Privacy Policy

Last updated: March 30, 2026

1. Introduction & Scope

Ghyaan ("we," "our," or "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at https://www.ghyaan.com, our Progressive Web App, and all related services (collectively, the "Platform").

This Policy is designed to comply with India's Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By using our Platform, you consent to the collection and use of your information as described in this Policy.

2. Information We Collect

We collect the following categories of information:

a) Account Information

  • When you sign in using a supported third-party authentication provider (e.g., Google Sign-In), we receive your name, email address, and profile picture as provided by that service.
  • We do not collect passwords, as authentication is handled entirely by the third-party provider.

b) Usage Data

  • Test attempts, scores, answer selections, and time spent per question.
  • Practice session history, bookmarks, and topic-wise performance data.
  • Learning streaks, leaderboard rankings, and analytics data.

c) Device & Technical Data

  • Browser type and version, operating system, screen resolution.
  • IP address (anonymized for analytics purposes).
  • Device identifiers for PWA functionality only.

d) Payment Information

  • We do not collect, store, or process your financial details (credit/debit card numbers, UPI IDs, bank account details).
  • All payments are processed securely by our PCI DSS-compliant third-party payment gateway. We only receive a transaction ID and payment confirmation status.

3. Legal Basis for Processing

Under the DPDPA 2023, we process your personal data on the following grounds:

  • Consent: You provide explicit consent when you create an account and agree to this Privacy Policy.
  • Contractual Necessity: Processing is necessary to fulfil our service obligations to you (e.g., providing test results, analytics).
  • Legitimate Purpose: Processing is necessary for platform security, fraud prevention, and service improvement.

4. How We Use Your Information

  • To operate, maintain, and provide the features of our Platform.
  • To personalize your learning experience, including language preferences and exam selections.
  • To generate performance analytics, topic-wise insights, and leaderboard rankings.
  • To process transactions and activate Premium Access upon successful payment.
  • To communicate with you regarding account activities, updates, and support requests.
  • To analyze usage patterns and improve our Platform, content, and services.
  • To detect, prevent, and address fraud, abuse, and security issues.

5. Cookies & Local Storage

We use browser local storage and session storage (not traditional cookies) to maintain your session, preferences (theme, language, font size), and offline functionality via our Progressive Web App (PWA). These are essential for the Platform to function and cannot be disabled without affecting usability.

We do not use third-party advertising cookies or tracking pixels. We do not participate in cross-site tracking or real-time bidding.

6. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal information to any third party. We share data only with the following trusted service providers, strictly for the purposes stated:

  • Cloud Infrastructure Provider — Authentication, database, cloud hosting, and analytics. Subject to the provider's applicable data processing terms and privacy policy.
  • Payment Gateway — Secure payment processing. Subject to the gateway provider's privacy policy and PCI DSS compliance standards.

We may also disclose your information if required by law, court order, or governmental regulation, or to protect the rights, property, or safety of Ghyaan, our users, or the public.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our Services. Specifically:

  • Account data: Retained until you request account deletion.
  • Performance & analytics data: Retained for the lifetime of your account to ensure continuity of your learning journey.
  • Payment records: Retained for 7 years as required under Indian tax and financial regulations (GST Act, Income Tax Act).

Upon account deletion request, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Data Security

We implement industry-standard security measures to protect your data:

  • All data in transit is encrypted using TLS 1.2+ (HTTPS).
  • Data at rest is encrypted using our cloud provider's default encryption (AES-256).
  • Access to user data is restricted through database-level access control rules, ensuring users can only access their own data.
  • Administrative access is role-based and limited to authorized personnel.
  • We conduct periodic security reviews of our infrastructure and access controls.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected users in the event of a data breach.

9. Your Rights Under DPDPA 2023

As a Data Principal under the DPDPA 2023, you have the following rights:

  • Right to Access: Request a summary of your personal data being processed and the processing activities.
  • Right to Correction: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data (subject to legal retention requirements).
  • Right to Nominate: Nominate another person to exercise your rights in case of death or incapacity.
  • Right to Grievance Redressal: Lodge a complaint if you believe your data rights have been violated.

To exercise any of these rights, please email us at support@ghyaan.com. We will respond to valid requests within 30 days.

10. Children's Privacy

Our Platform is designed for students preparing for competitive examinations, which may include users under 18 years of age. In accordance with the DPDPA 2023:

  • Users under 18 must have verifiable parental or guardian consent before creating an account.
  • We do not knowingly collect personal data from children under 13 without parental consent.
  • We do not engage in tracking, behavioral advertising, or profiling targeted at children.
  • We do not process children's data in any manner that is detrimental to their well-being.

If you are a parent or guardian and believe your child has provided personal data without your consent, please contact us and we will take steps to remove such information.

11. International Data Transfers

Your data is stored on secure cloud infrastructure provided by industry-leading cloud service providers. While our providers may process data in data centres globally, we ensure that appropriate safeguards are in place in accordance with the DPDPA 2023 and any notifications issued by the Government of India regarding cross-border data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be notified via email or in-platform notification. Your continued use of the Platform after changes are posted constitutes your acceptance of the revised Policy.

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDPA 2023, the details of our Grievance Officer are as follows:

  • Name: Grievance Officer, Ghyaan
  • Email: support@ghyaan.com
  • Response Time: We will acknowledge your complaint within 24 hours and resolve it within 30 days.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: