Privacy Policy

Last updated: 2026

What we collect

When you sign in with Google, we receive your name, email address and profile picture from your Google account. As you use the course, we store your progress (which levels you've completed, quiz answers' correctness, XP and streaks). If you purchase a certificate, we store the Razorpay payment record (amount, payment ID, status) and the resulting certificate data (grade, accuracy, issue date).

What we don't collect

We never see or store your Google password or any Razorpay payment method details (card/bank/UPI info) those are handled entirely by Google and Razorpay respectively.

How it's used

Your data is used solely to run the course (tracking your progress, gating level unlocks, computing your certificate grade) and to display your name on the certificate you purchase. It is not sold or shared with advertisers.

Who else sees it

Data is processed by our infrastructure providers acting on our behalf: Supabase (database, authentication, file storage) and Razorpay (payment processing). A certificate's public fields (name, grade, accuracy, issue date) are visible to anyone who looks it up by ID at /verifythat's the point of a verifiable certificate, so don't share a certificate ID you don't want looked up.

Data retention and deletion

Your progress and profile data is retained as long as your account exists. To request deletion of your account and associated data, contact us using the details on your payment receipt (note: a paid certificate's record may be retained for payment/accounting purposes even after an account deletion request).

Cookies

We use a session cookie (set by Supabase Auth) to keep you signed in. We don't use third-party advertising or tracking cookies.

This is a general-purpose privacy document, not a substitute for review by a qualified lawyer before commercial launch (including any applicable notice/consent requirements under Indian data protection law).