Legal

Privacy Policy

Last updated: 31 August 2026

This policy explains what information the 1st National Adivasi Olympiad collects about a student, why we collect it, who else sees it, and what you can ask us to do with it. It is written to be read by a parent or guardian, not by a lawyer.

1. Who We Are

The 1st National Adivasi Olympiad 2026 is organised by Adivasi Wisdom Trust together with Team Dhumkudiya. In this policy, “we” and “us” mean the organisers, and “you” means the student registering and the parent or guardian registering on their behalf. Our full address and grievance contact are at the foot of this page.

2. What This Policy Covers

It covers this website and everything you do on it — registering, paying the fee, completing the student profile, downloading your registration details, and later receiving your admit card and result. It does not cover other websites we link to.

3. What We Collect

When You Register

The public registration form asks for only what is needed to create the registration:

• The student's full name
• A mobile number — this becomes the login for the account
• Class and district
• How you heard about the Olympiad
• A password you choose. We never store the password itself, only a one-way hash of it, which cannot be turned back into the password.

After You Log In, in the Student Profile

The rest of the details are collected after registration, in the profile steps:

• Date of birth and gender
• Tribal category (Scheduled Tribe or PVTG), community and mother tongue
• Aadhaar number — optional, see section 5
• Father's name, mother's name, guardian's name and parent's occupation
• Home address: village, post office, police station, district and PIN code
• School name and details
• A photograph of the student, for the admit card
• An email address and a WhatsApp number, both optional

Collected Automatically

We record the IP address a mobile verification code was requested from, and the IP address of actions taken by our own staff in the administration panel. Both exist to detect abuse and to keep an audit trail of who changed a record.

We do not run any analytics, advertising pixel or cross-site tracking on this site. There is no Google Analytics, no advertising network and no social media pixel. Even the typefaces are served from our own server rather than a font network, so that visiting a page does not tell anyone else you were here.

4. Children's Data and Parental Consent

Every student registering for this Olympiad is in Class 6 to Class 10, and so is a child. We treat that as the central fact about this platform.

• A registration must be made by a parent or legal guardian, or by the student with their parent's or guardian's knowledge and consent.
• We collect only what the examination actually needs — we do not ask a child for anything the exam could run without.
• We do not profile children, do not track their behaviour across websites, and never use their information for advertising of any kind.
• A parent or guardian may contact the grievance officer at any time to see, correct or ask us to delete their child's information.

Children's information is handled in line with the Digital Personal Data Protection Act, 2023, which treats everyone under 18 as a child and requires verifiable parental consent for processing a child's personal data.

5. Aadhaar

Giving an Aadhaar number is optional. You can register, pay, sit the examination and receive your result without it. Where it is given, it is treated as the most sensitive field in the system:

• It is masked to the last four digits everywhere it is displayed — including to our own staff.
• It is never written into application logs.
• It is not included in the ordinary data exports used for administration.
• It is never shared with the payment gateway or any other third party.

6. Why We Use It

• To create and confirm your registration and to take the examination fee
• To allot a roll number and an examination centre
• To print the admit card, score the answer sheet, and issue the result and certificate
• To contact you about the examination by SMS, WhatsApp, email or phone
• To keep proper records of fees collected, and to prevent duplicate or fraudulent registrations
• To prepare statistical and educational reports about participation, in aggregate
• To promote the Olympiad and its educational objectives

7. Who Else Sees It

We do not sell or rent personal information to anyone. It is shared only in these situations:

• Razorpay, our payment gateway, when you pay online. The request our server makes to Razorpay carries only the amount and your registration number. The Razorpay payment window in your browser additionally receives your name, mobile number and email so it can fill them in for you. Razorpay, not us, handles your card, UPI or bank details — those never reach our servers.
• Google reCAPTCHA, which protects the registration form from automated abuse. When it is switched on, it receives your IP address and a token from your browser. It runs on the registration form only.
• The OMR examination service provider, who prints and scores the answer sheets. They receive the roll number and the minimum details needed to print and process a sheet.
• SMS and email providers, when we send you a message about your registration. They receive the mobile number or email address and the content of that message.
• Examination centres, who receive the list of candidates allotted to them, for seating and identity verification on exam day.
• Authorities, where the law requires it, or where it is necessary to protect the safety of a child.

8. Photographs

The student's photograph is used on the admit card and to verify identity at the examination centre. It is stored on our server outside the public web folder, so it cannot be reached by guessing a web address, and it is shown only to the student's own account and to authorised staff.

9. Photographs and Videos at Events

Photographs and videos may be taken during examinations, award ceremonies, workshops and related events, and used for event documentation, educational purposes, news and publicity, this website, social media, promotional materials and annual reports. Where the law or the circumstances require it, appropriate consent will be obtained first. A parent or guardian who has a concern about the use of their child's photograph or video can contact the grievance officer below and we will address it.

10. How We Protect It

• The whole site runs over an encrypted HTTPS connection.
• Passwords are stored only as a one-way hash.
• A registration that is still part-finished is held encrypted until you complete it.
• Staff access is restricted by role and by geography — a district coordinator sees the records of their own district and no other. This is enforced by the database itself, not merely by hiding buttons.
• Changes made by staff are written to an audit log.

No system on the internet can promise perfect security, and we do not make that promise. We do commit to telling you promptly if something goes wrong with your information.

11. How Long We Keep It

• Registration and examination records — name, class, roll number, result and certificate — are kept for the long term, because a certificate has to remain verifiable years after the examination.
• Payment records are kept for as long as tax and accounting law requires.
• A part-finished registration expires 24 hours after you start it, and is removed once it has expired.
• Mobile verification codes stop working 10 minutes after they are sent.
• If you ask us to delete information that we are not required to keep, we will do so.

12. Your Rights

• See and correct — log in and open your profile; most details can be corrected there yourself.
• Download — your registration details can be downloaded as a PDF from your dashboard.
• Ask for a correction or deletion, or for an explanation of anything in this policy, by writing to the grievance officer below.
• Withdraw consent to receiving messages that are not essential to the examination.

A parent or guardian may exercise all of these on the student's behalf. Please quote the registration number so that we can find the right record.

These rights, and the procedures for exercising them, follow the Digital Personal Data Protection Act, 2023 and the rules in force at the relevant time. Consent may be withdrawn at any point, subject to information we are required or permitted to retain for legitimate or legal purposes.

13. Other Websites

Where we link to another website, that site has its own privacy policy and we are not responsible for it. Please read theirs before giving them anything.

14. Changes to This Policy

We may update this policy. The date at the top always shows when it last changed, and the version on this page is the one that applies.