obligations.

We use technical and organisational measures appropriate to the risk to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No system is perfectly secure.

• For this event, every student participant is a child (a minor) for the purposes of the guardian consent process.
• “Minor” means a person under 18. Parent or guardian consent is required where applicable.
• Schools and institutions must ensure that appropriate consents and permissions are in place for students, where the students’ involvement requires them.
• Guardian consent requirements specific to Beyond Answers are set out in Sections 12 to 16 of this Policy.

Where applicable, you can:

• access, correct, delete or export your data;
• reset personalisation signals from settings, where available;
• control cookies through your browser settings; and
• withdraw consent for voice and recordings, noting that some features may not function without the relevant consent.

For Beyond Answers, a guardian may withdraw permission before the registration fee payment is completed, subject to the process described in Section 15.

• The guardian consent requirements for the International Student Thinking Championship form part of this Guardian Consent Policy and are not issued as a separate policy. Every participating student is considered a child (minor) for the purposes of the guardian consent process, and these provisions explain how guardian consent applies to the event.
• Event-specific consent information will be maintained and updated on the event webpage, including registration steps, guardian response requirements, and support information. This Policy remains the governing privacy and guardian consent document.

• When a team is entered, the guardian of each student will receive an email containing an individual consent link. A guardian does not need a Gyanis account to respond.
• A team will be registered only after every guardian has responded and the registration fee has been paid. Guardian responses must be completed before the fee is paid. Access to a team’s personal details will be limited to a small number of authorised staff, and each access will be recorded.

• A team will remain at the “Waiting for Guardians” step until every guardian has responded.
• If a guardian’s email does not arrive, the most common cause is an incorrect or mistyped email address. Please check the email address and contact hello@gyanis.ai if needed. A team cannot proceed to completed registration until all required guardian responses have been received.

• A guardian can withdraw permission before the registration fee is paid. If permission is withdrawn before payment is completed, the team will not be registered.
• For other consent-related questions, see “Your choices” in Section 10 or contact hello@gyanis.ai.

• Participants in some countries may be younger than the applicable digital-consent age. Where this may apply, registration for the event will open only after legal review.
• The legal review applies to the version of this consent policy that was reviewed. If the relevant policy provisions change, the legal review must be conducted again.

We may update this Policy. Material changes will be notified via the Site or email.