AI for Schools in India: A Guide for Administrators
Neha Kapoor
Founder, Kyloen · Parent of Arjun, aged 11
Short answer:before adopting any AI platform, a school should have a short written AI policy, understand its duties under India's Digital Personal Data Protection (DPDP) Act for students' data, get written answers from vendors on data, safety and cost, and start with a small, time-limited pilot with parental consent. Students are already using AI, so doing nothing is not a neutral option; moving carefully is.
Why does a school need to think about AI now?
Generative AI tools are freely available on any phone, and many students already use them for homework, with or without permission. Teachers are being asked questions about AI and academic honesty they were never trained to answer. And schools are hearing from vendors promising to transform learning.
Policy direction is also moving. The Ministry of Education has announced plans to bring AI and computational thinking into the school curriculum, and CBSE already offers Artificial Intelligence as a skill subject. Internationally, UNESCO's guidance on generative AI in education calls for a human-centred approach, data protection, and age-appropriate use, and suggests 13 as a minimum age for independent use of general-purpose AI tools in classrooms.
Why are consumer AI apps a poor fit for schools?
When a parent lets a child use a chatbot at home, the parent carries the responsibility. When a school chooses a tool for students, the school takes on legal, ethical and reputational responsibility. Most consumer apps were designed for individual adults. They usually have no school-managed accounts, no data processing agreement the school can rely on, no age-appropriate content settings for younger pupils, and no defined route for safety concerns to reach a responsible adult. Many also set a minimum age of 13 in their terms.
What should a school AI policy cover?
A good first policy is short and readable by parents. It should answer:
- Which tools are approved, for which age groups, and for what purposes.
- Acceptable use and academic honesty: when AI help is allowed, when it must be declared, and when it is not allowed (for example, in assessments).
- Consent and data: how parental consent is obtained, what data is shared with vendors, and how parents can withdraw consent.
- Safety: what happens if a tool surfaces a child protection or mental health concern, and who in school is responsible.
- Evaluation: how a teacher or parent can request a new tool, and who decides.
- Review: a date to revisit the policy, at least once a year.
What does the DPDP Act mean for student data?
India's Digital Personal Data Protection Act, 2023 sets out how organisations must handle personal data, with the detailed rules phasing in over time. For schools using AI, the points that matter most are:
- Everyone under 18 is a child under the Act.
- Verifiable parental consent is required before processing a child's personal data. A tick-box a student clicks is not enough.
- No tracking, behavioural monitoring or targeted advertising directed at children, and no processing likely to harm a child's wellbeing, subject to exemptions the rules allow.
- Roles matter. The organisation that decides why and how data is processed is the data fiduciary; a vendor acting on its instructions is a data processor. A written agreement should make these roles clear.
- Purpose and deletion. Data should be used only for the stated purpose and deleted when no longer needed.
This is a summary, not legal advice. Schools should take advice from their own counsel on their specific arrangements.
What should you ask any AI vendor? A ten-point checklist
Insist on written answers before any student data is shared:
- Will you sign a written data processing agreement before any student data is shared?
- Where is student data stored and processed? Is any of it processed outside India, and by which sub-processors?
- Is student data ever used to train or improve AI models? Can that be switched off contractually?
- How long is each type of data kept, and what happens to it when the contract ends?
- How do you obtain and record verifiable parental consent?
- What can teachers and administrators see? Do you avoid behavioural profiling of children?
- How are safety concerns (self-harm, abuse, bullying) detected and escalated, to whom, and how fast?
- How have you tested content safety for each age group, and will you share the results?
- What teacher training and support is included?
- What will it cost after any free pilot, and how much notice will you give before charging?
A vendor that cannot answer clearly, or answers only with marketing language, is not ready for a school. That applies to us too.
How do you run a good pilot?
- Pick a narrow goal. For example, extra maths practice for one class, or writing feedback in one subject.
- Choose one or two classes and a willing teacher.
- Get consent first. Explain the pilot to parents in plain language and make opting out easy.
- Train teachers on what the tool does, what it does not do, and how to handle concerns.
- Agree success measures up front: teacher feedback, student feedback, parent feedback, and any learning evidence you already collect.
- Review after one term and decide openly whether to stop, adjust or expand.
Be wary of judging success only by usage numbers. High engagement is not the same as better learning or wellbeing.
What are the risks to manage?
- Inaccuracy. AI can produce confident errors. Teach students to verify.
- Academic honesty. Redesign some assignments so they show process, not just final answers.
- Equity. Not every family has a device or reliable internet at home. Plan for in-school access.
- Over-reliance and wellbeing. AI should not replace teachers, counsellors or peer relationships.
- Child protection. Any tool children talk to may hear disclosures. The school's safeguarding process must cover it.
Where Kyloen fits
Kyloen is an AI companion and tutor for children aged 5 to 18, focused on CBSE and ICSE schools. We are a small, early-stage team. During beta we offer schools a free pilot with no contract: you express interest, we agree a small pilot group, sign our School Data Processing Agreement, and set up parental consent. Our published School DPA explains roles, sub-processors and deletion, and How our AI works discloses that chats are processed by a US-based AI provider under contract. We will answer every question in the checklist above in writing. See Kyloen for Schools.
Interested in a pilot?
Tell us about your school and what you would like to test. We will reply with what a pilot involves and our written answers to the vendor checklist.
Email schools@kyloen.comFrequently asked questions
Does every school in India need an AI policy?
There is no single national rule requiring one, but most schools now benefit from a short written policy. Students are already using AI tools, and a policy gives teachers, students and parents clear rules on which tools are approved, what counts as acceptable use and academic honesty, how consent is handled, and how new tools are evaluated.
Does India's DPDP Act apply when schools use AI tools?
Yes. The Digital Personal Data Protection Act, 2023 treats anyone under 18 as a child, requires verifiable parental consent before a child's personal data is processed, and prohibits tracking, behavioural monitoring and targeted advertising directed at children, subject to exemptions set out in the rules. A school that chooses an AI tool and decides how student data is used will usually carry obligations as a data fiduciary. Take legal advice on your specific set-up.
What is the difference between a consumer AI app and a school AI platform?
A consumer app is designed for individuals, usually adults, and typically has no school-level controls. A platform intended for schools should offer a written data processing agreement, school-managed accounts, appropriate teacher or admin visibility, clear data deletion terms, and a defined process for safety concerns. Accountability, not just features, is the difference.
What should a school ask an AI vendor before signing anything?
Ask for written answers on: the data processing agreement; where data is stored and processed, including outside India; whether student data is used to train AI models; retention and deletion when the contract ends; what teachers and admins can see; how safety concerns are escalated and to whom; content safety testing; teacher training; and costs after any free period.
How should a school start with AI?
With a small, time-limited pilot: one or two classes, clear goals, parental consent, teacher training, and a review at the end of a term using teacher, student and parent feedback alongside learning evidence. Decide on wider use only after the review.