Privacy & Data Protection Policy
Our Commitment to Student Privacy
We believe student voices should be heard fearlessly, without compromising their privacy.
Rise Together 2026 is a student-centred educational research initiative led by The Purple Movement and GTech µLearn. This policy explains how we collect, use, store, protect and manage information submitted through our survey and related participation activities.
Our approach is guided by data minimisation, transparency, purpose limitation and responsible research practices, with reference to India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025.
We aim to ensure that participation in our research does not require students to disclose their identity.
Privacy at a Glance
Anonymous-first survey participation
The core survey is designed to collect educational experiences and opinions without requiring names, phone numbers or email addresses.
Optional personal information
Providing personal details for Youth Champion badges or campus initiatives is optional.
Limited-purpose processing
Personal information is intended to be used only for the specific activities explained in this policy.
No commercial monetisation
We do not sell personal information or use survey responses for advertising purposes.
Security-conscious infrastructure
The website is hosted on Vercel. IP-based identifiers are processed using hashing for abuse-prevention purposes. Additional infrastructure and security configurations are subject to ongoing verification.
റൈസ് ടുഗെതർ 2026 വിദ്യാർത്ഥികളുടെ അനുഭവങ്ങളും അഭിപ്രായങ്ങളും ശേഖരിച്ച് കേരളത്തിലെ ഉന്നത വിദ്യാഭ്യാസ മേഖലയിലെ പുരോഗതിക്കായി പ്രവർത്തിക്കുന്ന ഒരു ഗവേഷണ സംരംഭമാണ്.
സർവേയിൽ പങ്കെടുക്കുന്നതിന് നിങ്ങളുടെ പേര്, ഫോൺ നമ്പർ, ഇമെയിൽ വിലാസം തുടങ്ങിയ വ്യക്തിഗത വിവരങ്ങൾ നൽകേണ്ടതില്ല. യൂത്ത് ചാമ്പ്യൻ ബാഡ്ജ്, ക്യാമ്പസ് പദ്ധതികൾ എന്നിവയ്ക്കായി വ്യക്തിഗത വിവരങ്ങൾ നൽകുന്നത് ഐച്ഛികമാണ്.
നിങ്ങൾ നൽകുന്ന വ്യക്തിഗത വിവരങ്ങൾ അവ ശേഖരിക്കുന്നതിന് വ്യക്തമാക്കിയ ആവശ്യങ്ങൾക്കായി മാത്രമാണ് ഉപയോഗിക്കുന്നത്. നിങ്ങളുടെ വിവരങ്ങൾ വിൽക്കുകയോ പരസ്യ ആവശ്യങ്ങൾക്കായി ഉപയോഗിക്കുകയോ ചെയ്യില്ല.
നിങ്ങളുടെ വ്യക്തിഗത വിവരങ്ങൾ പരിശോധിക്കാനും തിരുത്താനും ഇല്ലാതാക്കാനും സമ്മതം പിൻവലിക്കാനും ആവശ്യപ്പെടാം. പ്രായപൂർത്തിയാകാത്ത വിദ്യാർത്ഥികളുടെ വിവരങ്ങൾ കൈകാര്യം ചെയ്യുമ്പോൾ ബാധകമായ നിയമപരമായ സമ്മത വ്യവസ്ഥകൾ പാലിക്കും.
Organisations and Data Responsibility
Rise Together 2026 is organised by:
- The Purple Movement
- GTech µLearn
These organisations coordinate the educational research initiative and its associated activities.
The organisation or organisations that determine the purposes and means of processing personal data will be responsible for the applicable Data Fiduciary obligations under the DPDP Act.
For privacy-related questions, requests or complaints, participants can contact:
Email: risetogether@purple-movement.com
Address: Technopark, Thiruvananthapuram, Kerala 695581, India.
The specific allocation of data governance responsibilities between the participating organisations will be maintained as part of the project's internal data governance arrangements.
Information We Collect
We process information in connection with three main activities:
A. Core Survey Responses
The main survey collects information relating to:
- Academic year and student cohort.
- District and type of educational institution.
- Curriculum relevance and academic experiences.
- Internship and employment experiences.
- Learning opportunities and institutional challenges.
- Student recommendations and proposed educational reforms.
These responses are used for educational research, statistical analysis and the preparation of policy recommendations.
The survey does not require direct personal identifiers to answer its core questions.
However, combinations of educational and demographic responses may carry a limited risk of identifying individuals, particularly in smaller institutions or groups. We therefore avoid representing all survey records as guaranteed anonymous unless that has been technically established.
B. Youth Champion Badge Information (Optional)
Students who choose to claim a Youth Champion Badge may be asked to provide:
- Full name.
- Email address.
- College name.
This information is intended to:
- Generate personalised digital badges.
- Associate badge details with the corresponding badge identifier.
- Support badge verification.
- Communicate necessary badge-related information.
Badge participation is optional and is not a condition for completing the core survey.
C. Campus Pilot and Volunteer Information (Optional)
Students interested in participating in campus initiatives may be invited to submit additional information, including:
- Name.
- WhatsApp number or email address.
- Relevant participation interests.
This information is intended to facilitate communication about working groups, campus pilots and related educational initiatives.
Submitting this information is voluntary.
How We Use Your Information
Information collected through Rise Together 2026 may be used for the following purposes:
| Purpose | Information involved |
|---|---|
| Educational research | Survey responses |
| Statistical analysis | Survey responses |
| Policy recommendations | Aggregated research findings |
| Digital badge generation | Name, email and college |
| Badge verification | Badge-related information |
| Campus initiatives | Volunteer contact information |
| Security and abuse prevention | Technical identifiers and security logs |
We do not intend to use personal information for unrelated commercial purposes, targeted advertising or individual behavioural profiling.
Survey findings may be published in reports, presentations and research documents. Where findings are published, reasonable steps will be taken to avoid disclosing individual participants' identities.
Data Storage and Processing Architecture
The Rise Together 2026 website is hosted on Vercel.
Survey and associated personal information are maintained in the project's database infrastructure.
Personal information supplied for badges and campus initiatives is currently stored within the same database environment as survey information. We therefore do not claim that these records are maintained in a completely separate or technically unlinked registry.
This distinction is important: although direct identifiers are not required for core survey participation, the current database arrangement should not be interpreted as a guarantee that personal information can never be associated with survey records.
We aim to minimise unnecessary associations and restrict access to information according to operational requirements.
The database provider, hosting-related logging arrangements and any additional third-party processing services will be identified and documented as part of our infrastructure and privacy review.
Technical Security and Abuse Prevention
We use technical measures intended to reduce unauthorised access, misuse and survey manipulation.
IP-based abuse prevention
The application processes IP-related information using a hashing mechanism to generate an identifier for security and abuse-prevention purposes. The resulting hash is intended to help detect duplicate submissions and protect the survey from automated abuse.
A cryptographic hash is not encryption or complete anonymisation. Depending on the implementation and available information, hashed identifiers may remain linkable to an individual. We do not intend to use these identifiers for advertising or behavioural profiling.
Local Storage & Essential Functional Cookies
The application uses browser local storage and essential first-party cookies strictly for technical and operational functionality:
- Draft Continuity: Auto-saving in-progress survey responses in your browser's local storage so you do not lose answers if your connection drops.
- Abuse & Duplicate Prevention: Maintaining lightweight single-submission flags to safeguard the integrity of the research.
- Badge Retrieval: Storing your generated Youth Champion badge identifier locally so you can view and download your badge across visits.
These are strictly functional. We do not use third-party advertising cookies, cross-site trackers, or commercial profiling scripts.
Infrastructure security
The website uses Vercel hosting and associated infrastructure services. We seek to apply appropriate security measures, including restricted administrative access, secure connections and safeguards against unauthorised access.
Specific encryption algorithms, database encryption settings, backup protection and infrastructure logging configurations are not represented as independently verified guarantees in this policy.
Protection of Students Under 18
Rise Together 2026 recognises that some participants, particularly first-year college, polytechnic and ITI students, may be under 18 years of age. We distinguish between participation in the core survey and activities involving personal information.
Anonymous survey participation: Students may participate in the core survey without submitting direct identifying information.
Personal information and minors: Where personal information relating to a child under 18 is processed, the project will follow the applicable requirements concerning verifiable parental or lawful guardian consent under the DPDP Act and Rules. Personalised badges and volunteer registrations involving minors will be subject to the applicable consent requirements.
We do not intend to use children's personal information for targeted advertising or behavioural monitoring.
Third-Party Services and Data Sharing
The project uses Vercel for website hosting and database infrastructure for storing survey and related information. Depending on the services used, third-party infrastructure providers may process limited information necessary to operate, secure and maintain the website.
We do not sell participant information or provide personal information to advertisers for commercial purposes.
Aggregated research findings may be shared through publications, presentations, educational initiatives and policy recommendations. We will not intentionally publish identifiable personal information as part of these research outputs.
Details of additional service providers and any relevant international data processing arrangements will be documented as the infrastructure review is completed.
Data Retention and Deletion
Information should be retained only for as long as reasonably necessary to fulfil the purpose for which it was collected, subject to applicable legal and security requirements.
Different categories of information may require different retention periods:
- Survey responses may be retained for educational research and statistical analysis.
- Badge information may be retained to support badge generation and verification.
- Volunteer contact information may be retained while the relevant campus initiative remains active.
- Security identifiers and operational logs may be retained for limited security and abuse-prevention purposes.
Retention schedule: Specific retention periods for these categories are currently being established. We will document and communicate defined retention periods as part of our data governance process.
We aim to delete or anonymise personal information when it is no longer required for its stated purpose, subject to applicable legal obligations.
Your Privacy Rights
We recognise the importance of giving participants control over their personal information. Participants may contact us to request:
These requests will be handled through the project's designated privacy contact. Applicable statutory rights and procedures will be provided in accordance with the commencement of the relevant provisions of the DPDP Act and Rules.
How to Request Data Correction, Deletion or Consent Withdrawal
If you have provided personal information for a Youth Champion Badge or campus initiative and wish to request correction, deletion or withdrawal of consent, contact:
Email: risetogether@purple-movement.com
Suggested subject lines:
Please provide sufficient information for us to identify the relevant record. If you have a badge identifier, you may include it. We may request reasonable verification to prevent unauthorised access to or deletion of another person's information.
We will review requests and communicate the applicable next steps and expected resolution timeframe. Where personal information is deleted, genuinely anonymised statistical aggregates may be retained for research purposes, provided they cannot reasonably be used to identify an individual.
Grievance Redressal and Contact
For questions, privacy concerns, requests or complaints relating to Rise Together 2026, contact:
Changes to This Policy
This policy may be updated to reflect:
- Changes in the survey or badge-generation process.
- Changes to database and hosting infrastructure.
- New security and data protection measures.
- Changes in applicable privacy laws and regulations.
- Updates to data retention and governance procedures.
Material changes will be reflected on this page with an updated revision date. Participants are encouraged to review this policy periodically.
Our Promise
Rise Together 2026 exists to amplify student experiences and help shape the future of education in Kerala. Your participation should never require you to compromise your privacy.
We are committed to responsible research, transparent data practices and continuous improvement in how student information is protected.
Rise Together 2026 | The Purple Movement • Empowering students across Kerala.