Privacy policy

For the purposes of the DPDP Act, Bloc Metric, India, is the Data Fiduciary that determines the purpose and means of processing your personal data. Contact: shaurya@sanghviinfo.com. Grievances may be raised with our Grievance Officer (see Grievance redressal).

• Account data — name, email address, a one-way hashed password, and your age/guardian and Terms acknowledgement. If you use Google sign-in, we receive your name, email and Google account identifier from Google.
• Security data — optional two-factor authentication secrets (stored encrypted), login attempt records, and email-verification / password-reset tokens.
• Study content — text, PDFs, documents, images, audio, video, YouTube links and voice recordings you upload or record, and the notes, flashcards, quizzes, exams and tutor responses generated from them.
• Activity data — XP, streaks, flashcard ratings, quiz and exam attempts, gems balance and redemptions, study-room participation, published packs, leaderboard position.
• Payment data — plan purchased, amount, currency, Razorpay order/payment identifiers and status. Card, UPI and bank details are collected directly by Razorpay; we never receive or store them.
• Communications — messages you send via the contact form or email.
• Technical data — IP address, browser/device information, and error logs needed to secure and operate the Service.

We do not intentionally collect sensitive personal data such as health, biometric, financial account or government ID data. Please do not upload such data in study material.

We process personal data only for lawful purposes for which you have given consent, or for legitimate uses permitted under Section 7 of the DPDP Act, namely to:

• create and secure your account, authenticate you and prevent fraud or abuse;
• generate study material, flashcards, quizzes, exams and tutor answers using AI processing of the content you submit;
• run gamification, leaderboards, study rooms and the pack marketplace;
• process payments and activate your plan, and keep records required by tax and accounting law;
• send transactional emails (verification, password reset, receipts, service notices) and respond to support requests;
• show advertising to free-plan users, only if you accept non-essential cookies;
• comply with legal obligations and lawful requests from authorities.

For users in the EEA/UK, our legal bases are performance of contract, consent (e.g., advertising cookies), legitimate interests (security, service improvement) and legal obligation.

You give consent when you create an account and when you accept non-essential cookies. You may withdraw consent at any time, as easily as you gave it, by changing your cookie choice (Cookie policy), deleting content, deleting your account, or emailing us. Withdrawal does not affect processing carried out before withdrawal, and some features may stop working without the related data.

We share personal data only with service providers that process it on our behalf under contractual obligations:

• DeepSeek — AI language model that generates study material from the content you submit.
• Google (Gemini) — AI processing for image, audio and video understanding and voice transcription.
• Google (Sign-in) — optional authentication with your Google account.
• Google AdSense — advertising shown to free-plan users, loaded only after you accept non-essential cookies.
• Google Analytics — usage analytics, loaded only after you accept non-essential cookies.
• Meta Platforms (Meta Pixel) — measures our Facebook/Instagram ads (page views, sign-ups, studies created), loaded only after you accept non-essential cookies.
• Razorpay — payment processing for plan purchases.
• Cloudflare R2 — temporary storage of uploaded media files.
• MongoDB (cloud database hosting) — storage of account and study data.
• Email (SMTP) provider — delivery of transactional emails.
• YouTube — retrieval of public video transcripts when you submit a YouTube link.

We do not sell your personal data. We may disclose data where required by law, court order or a government agency, or to protect the rights, safety and property of users or the public.

• Account and study data are kept while your account is active and deleted when you delete them or your account, or when the purpose is no longer served.
• Uploaded audio/video source files are automatically deleted from storage within about one hour; transcripts remain with the study.
• Payment and invoice records are retained for up to 8 years as required by Indian tax and accounting laws.
• Security and error logs are kept for a limited period for security and debugging, and as required by law (including CERT-In directions).

Under the DPDP Act you have the right to:

• obtain a summary of the personal data we process and the processing activities;
• request correction, completion, updating or erasure of your personal data;
• withdraw consent;
• grievance redressal through our Grievance Officer, and thereafter complain to the Data Protection Board of India;
• nominate another person to exercise your rights in the event of your death or incapacity.

Users in the EEA/UK additionally have rights of access, rectification, erasure, restriction, objection, portability and to lodge a complaint with a supervisory authority. California residents have the right to know, delete and correct personal information and to non-discrimination; we do not sell or "share" personal information for cross-context behavioural advertising except via AdSense cookies you may reject. To exercise any right, email shaurya@sanghviinfo.com. We may verify your identity before acting and will respond within the time required by law.