Privacy Policy

What we collect

• Account details: your email address and sign-in credentials. Passwords are handled by our authentication provider and stored only in hashed form.
• Learning activity: the answers you give, how long you take, the topics you practise, and the mastery and readiness scores we calculate from them.
• Things you send us: question reports (flags) with any note you add, and, if you join a paid plan's early access list, your email, the plan and your preferred currency.
• Preferences: settings such as theme, notification choices and your target exam.
• On your device: a sign-in cookie that keeps you logged in, and browser storage for preferences and an offline copy of recent practice.
• Anonymous usage counts: when you open the home, exam, pricing or about pages, start or finish the free diagnostic, sign up, or click a plan, we record the event, the page, the exam, the website that referred you (its domain only) and a code that changes every day. The code is made from your IP address and browser type and can't be turned back into either; we don't store your IP address, and these counts use no cookies. If your browser sends Do Not Track or Global Privacy Control, we record nothing. We delete these records after 400 days.

The free diagnostic works without an account; we do not store your answers to it on our servers. We do not collect payment details: checkout is not open yet.

Why we use it

• To run your account and sign you in.
• To personalise practice: tracking mastery per topic, bringing back what you keep missing, and estimating your readiness for an exam.
• To fix and improve questions you report.
• To email you about early access, only if you joined the list.
• To see, in aggregate, which pages and exams people use and where the free diagnostic loses them, so we know what to improve.

We process this data on the basis of the consent you give when you create an account or submit a form, and for the purposes you would reasonably expect when you provide it voluntarily.

What we never do

• No advertising, and no third-party advertising or analytics trackers on this site. Our own usage counts stay in our database.
• No selling or renting of your personal data.
• No sharing of your learning activity with employers, vendors or exam providers.

Who processes it, and where

Our database and sign-in run on Supabase, which stores the data in its Tokyo, Japan region. The website is served by our hosting provider. These processors act only on our instructions. By using Gyan AI you acknowledge that your data is stored outside India, as the DPDP Act permits.

How long we keep it

• Account and learning data: until you delete your account.
• Early access list entries: until checkout opens and we have contacted you, or until you ask us to remove them. Entries made while signed in are removed with your account.
• Question reports: kept to improve the question bank; reports you sent while signed in are deleted with your account.

Your rights

Under the DPDP Act you can:

• Ask for a summary of the personal data we hold about you and how we use it.
• Ask us to correct, complete or update it.
• Erase it, by deleting your account or by writing to us.
• Withdraw consent at any time; this stops future processing but not what was lawfully done before.
• Nominate another person to exercise these rights if you die or become incapacitated.
• Have a grievance addressed by us, and if you are not satisfied, complain to the Data Protection Board of India.

Delete your account yourself: sign in, open your profile and choose Delete account. This immediately and permanently deletes your account together with your answers, mastery data, quiz history, bookmarks, question reports and preferences.

Security

Data travels over encrypted connections (HTTPS). In our database, row-level security limits every learner's records to that learner. No system is perfectly secure; if a breach affects your data, we will tell you and the Data Protection Board as the law requires.

Children

Gyan AI is meant for adults preparing for professional certifications. We do not knowingly process the personal data of anyone under 18. If you believe a child has created an account, contact us and we will delete it.

Contact and grievances

For any request or complaint about your personal data, write to help@gyanagent.in. We will acknowledge it and respond as quickly as we can.

If we change this policy, we will update the date above; for significant changes we will also tell you by email or in the app.