Privacy Policy
Application: Dep Learn (Package: com.deplearn.app)
Last Updated: September 15, 2026 | Effective Date: September 15, 2026
Executive Privacy Summary for Students, Parents & Reviewers
- Dep Learn is an educational assessment platform tailored for CBSE Class 9 and Class 10 students.
- We do NOT sell, rent, or trade student personal information or academic records to third parties.
- We do NOT employ third-party targeted behavioral advertising trackers.
- Our Google OAuth & User Data integration strictly adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Users retain absolute sovereignty over their data, including instant account and data deletion rights within 48 hours.
1. Scope and Applicability
This Privacy Policy governs the manner in which Dep Learn (“we”, “our”, or “us”) collects, uses, maintains, and discloses information collected from users (each, a “Student”, “Parent”, or “User”) of the Dep Learn Android mobile application (Package Name: com.deplearn.app) and the official website hosted at https://deplearn.com.
2. Information We Collect
We limit the collection of personal data strictly to what is necessary for pedagogical diagnosis and account security:
A. Account Credentials
Mobile phone number and/or Email address used for passwordless 6-digit One-Time Password (OTP) verification. Student full name and selected target class (CBSE Class 9 or Class 10) and medium/preferred language.
B. Academic Progression & Quiz Performance
Mock test attempts, question timestamps, option selections, Mistake Bank logs (incorrect questions flagged for revision), mastery badges, and educational virtual QuizCoins balance.
C. Device & Diagnostics Information
Android OS version, app version, anonymous device model, and crash diagnostics collected via Sentry for bug resolution and uptime monitoring. Firebase Cloud Messaging (FCM) push notification tokens for study reminder alerts.
D. Security & Login Telemetry
IP address, approximate city/region, login method (Google OAuth or Email OTP), and device session metadata collected strictly for security auditing, detection of unauthorized access, and VPN/root environment flagging. This data is retained for a maximum of 90 days and is never used for advertising or shared with third parties.
3. Google User Data & OAuth Consent Compliance
Dep Learn allows optional sign-in via Google Sign-In / OAuth. When you authenticate via Google:
- We only access your fundamental profile information: your name, email address, and profile avatar URL provided by Google’s standard profile scope.
- We do NOT request access to sensitive scopes such as Google Drive, Gmail, Google Contacts, or location.
- We use this data solely to verify your identity, populate your display name, and securely sync your CBSE quiz progress across your devices.
4. How We Use Collected Data
- To deliver personalized CBSE Class 9 & 10 mock quizzes, instant solutions, and formula sheets.
- To power the Socratic AI Tutor, providing step-by-step diagnostic hints without direct answer revelation.
- To calculate student percentile ranks, daily consistency streaks, and class leaderboard standings.
- To transmit transactional notifications such as verification OTPs and board exam timetable alerts.
- To detect and prevent fraudulent bot attempts or abuse of our virtual QuizCoin system.
5. Minor Safety & DPDP Act 2023 Compliance
Recognizing that our primary beneficiaries are high school students (predominantly minors aged 13 to 18), we operate under the stringent requirements of the Digital Personal Data Protection (DPDP) Act, 2023 (India) and global child safety frameworks:
- We do not engage in targeted behavioral advertising aimed at children.
- We do not track student behavior across third-party websites or services.
- All AI Tutor interactions are filtered with strict safety guardrails preventing inappropriate content.
- Parents or legal guardians may review, download, or request the immediate deletion of their child’s learning records by contacting our Grievance Officer.
6. Third-Party Service Providers
We collaborate only with vetted enterprise cloud providers bound by strict data processing and confidentiality agreements:
Encrypted relational database hosting student records and quiz logs.
In-memory caching and real-time leaderboard ranking.
Secure dispatch of push notifications and study reminders.
Socratic conceptual doubt clearing. Queries are anonymized.
Application crash monitoring and error diagnostics. Receives anonymized device metadata and stack traces only — no personally identifiable student data.
PCI-DSS compliant payment gateway for processing Pro subscription and coin top-up purchases. Razorpay handles card, UPI, and net-banking transaction data under its own published Privacy Policy.
7. Account & Data Deletion Rights
In compliance with Google Play Developer Policy and Section 12 of the DPDP Act 2023, you have the right to erase all your personal data at any time:
In-App: Navigate to Profile > Settings > Account > Delete Account.
Web / Remote Request: Visit our dedicated Google Play Data Deletion Protocol page or email privacy@deplearn.com. All personal records and test logs are permanently purged within 48 hours.
8. Grievance Redressal & Contact Officer
In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act 2023, the details of our designated Grievance Officer are:
Designation: Data Protection & Grievance Redressal Officer
Entity: Dep Learn EdTech (Proprietorship / OPC)
Registered Office: New Delhi, India (Full address to be updated upon company registration)
Grievance Email: grievance@deplearn.com
Support Desk: support@deplearn.com
Response Turnaround: Within 48 business hours of verified complaint receipt