Privacy Policy

1. Introduction

GoodStudy is operated by VISIONSOFT INFOTECH PRIVATE LIMITED ("we," "us," "our," or "Company"), registered in India. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal data when you use the GoodStudy Android application and associated website ("Platform").

This Policy is compliant with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. By registering or using the Platform you acknowledge that you have read and understood this Policy and consent to the practices described herein.

2. Information We Collect

2.1 Information You Provide

When you register or use the Platform you voluntarily provide:

• Mobile phone number (used for OTP-based authentication)
• Full name
• Email address
• State of residence (Indian state)
• Profile avatar selection
• Educational preferences (e.g., target exam or subject)
• Support or feedback messages and any image attachments you voluntarily submit

2.2 Information Collected Automatically

When you use the app we automatically collect:

• Device information: model, manufacturer, Android OS version, screen resolution and density, processor count
• Storage information: total and free storage capacity (used for performance optimisation)
• Locale and timezone
• App version and build number
• IP address
• Firebase App Instance ID
• Google Advertising ID (Ad ID) — see Section 5 for opt-out options
• Meta (Facebook) app-scoped anonymous advertising identifier
• FCM (Firebase Cloud Messaging) token for push notifications
• Crash logs and diagnostic data via Firebase Crashlytics (always active)

2.3 Learning and Usage Data

• Courses, subjects, and chapters accessed
• Quiz and mock-test attempts, answers, and scores
• Video and reel viewing activity
• AI tutor chat messages and session history
• AI credit balance and purchase history
• Leaderboard participation and rankings

2.4 AI Tutor Interaction Data

When you use the AI tutoring feature, we collect and store:

• Your questions and messages sent to the AI tutor
• AI-generated responses delivered to you
• Session timestamps and AI credit consumption per interaction
• Subject and topic context associated with each AI session

AI conversation history is retained on our servers so you can review past sessions within the app. We do not sell your AI chat data or use it to train third-party AI models. Conversation data may be reviewed by our team in anonymised or aggregated form solely to improve response quality, detect misuse, and ensure platform safety.

2.5 Payment and Transaction Data

Payment processing is handled by our payment partners (Paytm and Cashfree). We store transaction metadata only — including plan name, amount, date, status, order ID, and gateway reference number. We do not store full card numbers, CVV, UPI credentials, or bank account details on our servers. All payment instrument data is handled exclusively by the respective payment gateway under their own privacy and security policies.

3. How We Use Your Information

We use the information collected for the following purposes:

• Authentication: Verifying your identity via mobile OTP and maintaining secure sessions
• Service delivery: Providing access to video lectures, quizzes, mind maps, PDFs, reels, and AI tutoring
• Personalisation: Adapting content recommendations based on your learning activity
• Billing: Processing subscription payments and AI credit purchases, issuing receipts, and managing auto-renewals
• Push notifications: Sending educational updates, reminders, and promotional messages via FCM
• Promotional communications: Contacting you on your registered mobile number and email address with offers, updates, and promotional content via SMS/text message, WhatsApp message, email, and other channels (see Section 8)
• In-app messaging: Displaying targeted campaigns via Firebase In-App Messaging (only with your analytics consent)
• Customer support: Responding to queries submitted via in-app chat or the support form
• Analytics: Understanding usage patterns to improve the Platform (only with your consent)
• Crash reporting: Detecting and fixing technical errors via Firebase Crashlytics (always active)
• Advertising attribution: Measuring the effectiveness of our marketing campaigns
• AI feature delivery: Processing your queries and generating AI tutor responses in real time
• AI quality improvement: Reviewing anonymised AI interactions to improve accuracy and safety of AI outputs
• Fraud prevention and security: Detecting suspicious activity, AI misuse, and protecting accounts
• Legal compliance: Meeting obligations under applicable Indian laws

4. Third-Party Services and Data Sharing

We do not sell your personal data to third parties. We share data only with the following service providers under strict contractual obligations:

4.1 Payment Gateways

• Paytm (One97 Communications Ltd) — subscription payments and UPI AutoPay mandates
• Cashfree Payments — AI credit purchases

Both gateways receive only the minimum data required to process your transaction.

4.2 Firebase Services (Google)

• Firebase Analytics — usage analytics (opt-in, default off)
• Firebase Crashlytics — crash and error reporting (always active)
• Firebase In-App Messaging — in-app campaigns (opt-in, default off)
• Firebase Cloud Messaging (FCM) — push notification delivery

4.3 Advertising Attribution

• Meta (Facebook) SDK— measures app installs and in-app events for our paid advertising campaigns. An anonymous app-scoped identifier and your Google Advertising ID may be shared with Meta. You can opt out by resetting your Advertising ID in your Android device settings (Settings > Privacy > Ads).
• Google Advertising ID— used for campaign attribution. Reset or opt out via Android Settings > Privacy > Ads.

4.4 Infrastructure

Our backend servers and all user data are hosted and stored exclusively within India. We do not transfer your personal data to servers located outside India. This means your data remains subject to Indian law at all times, including the Digital Personal Data Protection Act, 2023.

4.5 Legal Disclosure

We may disclose your information to government authorities or law enforcement when required by applicable Indian law, court order, or to protect the rights, property, or safety of users or the Company.

5. Analytics Consent and Your Choices

Firebase Analytics and Firebase In-App Messaging are disabled by default and are activated only upon your explicit consent within the app. You may withdraw consent at any time through app settings. Withdrawal stops future data collection for those services but does not delete previously collected data.

Firebase Crashlytics is always active and is necessary for maintaining app stability and security. It cannot be disabled without uninstalling the app.

To opt out of personalised advertising, reset your Google Advertising ID or enable "Opt out of Ads Personalisation" in your Android settings (Settings > Privacy > Ads).

6. AI Features and Data Processing

6.1 How the AI Tutor Works

The GoodStudy AI tutor is a credit-based automated service. When you send a query, your message and relevant session context are transmitted to an AI model for processing. The AI model generates a response which is returned to you in real time. Your AI chat data is processed on secure servers and is not shared with other users.

6.2 AI Data Retention

AI conversation history is retained for the lifetime of your account so you can access past sessions. Upon account deletion, all AI chat history is permanently deleted within 30 days, subject to any legal retention obligations.

6.3 Human Review of AI Interactions

We may periodically review AI conversations in anonymised or aggregated form to monitor for safety violations, improve AI response quality, and ensure compliance with our usage policies. In cases of reported abuse or suspected violation of our Terms, specific conversations may be reviewed by authorised Company personnel.

6.4 No Use of Your Data to Train Third-Party Models

Your personal AI conversations are notused to train or fine-tune any third-party AI model. Any internal use of AI interaction data for improving GoodStudy's AI service will be conducted only on anonymised or aggregated data, and only with appropriate safeguards.

6.5 AI Output Accuracy

AI-generated responses may contain errors, inaccuracies, or outdated information. We do not represent or warrant that AI outputs are correct, complete, or suitable for any particular purpose. You are solely responsible for independently verifying any information received from the AI tutor before relying on it for academic, professional, or any other decision-making purposes.

7. App Permissions

The GoodStudy app requests only the following device permissions:

• INTERNET — required for all platform features including video streaming, quizzes, and account management
• POST_NOTIFICATIONS (Android 13+) — to send push notifications; you may deny or revoke this at any time in device settings
• FOREGROUND_SERVICE / FOREGROUND_SERVICE_MEDIA_PLAYBACK — enables audio and video to continue playing when the app is in the background
• AD_ID (Android 13+) — access to the Google Advertising ID for attribution

We do not request or use your camera, microphone, precise location, contacts, or external storage. Storage capacity figures are read via system APIs only and do not access your personal files or media.

8. Promotional and Marketing Communications

By registering on the Platform and providing your mobile phone number and email address, you consent to receive promotional, marketing, and transactional communications from us. These communications may be sent to your registered mobile number and email address through the following channels:

• SMS / text messages to your registered mobile number
• WhatsApp messages to your registered mobile number
• Email to your registered email address
• Push notifications and in-app messages within the app
• Voice calls to your registered mobile number, where applicable

Such communications may include information about new courses and features, subscription offers, discounts, referral programs, study reminders, event invitations, and other promotional content. By providing your contact details and accepting this Policy, you expressly consent to being contacted through these channels for promotional purposes, and you agree that such communications will not be considered unsolicited or "spam" under applicable telecom or data-protection regulations.

You may opt out of promotional communications at any time by following the unsubscribe instructions included in the relevant message (for example, replying "STOP" to a message, using the unsubscribe link in an email, or adjusting your notification preferences in the app), or by writing to us at hello@goodstudy.in. Even after opting out of promotional messages, we may continue to send you essential service-related or transactional communications (such as OTPs, payment receipts, security alerts, and account notices) that are necessary to provide the Platform.

9. Data Security

All communications between the app and our servers use TLS/HTTPS encryption. We use token-based authentication with automatic session refresh. Session tokens are stored in the app's private SharedPreferences storage, which is inaccessible to other apps on non-rooted devices. Payment transactions are processed by PCI-DSS-compliant payment gateways and no sensitive financial data is stored on our servers or your device.

While we implement commercially reasonable security measures, no method of internet transmission is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique mobile number and keep your device secure.

10. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Crash logs are retained for up to 90 days. Analytics data follows Google's standard retention periods. Financial transaction records are retained for 7 years as required by Indian tax and financial regulations.

When you request account deletion, your profile data is deleted within 30 days, subject to retention obligations imposed by law.

11. Children's Privacy

GoodStudy is an educational platform serving students of all ages. Users under 18 must have the consent of a parent or legal guardian to register. We do not knowingly collect personal data from children under 13 without verified parental consent. If you believe a child under 13 has registered without consent, contact us immediately at hello@goodstudy.in.

12. Your Rights Under the DPDP Act, 2023

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Obtain a summary of your personal data and the purposes for which it is processed
• Right to Correction: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements
• Right to Grievance Redressal: File a complaint with our Grievance Officer
• Right to Nominate: Nominate another individual to exercise these rights in the event of your death or incapacity
• Right to Withdraw Consent: Withdraw analytics consent at any time without affecting prior processing

To exercise any of these rights, write to our Grievance Officer at hello@goodstudy.in. We will respond within the timeframe prescribed by applicable law.

13. Cookies and Website Tracking

Our website (goodstudy.in) may use essential cookies for session management and performance. No third-party advertising cookies are placed on the website. The GoodStudy Android app does not use browser cookies.

14. Third-Party Links

Our Platform may contain links to external websites. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before submitting any personal information.

15. Policy Updates

We may update this Privacy Policy periodically. For material changes, we will notify you via push notification or an in-app notice at least 7 days before the changes take effect. The current Policy is always available at goodstudy.in/privacy-policy. Continued use of the Platform after the effective date of changes constitutes acceptance of the revised Policy.

16. Governing Law and Jurisdiction

This Privacy Policy and any disputes arising out of or in connection with it shall be governed by the laws of the Republic of India. The courts of Jaipur, Rajasthan, India shall have exclusive jurisdiction over any such disputes. By using the Platform, you irrevocably submit to the jurisdiction of courts in Jaipur, Rajasthan, India.

17. Contact and Grievance Officer

For privacy-related questions, data requests, or complaints, please contact: