Privacy

1. What we collect

Everything, by name:

• Your email address. It is how you sign in. There is no password, so we hold no password.
• What you tell us when you start: your name, and optionally your phone number, college, course and register number. Only the name is required. The register number exists so a teacher can match you to their class list.
• Your payment reference. The UPI transaction id you paste, the amount, and — if you upload one — a screenshot of the payment, so a human can verify it. We never see your card, your bank login or your UPI PIN, because payment happens in your own UPI app.
• Your work. Every document you classify, every figure you key, your scores, and the reasons the grader gave. This is the product; without it there is no mistake notebook and no score trend.
• Administrative records. When your access window was opened, extended, paused or revoked, and by whom.

We do not use advertising trackers, we do not run third-party analytics, and we do not collect your location. No cookie banner appears because the only cookie set is the one that keeps you signed in.

2. Why

To let you sign in, to verify that you paid, to open and manage your access window, to mark your work and show you what you got wrong, and to let the teacher running your course see how their class is doing. That is the whole list.

We do not sell your data, and we do not share it with anyone for marketing.

3. Who can see it

• You — your own profile, your own attempts, your own mistakes.
• The administrator running your course — your name, email, college, course, register number, payment submissions and access window. They need it to verify a payment and to manage your window.
• No other student. This is enforced by the database itself rather than by the app: a student's session cannot return another student's rows. It is checked by automated tests on every change.

4. Where it lives

In a Supabase (PostgreSQL) project hosted in the ap-northeast-1 region, Tokyo, and served by an application hosted on Vercel. Both are processors acting on our instructions. Payment screenshots are stored in a private bucket that cannot be read without an authorised, time-limited link.

5. How long we keep it

Your work and your account are kept while your access window is open, and afterwards so that you do not lose your history if the window is re-opened — students very often come back for a second batch. If you ask us to delete your account, we delete it.

Payment references are kept longer, because they are the record of a transaction, and records of an administrative action (who opened or revoked a window) are kept as an audit trail.

6. Your rights

Under India's Digital Personal Data Protection Act, 2023 you can ask us to show you the personal data we hold about you, correct something that is wrong, or delete your account and its data. Contact us and we will do it. You can also complain to the Data Protection Board of India.

Two honest caveats. Deleting your account deletes your work, including your scores and your mistake notebook — there is no undo. And we may keep the minimum record of a payment even after deletion, because a financial record is not ours alone to erase.

7. Children

This is built for college students. It is not intended for anyone under 18, and we do not knowingly create accounts for them.

8. Breaches

If personal data here is exposed, we will tell the people affected and the Data Protection Board as the Act requires, and we will say what happened rather than what it is comfortable to say.

9. Contact

A support address has not been published yet. Until it is, contact the teacher or the institution that gave you access to this course — they administer your account and can reach us.