Privacy Policy

Browsing — no account needed

You can read question papers and note previews without signing in. While you browse, we use:

• An anonymous device cookie — a random ID (not your name or email) for features like study streaks and the oranges leaderboard.
• Your browser's local storage — reading preferences such as theme, dark mode and sidebar state. These stay on your device.
• Google Analytics — anonymous usage statistics (pages visited, device and browser type, approximate location) so we can see what's useful. Google Analytics uses its own cookies.
• Server logs — our hosting provider records standard request data such as IP address and browser type, used for security and fixing errors.

When you buy notes

At checkout we collect:

• Your email (Gmail) — it becomes your login and identifies your purchases.
• Your WhatsApp number — to send your login and help with your order.
• Your UTR / UPI reference number, the amount and the subjects you chose — to verify the payment.

You pay through your own UPI app, so we never see or store your card, bank account details or UPI PIN.

Signing in

If you sign in with Google, Google shares your name, email address and profile photo with us through Firebase Authentication (a Google service). We use your email to unlock your notes. If you sign in with a password we issued, we store only a secure hash of it, never the password itself. Either way, a signed-in session cookie keeps you logged in.

How we use your data

• To run the site and give you access to the notes you bought.
• To verify payments, prevent fraud and detect account sharing.
• To contact you about your order or a support request.
• To understand which features are useful and improve them.

We don't sell or rent your personal data, and we don't send marketing messages without asking.

Who processes it

We use trusted providers to run the site. They handle data only to provide their service to us:

• Railway — hosting the website;
• Neon — our database;
• Cloudflare R2 — storing files such as question papers and images;
• Google — Analytics and Firebase sign-in;
• WhatsApp — when we message you about your order.

Some of these providers may store data outside India.

How long we keep it

We keep your account and purchase records for as long as you have access to paid notes, and payment records for as long as Indian tax and accounting law requires. Analytics data is kept for Google Analytics' standard retention period.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what personal data we hold about you;
• correct or update it;
• delete your account and personal data (we may keep payment records the law requires); and
• handle a complaint about how we use your data.

Message our helpdesk (details below) and we'll respond within 30 days.

You can also block or delete cookies in your browser settings. The site still works without them, though signing in and some preferences need cookies.

Children

Students under 18 should use paid features with a parent's or guardian's permission. We don't knowingly collect personal data from children under 13. If you think a child has given us personal data, contact us and we'll delete it.

Changes

We may update this policy. The latest version, with its date, is always on this page.