Privacy Policy

1. Scope of This Policy

This Policy applies to personal data processed through the Platform: account and login data, purchase and access records, learning-progress data, and technical data collected automatically. It does not apply to third-party sites we merely link to.

2. Personal Data We Collect

We collect only what is needed to run the Platform:

• Account data: the email address you sign in with, and (for a minor learner) the parent/guardian's contact details where provided.
• Purchase and entitlement data: which chapters or plans you have purchased, order references, access period, and transaction status. We do not collect or store your full card, UPI or bank details ourselves — see Section 5.
• Learning-activity data: chapter progress, quiz and practice attempts, bookmarks, first-attempt outcomes and similar in-app history, used to power the Dashboard and Scope of Learning pages.
• Technical data: IP address, device/browser type, timestamps and basic diagnostic logs generated automatically by our hosting provider for security and reliability.
• Support communications: anything you send us via the grievance/support channel, including the content of that message.

3. How We Use Personal Data

We use personal data to: create and secure your account; verify purchases and grant or revoke chapter access for the correct Access Period; save and display your learning progress; respond to support and grievance requests; detect fraud, credential sharing and abuse; comply with legal, tax and accounting obligations; and improve the Platform's content and reliability. We do not sell personal data.

4. Cookies and Local Storage

The Platform uses browser local storage and, where applicable, cookies to keep you signed in, remember your selected colour theme, and (during the current preview period) to remember that a preview access code was entered. These are functional, not advertising, cookies. We do not currently run third-party advertising trackers on the Platform.

5. Payment Data

Payments are processed by a licensed third-party payment gateway (for example Razorpay). Your card, UPI or bank details are entered directly into that provider's secure system and are not seen, collected or stored by us. We receive only the order status, amount and a transaction reference needed to activate your access and handle refunds. The payment provider's own privacy policy governs how it handles your payment details.

6. Children's Data and Parental Consent

Where a learner is under 18, we rely on a parent or lawful guardian to create the account, make the purchase, and accept this Policy on the learner's behalf. We collect only the minimum data needed to provide the Platform to that learner (account email, purchase record, learning-progress data) and do not knowingly use a minor's data for behavioural advertising. A parent or guardian may contact the Grievance Officer at any time to review, correct or request deletion of a minor's data, subject to Section 9.

7. Service Providers and Sharing

We share personal data only with service providers who process it on our behalf to run the Platform, under obligations of confidentiality and security, including: our hosting and content-delivery provider (Cloudflare), our payment gateway (for example Razorpay), and, once introduced, our authentication provider (for example Supabase) and any email/SMS provider used for login or receipts. We may also disclose data where required by law, court order or a lawful government request, or to protect the rights, safety or security of YarvixLab, our users or the public. We do not share personal data with advertisers or data brokers.

8. International Data Storage

Our hosting and infrastructure providers operate global networks, which means personal data may be processed or stored on servers outside India. Where this occurs, we rely on our providers' own security and contractual safeguards, and take reasonable steps to ensure data continues to be protected consistent with this Policy and applicable law.

9. Data Retention

We retain account and purchase data for as long as the account is active and for a reasonable period after (typically up to 7 years) to meet tax, accounting and dispute-resolution obligations. Learning-progress data is retained for as long as the account exists, so your history is not lost between visits. You may request earlier deletion of your account and associated data as described in Section 11, subject to what we are legally required to keep.

10. Security

We apply reasonable technical and organisational safeguards, including encrypted transport (HTTPS), access-controlled storage and signed session tokens, to protect personal data against unauthorised access, alteration or loss. No online system is completely secure, and we cannot guarantee that a breach will never occur. We will notify affected users and the relevant authority where required by applicable law if a data breach materially affecting personal data occurs.

11. Your Rights and Choices

Subject to applicable law, you (or, for a minor, the parent/guardian) may request to: access the personal data we hold about the account; correct inaccurate data; delete the account and associated personal data, subject to Section 9's retention needs and any unresolved paid-order obligations; and withdraw consent for optional processing where consent is the basis used. Send requests through the contact details in Section 14; we will acknowledge within 48 hours and aim to resolve within the timeframe required by applicable law.

12. Do Not Track and Marketing

We do not currently send marketing emails or SMS. If this changes, any promotional communication will include a clear opt-out, and we will not send marketing messages to a learner known to be under 18 without parental consent.

13. Changes to This Policy

We may update this Policy for legal, security or business reasons. The revised version will show a new last-updated date. We will provide reasonable notice of a material change. Continued use of the Platform after notice constitutes acceptance, except where fresh consent is legally required.

14. Grievance Officer and Contact

Grievance Officer: Dr. Mohammad Yousuf Jamal | Designation: Proprietor. Current official email address, phone number, postal address and service hours are displayed on the Contact & Legal Notice page. Notices sent through the published grievance channel will be treated as notices to YarvixLab. Website: https://yarvixlab.com.