Data Processing Agreement
School Data Processing Agreement
Between the School (Data Controller) and Kyloen / QX137 Future Tech (OPC) Pvt. Ltd. (Data Processor)
To download as PDF:
Click “Download PDF” above. In the print dialog, select “Save as PDF” as the destination. This produces a clean, print-ready document suitable for school records.
1. Parties to this Agreement
Data Controller:
The School — as identified in the signature block at the end of this Agreement (hereinafter referred to as “the School” or “the Controller”).
Data Processor:
Kyloen — a product of QX137 Future Tech (OPC) Private Limited, Delhi, India (hereinafter referred to as “Kyloen” or “the Processor”).
2. Scope of Data Processing
Categories of personal data processed:
- Student first names and age groups
- Conversation messages between students and Kylo (the AI companion)
- Mood scores and emotional wellness signals (derived from conversations)
- Psychology interest scores and learning signals
Purpose of processing (strictly limited to):
- Personalising Kylo's responses to each student's age and learning profile
- Generating educator/parent wellbeing reports for the school
- Detecting safety concerns and alerting the designated school contact
No student data is processed for any commercial, advertising, or research purpose outside the scope above.
3. Kyloen's Obligations as Data Processor
- Process student data only on the School's documented instructions and for the purposes defined in Section 2
- Implement appropriate technical and organisational security measures to protect student data (encryption in transit and at rest, access controls, regular security reviews)
- Notify the School of any personal data breach affecting student data within 72 hours of becoming aware of it
- Delete all student data within 30 days of termination of the school contract, except where retention is required by applicable law
- Never use student data for any purpose beyond the scope in Section 2
- Never sell, license, or share student data with third parties other than the sub-processors listed in Section 5
- Make available all information necessary to demonstrate compliance with this Agreement upon the School's reasonable request
- Not engage any new sub-processor without giving the School 30 days' prior notice
4. School's Obligations as Data Controller
- Obtain informed written consent from each student's parent or legal guardian before enrolling the student on Kyloen
- Maintain records of consent and provide them to Kyloen or regulators upon request
- Provide Kyloen with accurate student information (name, age group) at the time of onboarding
- Inform Kyloen promptly of any data subject (parent/student) access, correction, or deletion requests received by the School
- Inform Kyloen immediately if any student is withdrawn from the programme so their data can be deleted
- Ensure appropriate internal access controls — only authorised school staff should access student reports on Kyloen
5. Approved Sub-Processors
Kyloen uses the following approved sub-processors. By signing this Agreement, the School authorises processing by these entities:
Our AI Technology Partner (USA-based) — San Francisco, USA
AI response generation. Conversation context is sent to process each reply. Our AI technology partner does not retain conversation data beyond the request.
Supabase Inc. — USA
Database storage for student profiles, conversation history, and school reports. Data is encrypted at rest (AES-256).
Resend Inc. — USA
Transactional email delivery (parent alerts, weekly reports). Email addresses only — no conversation content in emails.
6. Data Retention and Deletion
Kyloen will provide a deletion confirmation certificate to the School within 45 days of contract termination, confirming that all student data has been erased.
7. Governing Law and Jurisdiction
This Agreement is governed by and construed in accordance with the laws of India, including the Information Technology Act 2000, the Digital Personal Data Protection Act 2023, and applicable rules thereunder. Any disputes arising out of or in connection with this Agreement shall be subject to the exclusive jurisdiction of the courts of New Delhi, India.
8. Signatures
For and on behalf of the School
Signature
Name
Designation (e.g., Principal)
School Name
School Address
Date
Official Seal (if applicable)
For and on behalf of Kyloen / QX137
Signature
Name
Neha Kapoor
Designation
Authorised Signatory, QX137 Future Tech (OPC) Pvt. Ltd.
Company
QX137 Future Tech (OPC) Private Limited
Address
Delhi, India
Date
Opens your browser's print dialog — select “Save as PDF”
Want a custom school agreement?
For schools with specific data requirements, we can prepare a tailored DPA. Email us and our legal team at Unified Chambers And Associates will personally review your requirements.
schools@kyloen.com© 2026 Kyloen — QX137 Future Tech (OPC) Pvt. Ltd., Delhi, India · Legal compliance: Unified Chambers And Associates