Privacy Policy

Welcome to Sanxam. Your privacy is critically important to us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Sanxam mobile application and related services.

1. Information We Collect

1.1 Account Information

When you sign in using your Google account, we collect:

• Your name and display name
• Email address
• Profile picture URL
• Google account unique identifier

1.2 Test and Performance Data

As you use Sanxam, we collect data related to your learning activity:

• Test results and scores
• Questions answered and accuracy rates
• Time spent on tests and individual questions
• Streak and XP (experience points) data
• Coins earned and spent
• Bookmarked questions

1.3 Usage Analytics

We collect general usage data to improve the app experience:

• App usage patterns and frequency
• Feature engagement metrics
• Device type and operating system version
• App version information

1.4 Payment Information

For premium subscriptions, payment processing is handled by Razorpay. We do not store your credit card, debit card, or bank account details on our servers. Razorpay processes and stores payment data in accordance with PCI-DSS compliance standards. We only store:

• Subscription status (active/inactive)
• Subscription plan type
• Transaction reference IDs
• Subscription start and end dates

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Sanxam app and its features
• Track your learning progress and generate performance analytics
• Maintain leaderboards and ranking systems
• Process subscription payments and manage your account
• Send important notifications about your account or the service
• Prevent fraud and ensure security of the platform
• Comply with legal obligations

3. Data Storage and Security

Your data is stored securely in a PostgreSQL database hosted on Replit's cloud infrastructure. We implement the following security measures:

• Encrypted data transmission using HTTPS/TLS
• Secure database access with environment-level credentials
• Regular security reviews and updates
• Access to personal data is limited to essential operations only

4. Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. Your data is shared only in the following limited circumstances:

• Razorpay: Payment data is shared with Razorpay solely for processing subscription payments. Razorpay's privacy policy governs their handling of your payment information.
• Google Authentication: We use Google Sign-In for authentication. Google's privacy policy applies to data collected during the sign-in process.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.

5. Your Rights

You have the following rights regarding your personal data:

5.1 Access and Export

You can request a copy of all personal data we hold about you. Contact us at the email address below, and we will provide your data in a machine-readable format within 30 days.

5.2 Data Deletion

You can request deletion of your account and all associated data. Upon receiving a deletion request, we will:

• Delete your account information within 30 days
• Remove your test results, scores, and progress data
• Remove your data from leaderboards and rankings
• Cancel any active subscriptions

Some data may be retained for legal or compliance purposes (e.g., transaction records) for up to 180 days after deletion.

5.3 Data Correction

You can update your profile information at any time through the app settings. For corrections to other data, please contact us.

6. Cookies and Tracking

The Sanxam mobile app does not use browser cookies. However, our web landing page and service may use:

• Session tokens for authentication
• Local storage for app preferences and settings
• Service workers for PWA (Progressive Web App) functionality

7. Children's Privacy

Sanxam is designed for users preparing for competitive examinations such as UPSC and GPSC. The service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.

Users between the ages of 13 and 18 should use the app under the supervision of a parent or guardian.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you our services. Specifically:

• Account data: Retained until you request deletion
• Test results and progress: Retained until you request deletion
• Payment records: Retained for 5 years as required by Indian tax and financial regulations
• Usage analytics: Aggregated and anonymized after 12 months

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the app and updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: graphikians@gmail.com
• App: Settings > Help & Support within the Sanxam app