Privacy Policy

1. Introduction

LearnPrep ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website, mobile application, and related services (the "Services"). This Policy is framed in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

2. Data We Collect

• Account data: name, email address, phone number (optional), password (stored as a secure hash), profile photo, and exam preference (JEE/NEET/CUET/board).
• Usage data: questions viewed, solutions accessed, search queries, progress and bookmarks, session/device information, and IP address.
• Payment data: transaction records for subscription purchases. We do not store your card, UPI, or bank details — these are handled directly by our PCI-DSS compliant payment gateway partner.
• Communications: messages you send us via the Contact form or email, and any support correspondence.
• Analytics & cookies: aggregated, pseudonymized usage analytics collected via cookies and similar technologies to understand how the Services are used and to improve them.

3. How We Use Your Data

We use your personal data to:

• Create and manage your account, and authenticate you across our website and mobile app;
• Provide and personalize the Services — e.g. tracking your progress and bookmarks;
• Process payments and manage subscriptions;
• Send essential service communications (OTPs, password resets, account/deletion notices) and, where you have consented, product updates;
• Monitor, secure, and improve the Services, including detecting fraud and abuse;
• Comply with applicable legal obligations.

4. Third-Party Services

We share limited data with trusted third-party service providers strictly to operate the Services, including:

• Payment processing: our payment gateway partner (Cashfree), to process subscription payments securely;
• Authentication: Google OAuth, if you choose to sign in with Google;
• Push notifications: Firebase Cloud Messaging, to deliver app notifications;
• Product analytics: PostHog, to understand aggregate usage patterns and improve the product.

We do not sell your personal data to third parties for marketing purposes.

5. Data Retention & Deletion

We retain your personal data for as long as your account remains active. You may request deletion of your account at any time from Account Settings. Upon request, your account enters a 30-day grace period, during which you can reactivate it by simply logging back in. After 30 days, your account and personal data are permanently and irreversibly deleted from our active systems, except where we are legally required to retain certain records (e.g. transaction records for tax/accounting purposes) for a longer period as mandated by law.

6. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you;
• Correct inaccurate or incomplete personal data;
• Request erasure of your personal data (via account deletion, as described above);
• Withdraw consent for optional processing (e.g. marketing communications) at any time;
• Nominate another individual to exercise these rights on your behalf, in the event of death or incapacity;
• Grievance redressal — raise a complaint with our Grievance Officer (see Section 9).

To exercise these rights, contact us at support@learnprep.in.

7. Data Security

We implement reasonable security practices and procedures, including encryption of data in transit (HTTPS/TLS), hashed password storage, and access controls, consistent with the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Our Services are used by students, including those under 18. Where a user is a minor, we expect a parent or legal guardian to have reviewed this Policy and consented to the collection and use of the minor's data as described herein.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the Grievance Officer for LearnPrep can be reached at:

Grievance Officer, LearnPrep
Email: support@learnprep.in

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via the Services or by email. The "Effective date" above reflects the date of the latest revision.

11. Contact Us

For any privacy-related questions, please reach out via our Contact page or email support@learnprep.in.