Legal
Last updated: 21 July 2026. This policy covers the Miatz website (miatz.com), the Miatz web application, and the Miatz mobile apps for iOS and Android. Miatz is operated byMiatz Private Limited.
Miatz is a selective engineering-training platform. We collect only the data needed to run the program, mentor you, keep your account secure, and improve the product. We do not sell your personal data. We do not use it for cross-app advertising or third-party ad tracking.
The data controller is Miatz Private Limited (“miatz”, “we”, “us”), registered in Karnataka, India. For any privacy request, contact hello@miatz.com.
We collect the following categories of data, depending on how you use miatz:
Our legal bases (where applicable) are performance of our agreement with you, your consent (e.g. notifications, calendar, profile photo), and our legitimate interests in a secure, working product.
We keep your data while your account is active and as needed to provide the program. When you delete your account we delete or de-identify your personal data, except where we must retain limited records to meet legal or security obligations. Some short-lived operational logs are pruned automatically. Where a record carries its own deletion date, a scheduled job enforces it rather than a person remembering to.
Two limits worth stating exactly. A public AI Readiness Check attempt is not attached to an account, so deleting an account does not reach it. And that attempt carries no deletion date of its own, so it is kept until somebody asks us to remove it — see section 8 for how to ask.
To exercise any of these — a copy of your data, a correction, or erasure — make a request here. You do not need an account, and we confirm the address before acting on it.
Data is encrypted in transit (HTTPS) and access is restricted by database row-level security so users can only reach their own data (and, for business tenants, strictly within their organization). Sensitive secrets — such as AI provider keys and calendar tokens — are encrypted and are never returned to the browser. No system is perfectly secure, but we work to protect your information.
Miatz is built for adults. The program, the mentoring and the credentials all assume an adult learner, and we do not market to children. Creating an account is not age-gated: we do not ask your age at signup, and nothing in the app checks it.
One page asks, and we keep the answer. The free AI Readiness Check at /check asks whether you are “18 or over” or “Under 18”, because the law treats the two differently. If you answer “Under 18” we accept that answer and we store it with your attempt. It is self-declared and we do not verify it — it is what you told us, and nothing checks it against anything else. So it would not be true to say we do not knowingly hold data from anyone under 18, and this page used to say exactly that.
The attempt itself carries no name, no email address and no account — only your answers and a random token held in the browser that took the check. Answering “Under 18” changes three things, each enforced in the product rather than promised here:
What we do not have. There is no way in Miatz to verify a parent’s or guardian’s consent — no such step exists anywhere in the product, and we would rather say so than imply one. We therefore cannot claim that a young person’s use of that page was consented to by their guardian. What we can tell you is what the page collects, that the age answer is unverified, and what the product refuses to do with it.
If you are a parent or guardian. Email hello@miatz.com and we will delete the attempt. Because the record holds no name and no email address, we will need the link to the result, or the browser it was taken on, to find the right one — and if we cannot identify it with confidence we will tell you that rather than delete somebody else’s.
Your account, learning and assessment data is stored in India. The database, authentication and file storage run on Supabase in the ap-south-1 (Mumbai) region, and the application’s server-side compute is pinned to Vercel’s bom1 (Mumbai) region, in the same city as the database. Public marketing pages are cached on Vercel’s global edge network; that cache holds published page content, not your personal data.
These categories do leave India. Each is limited to what the feature needs, and each provider processes it on our instruction under our contract with them (see §4):
Embedded lesson videos load from youtube-nocookie.com when you play them, which is a request from your browser to Google rather than a transfer by us.
For transfers out of India we rely on our data-processing agreement with each provider named above. The Digital Personal Data Protection Act permits transfer to any country the Central Government has not restricted; if such a restriction is notified, we will stop sending affected data to a provider in that country. Where a transfer is also subject to EU or UK law, we rely on the transfer mechanism in that provider’s data-processing terms, typically the standard contractual clauses.
We may update this policy as the product evolves. Material changes will be reflected here with a new “last updated” date, and where appropriate we will notify you in the app.
If personal data we hold is exposed, lost, or accessed without authorization, we will notify the Data Protection Board of India and every affected person without undue delay, by email and — where the account is active — in the app. The notice will say what happened, which categories of data were involved, what we have done to contain it, and what you can do to protect yourself. We record every such incident internally, including the ones that did not meet the notification threshold, and we review what let it happen.
If you are not satisfied with how we handled your data, your request, or any other complaint about miatz, write to our Grievance Officer. This is the contact of record under the Digital Personal Data Protection Act 2023 and the Consumer Protection (E-Commerce) Rules 2020 — a named person, not a queue. We acknowledge every complaint on receipt and resolve it within 30 days.
If you are still not satisfied after we respond — or if we do not respond in that window — you may complain to the Data Protection Board of India. The full procedure — what to put in a complaint, what happens after you send it, and where else you can take it — is on grievance redressal.
Questions or requests? Email hello@miatz.com. See also our Terms of Service. For a formal complaint, write to the Grievance Officer. Our registered particulars — registered office, CIN and GSTIN — are published in the statutory disclosure and in the footer of every page.