Privacy Policy

Last updated: [DATE]

This is a starting draft, not a finished legal document. Before publishing, have it reviewed by a lawyer familiar with India's Digital Personal Data Protection Act (DPDP Act, 2023), fill in every [BRACKETED] placeholder, and decide your actual retention periods and grievance officer details.

[COMPANY/PRODUCT NAME] ("we," "us," "our") operates [APP NAME] (the "Service"), an exam-preparation platform. This policy explains what data we collect, why, and what rights you have.

1. Information We Collect

Account information: name, email, phone number, and any information you provide during registration or enrollment.

Study activity data: lectures watched, time spent, quiz/test attempts and scores, progress through course material, and similar usage patterns ("study events"). We use this to power features like progress tracking, streaks, and personalized recommendations.

Payment information: We do not collect or store your card or payment details directly. Payments are processed by [Stripe/Razorpay/etc.], and we only receive confirmation of payment status, not your full payment details.

Device and technical data: IP address, browser/device type, and similar technical information collected automatically for security and analytics purposes.

2. Minors' Data

Many of our users are preparing for exams such as NEET and may be under 18. Where required by applicable law (including India's DPDP Act), we will:

  • Seek verifiable parental/guardian consent before processing a minor's personal data, where required.
  • Avoid behavioral tracking or targeted advertising directed at users we know to be minors.
  • Limit data collection from minors to what's necessary to provide the Service.

If you are a parent or guardian and believe we've collected data about your child improperly, contact us at [CONTACT EMAIL] and we will investigate and delete data as appropriate.

3. How We Use Your Information

  • To provide and operate the Service (lecture access, progress tracking, tests).
  • To communicate with you about your account, updates, or support requests.
  • To improve the Service based on aggregate usage patterns.
  • To detect and prevent fraud, abuse, or violations of our Terms.

We do not sell your personal data.

4. Data Retention

We retain account and study-activity data for as long as your account is active, plus [X months/years] after account closure, unless a shorter period is required by law or you request earlier deletion. You can request deletion of your account and associated data at any time by contacting [CONTACT EMAIL].

5. Data Storage and Security

Your data is stored on [Cloudflare D1 / infrastructure description — keep this general in the public-facing version; don't disclose specific internal architecture]. We take reasonable technical and organizational measures to protect your data, including encrypted connections and access controls. No system is 100% secure, and we cannot guarantee absolute security.

6. Third-Party Services

We use third-party providers for specific functions, including:

  • Payment processing ([Stripe/Razorpay])
  • Video hosting/streaming infrastructure
  • [Any analytics tools, e.g. error tracking]

These providers only receive the data necessary to perform their function and are bound by their own privacy commitments.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent (where processing is based on consent)

To exercise these rights, contact [CONTACT EMAIL]. We will respond within [X days] as required by applicable law.

8. Grievance Officer

In accordance with Indian law, our Grievance Officer can be reached at:

[NAME] · [EMAIL] · [ADDRESS]

9. Changes to This Policy

We may update this policy from time to time. We'll notify users of material changes via [email/in-app notice] and update the "Last updated" date above.

10. Contact Us

Questions about this policy: [CONTACT EMAIL]