This Privacy Policy explains how XROBOTICS Works, incubated at REP IIT Bhubaneswar ("XROBOTICS", "we", "us"), collects, uses, shares, and protects personal data through the Bharat AI Challenge programme, the website xrbaic.xroboticsworks.com ("Site"), registration forms, workshops, public voting, and the national Finale.

We are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") for the personal data described here. This Policy should be read together with our Terms & Conditions.

We do not knowingly collect sensitive data such as health records or financial account details. Hardware payment is made directly to XGenAI.IN — we never see your card details.

Most participants are children under DPDP (under 18). Extra rules apply:

• Verifiable parental consent is required before we collect or use any personal data of a participant under 18.
• No behavioural tracking or targeted ads directed at children — ever, under any circumstance.
• Public/promotional use of a child's name, photo, or project is opt-in and separate from any ad-targeting, which we don't do.
• A parent/guardian can decline optional promotional consent without losing eligibility to compete.
• Consent can be withdrawn any time — see Section 09.

Required — needed to take part

• Registration & eligibility checks
• Workshop & event logistics
• Judging, evaluation, results
• Prize & certificate disbursal
• Programme communication (to the guardian's number)
• Public leaderboard (name, school, project only)

Optional — can be declined

• Promotional & commercial use (Section 05)
• XR4STEM Labs royalty programme, only if your idea is shortlisted and you choose to opt in

Where consented to, we may use a participant's name, school, photo, video, testimonial, and project on our website, social media, press coverage, sponsor materials, and with our Official Radio Partner. This is for programme publicity, not for selling data or targeting ads.

We never sell personal data, and never share a child's data for a third party's independent marketing.

From 1 September to 7 December 2026, the public can vote for entries via WhatsApp. This is separate from registrant consent.

• We collect only the voter's WhatsApp number and their chosen entry.
• Used solely to record one vote per number per entry and build the leaderboard.
• Never added to any marketing list, never shared with sponsors, never used for ad-targeting.
• Deleted shortly after the voting period ends, unless you separately register for the Programme.
• Voting = consent to this limited use. Withdraw and request deletion any time (Section 11).

Registration and programme data: current cohort duration plus 12 months after the Finale, for record-keeping, disputes, and sponsor reporting. Prize/royalty records: as long as legally or contractually necessary. Promotional media: retained while consent stays valid. Voting data: per Section 06. You can request earlier deletion, subject to legal retention needs.

We apply reasonable technical and organisational safeguards against unauthorised access, alteration, or loss. If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as required under the DPDP Act.

Under the DPDP Act, you (or a parent/guardian for a minor) can:

• Access a summary of the data we hold about you
• Correct or update inaccurate data
• Request erasure once it's no longer needed
• Withdraw consent for any optional use, as easily as you gave it
• Nominate someone to exercise these rights on your behalf if you pass away or are incapacitated
• File a grievance with us, then escalate to the Data Protection Board of India if unresolved

To use any of these rights, contact us — details in Section 11.

The Site may use cookies or similar tools to understand basic usage (pages visited, device type) and improve performance. These do not identify a participant's real name and are not used to profile or target children with ads. You can control cookies through your browser settings.

For any question, complaint, or data request, contact:

Unsatisfied with our response? You may escalate to the Data Protection Board of India.

We may update this Policy to reflect legal, operational, or programme changes. The "Last updated" date at the top will change accordingly. Material changes affecting how children's data is used will be re-notified to registered parents/guardians directly.