Privacy Policy
Application: DepLearn (Package: com.deplearn.app)
Last Updated: November 5, 2026 | Effective Date: September 15, 2026
Executive Privacy Summary for Students, Parents & Reviewers
- DepLearn is an educational assessment platform tailored for CBSE Class 9 and Class 10 students.
- We do NOT sell, rent, or trade student personal information or academic records to third parties.
- We do NOT employ third-party targeted behavioral advertising trackers.
- Our Google OAuth & User Data integration strictly adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Users retain complete ownership and control over their data, including instant account and data deletion rights within 48 hours.
1. Scope and Applicability
This Privacy Policy governs the manner in which DepLearn (“we”, “our”, or “us”) collects, uses, maintains, and discloses information collected from users (each, a “Student”, “Parent”, or “User”) of the DepLearn Android mobile application (Package Name: com.deplearn.app) and the official website hosted at https://deplearn.com.
2. Information We Collect
We limit the collection of personal data strictly to what is necessary for educational learning progress and account security:
A. Account Credentials
Email address used for passwordless sign-in with a 6-digit One-Time Password (OTP), or the name, email address and avatar from your Google account if you sign in with Google. Student full name, selected class (CBSE Class 9 or Class 10), preferred language and daily practice goal.
B. Academic Progression & Quiz Performance
Mock test attempts, question timestamps, option selections, Mistake Bank logs (incorrect questions flagged for revision), mastery badges, and educational virtual QuizCoins balance.
C. Device & Diagnostics Information
Android OS version, app version, anonymous device model, and crash diagnostics collected via Sentry for bug resolution and uptime monitoring. Firebase Cloud Messaging (FCM) push notification tokens, used to send study reminders and, if you allow notifications, practice, streak, weekly-ranking and offer messages (you can switch notifications off in your phone’s settings at any time; we avoid reminder and offer messages between 10 pm and 7 am IST). The app also creates an anonymous device identifier (a salted one-way hash of an Android identifier, never the identifier itself) and sends it when you sign in, so we can notice when several accounts are used on one phone and refuse a login token that turns up on a different phone.
D. Security & Login Telemetry
IP address, approximate city/region, login method (Google OAuth or Email OTP), and device session metadata collected strictly for security auditing, detection of unauthorized access, and VPN/root environment flagging. This data is retained for a maximum of 90 days and is never used for advertising or shared with third parties.
E. Pre-launch Waitlist
The website’s waitlist is now closed. If you joined it before launch, we hold your name, email address, class, board, optional phone number and sign-up time. The early-bird Pro offer for waitlist sign-ups has ended and is no longer applied to accounts; it has been replaced by the launch offer described in section G, which anyone can receive by signing up. We now keep this information only to answer you if you write to us. You can ask us to delete your waitlist entry at any time by writing to support@deplearn.com.
F. Refer & Earn
Every student gets a personal referral code. If a friend enters your code, we store the link between the two accounts and the QuizCoin rewards paid for it. We use this only to pay those rewards and to stop abuse (for example, a code used on your own second account or on the same phone, which earns nothing). You are not shown your friend’s personal details, and they are not shown yours; you only see that a reward arrived. Referral records are deleted when either account is deleted.
G. Launch Offer (first 200 students)
The first 200 students who create an account after launch receive one month of Pro for free. To run it fairly we record which account received it and when, the email domain of that account (to limit how many free months go to one organisation), and the result of a check by Google Play (Play Integrity) that the app is the genuine DepLearn app on a genuine device; the check result and what happened to your free month are stored without the token itself. We give the offer to one account per phone and do not give it to accounts that use a known disposable email address. If you delete your account, all of that is deleted with it. To stop the same phone receiving the offer again under a new account, we keep one thing after deletion: the anonymous one-way hash of the device identifier described in section C, together with the date your free month ended. It is not linked to your name, email or any account, and it is deleted 120 days after the offer was given.
3. Google User Data & OAuth Consent Compliance
DepLearn allows optional sign-in via Google Sign-In / OAuth. When you authenticate via Google:
- We only access your fundamental profile information: your name, email address, and profile avatar URL provided by Google’s standard profile scope.
- We do NOT request access to sensitive scopes such as Google Drive, Gmail, Google Contacts, or location.
- We use this data solely to verify your identity, populate your display name, and securely sync your CBSE quiz progress across your devices.
4. How We Use Collected Data
- To deliver personalized CBSE Class 9 & 10 mock quizzes, instant solutions, and formula sheets.
- To power the Socratic AI Tutor, providing step-by-step diagnostic hints without direct answer revelation.
- To calculate student percentile ranks, daily consistency streaks, and class leaderboard standings.
- To transmit transactional notifications such as verification OTPs and board exam timetable alerts, and (with your permission) practice reminders, streak and weekly-ranking updates, and occasional offers.
- To detect and prevent fraudulent bot attempts or abuse of our virtual QuizCoin system, including the Refer & Earn programme.
5. Minor Safety & DPDP Act 2023 Compliance
Recognizing that our primary beneficiaries are high school students (predominantly minors aged 13 to 18), we operate under the stringent requirements of the Digital Personal Data Protection (DPDP) Act, 2023 (India) and global child safety frameworks:
- We do not engage in targeted behavioral advertising aimed at children.
- We do not track student behavior across third-party websites or services.
- All AI Tutor interactions are filtered with strict safety guardrails preventing inappropriate content.
- Parents or legal guardians may review, download, or request the immediate deletion of their child’s learning records by contacting our Grievance Officer.
6. Third-Party Service Providers
We collaborate only with vetted enterprise cloud providers bound by strict data processing and confidentiality agreements:
Encrypted relational database hosting student records and quiz logs.
In-memory caching and real-time leaderboard ranking.
Secure dispatch of push notifications and study reminders.
Socratic conceptual doubt clearing. Queries are anonymized.
Application crash monitoring and error diagnostics. Receives anonymized device metadata and stack traces only — no personally identifiable student data.
Sends the sign-in one-time codes and other service emails (for example, waitlist confirmations). It receives your email address and the message text.
Hosts this website and stores app images and files. It does not receive your quiz or profile data.
PCI-DSS compliant payment gateway for processing Pro pass purchases. Razorpay handles card, UPI, and net-banking transaction data under its own published Privacy Policy.
7. Account & Data Deletion Rights
In compliance with Google Play Developer Policy and Section 12 of the DPDP Act 2023, you have the right to erase all your personal data at any time:
In-App: Navigate to Settings > Account > Delete account & data.
Web / Remote Request: Visit our dedicated Google Play Data Deletion Protocol page or email privacy@deplearn.com. All personal records and test logs are permanently purged within 48 hours.
8. Grievance Redressal & Contact Officer
In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act 2023, the details of our designated Grievance Officer are:
Designation: Data Protection & Grievance Redressal Officer
Entity: DepLearn, India
Grievance Email: grievance@deplearn.com
Support Desk: support@deplearn.com
Response Turnaround: Within 48 business hours of verified complaint receipt