ThinkFusion
LevelsFor schoolsPricingSign in
Start free
ThinkFusionFor schoolsPricingContactTermsPrivacyRefunds
© 2026 ThinkFusion
Home · Legal

Privacy policy

Last updated 22 September 2026

ThinkFusion is used by students, including children. This page says exactly what we store, why, and how to make us delete it. It describes what the system really does, not what a template says it might.

1. Who is responsible for your data

Ability Fusion Private Limited decides how and why data on this service is processed. For questions or complaints, write to info@abilityfusion.com, or see the contact page for our grievance officer and postal address.

2. What we collect

From your sign-in. There is no password on this service — you sign in with Google or GitHub, and we never see your password for either. From them we receive your name, email address, profile picture and an account identifier.

What you choose to add. A phone number, date of birth, gender and a short bio, if you fill them in. All optional; the product works without them.

What you do here. The circuits you build, the code you write, your submissions and their results, which levels you have finished, experience points, streaks and badges, and the certificates you earn.

Technical records. The IP address of your last sign-in and the time of it, kept to spot abuse of accounts. Ordinary server logs, kept briefly.

If your school buys your seat. Which organisation you belong to, when you joined it, and your progress — see section 5.

What we never see. Card numbers, UPI IDs and bank details. Payments are handled entirely by Razorpay; we receive only a payment reference, an amount and a status.

3. Why we hold it

To sign you in and keep you signed in; to save your work so a circuit is where you left it; to mark your submissions and show a teacher who is stuck; to issue and verify certificates; to take payment and provide proof of it; to send you the transactional emails in section 6; and to keep the service working and free of abuse.

We do not sell your data. We do not use your work to advertise to you, and we do not profile you for marketing.

4. Children

This product is built for secondary-school students and children use it. We collect no more from a child than from anyone else, and we do not show advertising to anyone.

If you are under 18, please ask a parent, guardian or teacher before creating an account. When a school buys seats, the school is responsible for obtaining any consent required for its students under its own policies.

A guardian can ask us to show, correct or delete a child’s account and everything in it by writing to info@abilityfusion.com from an address we can reasonably connect to the child, or through the child’s school. We do not charge for this.

5. What your school can see

If you joined using a school’s code, staff at that school can see your name, the email address you signed in with, when you joined, how far through the course you are and when you were last active. That is the whole list. They cannot read your password (there isn’t one), see anything from your Google or GitHub account beyond your name, email and picture, or see any other school’s students.

If your school removes you, your access ends immediately and your progress stops being visible to them.

6. Who we share it with

These are the only third parties that receive personal data, and only what they need:

  • Google and GitHub — sign-in. They tell us who you are; we tell them nothing about what you do here.
  • Razorpay — payments, and their own privacy policy applies to the card details you give them.
  • MSG91 — sending the emails and any SMS the service produces.
  • Our hosting and storage providers — Google Cloud and BunnyNet, which run the servers, the database and file storage.

Analytics and advertising measurement — only with your consent, only on public pages. On our public pages (home, pricing, schools, contact, blog and the legal pages) we may use Google Analytics, Microsoft Clarity and the Meta (Facebook) Pixel to understand how visitors find and use the site, and — for the Meta Pixel — to measure our own advertising. They run only if you press “Accept”, and you can decline with one press.

They never run inside lessons, the simulator, dashboards, teacher pages, sign-in or checkout, whatever you chose — those are the places children use, and Indian law does not allow tracking or targeted advertising directed at children. Microsoft Clarity records how a public page is used (clicks and scrolling) with text you type masked.

To change your choice, clear this site’s data in your browser; you will be asked again on your next visit to a public page.

We also disclose data where the law requires it. If we are ever compelled to hand over a student’s data, we will tell the account holder unless we are forbidden from doing so.

7. Email you receive

We send transactional email only: a welcome message, payment receipts, enrolment confirmations, certificates and account notices. These are part of the service and are not marketing. We do not run a marketing list, and if that ever changes it will be something you opt into.

8. How long we keep it

Your account and work stay until you ask us to delete them. Records of payments are kept for as long as tax and accounting law requires, which in India is currently eight years — those we cannot delete on request, and they are the exception to section 9.

Issued certificates remain verifiable after an account is deleted, because a certificate nobody can check is worthless to the person who earned it. A verification page shows the holder’s name, the course and the date, and nothing else.

9. Your rights

You do not have to ask us for most of this. From your account page you can download everything we hold about you, and you can erase your account yourself. Erasing is immediate and cannot be undone.

You can also ask us for a copy, ask us to correct something, or ask us to erase your account on your behalf. Write to info@abilityfusion.com from your account’s address. We will answer within 30 days and usually much sooner.

Erasing your account removes your name, email address, phone number, date of birth, profile picture and bio, and deletes your progress and your submitted work. It does not remove payment records (section 8) — those remain, no longer connected to your name — and it does not withdraw a certificate you earned, which stays verifiable under the name it was issued in.

10. Security

Traffic is encrypted in transit. Passwords are not stored because there are none. Where we hold a token that grants access — such as a guardian consent link — we store only a hash of it, so a copy of our database cannot be used to act on your behalf.

No service is immune. If a breach affects your data we will tell you and the relevant authority, describing what happened and what to do about it.

11. Changes

If we change this policy in a way that affects what we collect or who we share it with, we will email account holders rather than quietly changing the date at the top.

Terms · Privacy · Refunds & cancellation · Contact