Finalyxprep — Privacy Policy

Depending on how you use Finalyxprep, we may collect the data categories below:

• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.
• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.
• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.
• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.

We use the information we collect for the following purposes, and no others:

• To detect and prevent fraud, abuse and policy violations.
• To create, secure and maintain your account.
• To send you course-related notifications — only after you opt in.
• To deliver the courses, live classes, notes and mock tests you have access to.
• To respond to your support requests and doubts.
• To process payments and issue invoices and receipts.
• To meet our legal, tax and accounting obligations.

Your data is never sold. We disclose the minimum necessary data only to the partners that power Finalyxprep:

• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.
• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.
• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.
• Razorpay — our payment processor, to take payments and issue refunds.

Each provider is bound to use the data only to perform its service for us, not for its own purposes.

We protect your data with industry-standard safeguards: bcrypt-hashed passwords, TLS 1.2+ encryption for all data in transit, and encrypted database backups. Our team performs routine security reviews and applies critical patches within 72 hours of disclosure.

We keep your account data for as long as your account stays active. You can request deletion at any time using the in-app “Delete my account” option or by emailing [email protected]. We delete your personal data within 30 days, except records we are legally required to retain for tax, accounting or compliance reasons (typically up to 7 years).

Under the DPDP Act and Google Play’s policies, you have the right to:

• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.
• Correct information that is inaccurate or out of date.
• Delete your data, subject to legal retention requirements.
• Withdraw consent for any non-essential processing at any time.
• Access a copy of the personal data we hold about you.

To exercise any of these rights, email [email protected] and we will respond within the timelines required by law.

Finalyxprep is designed for learners aged 13 or older. Users under 18 should use the app and make purchases only with permission from a parent or guardian. We do not knowingly gather information from anyone under 13, and we remove any such data as soon as we become aware of it.

We may update this policy from time to time. For any significant change, we will give you in-app notice and revise the “Last updated” date above. Your continued use of Finalyxprep after the change indicates your acceptance of it.

Questions or complaints about how we treat your data? Write to [email protected]. We respond to grievances as soon as we can and within the limits set by the DPDP Act.