Privacy Policy

We collect the following categories of information to provide, operate, and improve our educational services:

• 📋
  Identity & Contact Information: First name, last name, username, email address, phone number, and date of birth (optional). This is collected during account registration, profile editing, or when you contact us.
• 📊
  Learning & Usage Data: Problem attempts, answers submitted, scores, time spent on each question, hints used, practice session history, exam results, topic-level ability scores, and learning preferences. This data is essential for our adaptive learning engine and progress tracking.
• 💻
  Device & Technical Information: IP address, browser type and version, operating system, device identifiers, mobile push tokens, and user agent strings. Collected automatically when you access our platform.
• 🖼️
  Profile Media: Profile picture and tagline, uploaded or set voluntarily through your profile settings.
• 💳
  Payment Information: Customer name, email, phone number, and purchase amount when enrolling in paid courses. Payment transactions are processed securely through Cashfree Payments; we do not store full payment card details.
• 🏆
  Achievement & Engagement Data: Badges earned, leaderboard rankings, puzzle completions, daily challenge scores, and points accumulated.
• 📝
  Communications: Contact form submissions including your name, email, phone, and message content. Email logs related to challenge winner notifications and platform communications.
• 👤
  Guest User Data: If you practice without an account, we may collect a guest name and email along with practice session responses.
• 🔐
  Authentication Data: Login credentials (hashed passwords), OAuth tokens from Google and Facebook social login, mobile authentication tokens, and login attempt metadata including IP address and device information.

We use the information collected for the following legitimate business and educational purposes:

• ✓
  Provide, operate, and personalize our adaptive learning platform including IRT-based problem selection and progress tracking.
• ✓
  Authenticate your identity, maintain your account, and ensure secure access to our services.
• ✓
  Communicate important account updates, respond to inquiries, and provide customer support.
• ✓
  Monitor usage trends, analyze platform performance, and improve our educational content and features.
• ✓
  Process payments and manage premium course enrollments.
• ✓
  Send challenge notifications, leaderboard updates, and achievement badges.
• ✓
  Detect, prevent, and respond to security incidents, fraud, or unauthorized access.

We do not sell or rent your personal information. We may share your information with the following categories of third parties who help us operate our platform:

• ☁️
  Cloud Infrastructure: Amazon Web Services (AWS) EC2 — hosting our servers and database in the Mumbai (ap-south-1) region, India.
• 🔑
  Authentication Providers: Google OAuth 2.0 and Facebook Login — for social sign-in functionality. We receive only the profile information you authorize (name, email, profile picture).
• 💳
  Payment Processor: Cashfree Payments — for processing course enrollment payments. We share customer name, email, phone, and order amount with Cashfree. Your full payment card details are handled directly by Cashfree and are not stored on our servers.
• 📧
  Email Services: Google SMTP (Gmail) — for sending account notifications, challenge updates, and support communications.
• 📱
  Push Notifications: Firebase Cloud Messaging (Google) — for sending push notifications to mobile app users.
• ⚖️
  Legal Compliance: When required to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• 🔄
  Business Transfers: In connection with a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction.

Your personal information is stored and processed on secure servers located in India.

• 📍
  Primary Location: Amazon Web Services (AWS) data centers in the Mumbai (ap-south-1) region, India. Our application servers, PostgreSQL database, and media file storage are all hosted within this region.
• 🌐
  We do not currently transfer your data to servers located outside India. In the event that we engage service providers that process data outside India, we will ensure appropriate safeguards are in place in compliance with applicable law.

We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law:

• 👤
  Account Data: Retained for the duration of your active account. If your account is inactive for an extended period, we may retain the data subject to applicable legal requirements.
• 📊
  Learning Data: Problem attempts, scores, and ability estimates are retained to maintain your learning progress and adaptive model. This data is essential for the core functionality of our platform.
• 💳
  Payment Records: Retained for as long as required by tax and financial regulations (typically 7 years from the date of transaction).
• 🔐
  Login Metadata: Login attempt records are retained for security monitoring purposes and may be periodically purged.
• 📧
  Communications: Contact form submissions and email logs are retained for support and record-keeping purposes.
• 🗑️
  Account Deletion: Upon account deletion, most personal data is permanently deleted within a reasonable timeframe. However, certain records may be retained where required by law (e.g., payment transaction records).

You have the following rights regarding your personal information under applicable data protection laws:

• 👁️
  Right to Access: You can view and update most of your account information through your profile settings at any time.
• ✏️
  Right to Correction: You can update or correct your personal information through your account settings or by contacting us.
• 🗑️
  Right to Deletion: You may request deletion of your account and associated data by contacting us at mathsversityinfo@gmail.com. We will process your request within a reasonable timeframe. Note that certain data may need to be retained for legal compliance (e.g., payment records).
• 📥
  Right to Data Portability: You may request a copy of your personal data in a commonly used format by contacting us.
• 🚫
  Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time by contacting us.
• 📧
  You may opt out of promotional communications at any time using the unsubscribe link provided in our emails.
• 🍪
  Manage cookie preferences through your browser settings. Please refer to our Cookie Policy for more details.

When you request account deletion, the following process applies:

• 📩
  Submit a deletion request via email to mathsversityinfo@gmail.com from the email address associated with your account.
• ✅
  We will verify your identity and process the deletion within a reasonable timeframe (typically within 30 days).
• 🗑️
  Upon deletion, your account, profile, learning data (problem attempts, scores, ability estimates), badges, and personal information will be permanently removed.
• 📋
  Payment transaction records may be retained as required by tax and financial regulations. Leaderboard entries associated with your username may be anonymized rather than deleted to preserve platform integrity.
• 🔗
  Some data associated with your account in third-party systems (e.g., Cashfree payment records, Firebase push tokens) may be subject to their respective retention policies.

We implement appropriate technical and organizational measures to protect your personal information, including:

• 🔒
  Encryption of data in transit via SSL/TLS (HTTPS).
• 🔑
  Hashed password storage using Django's built-in PBKDF2 algorithm.
• 🛡️
  Brute-force login protection and admin honeypot against unauthorized access.
• 🔐
  Optional two-factor authentication (2FA) via OTP for enhanced account security.
• 🌐
  Firewall and network security controls on our AWS infrastructure.

However, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data.

Mathsversity provides services for learners of various age groups. We are committed to protecting children's privacy in compliance with applicable laws including the Children's Online Privacy Protection Act (COPPA) and India's Digital Personal Data Protection Act, 2023.

Users under the age of 13 must obtain parental or guardian consent before using our platform. Parents or guardians may request access to, deletion of, or review of their child's personal information by contacting us at mathsversityinfo@gmail.com.

Please refer to our Child Safety Policy for more detailed information.

We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. Updates will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy regularly.

Continued use of Mathsversity following any changes constitutes acceptance of the updated Policy. If we make material changes, we will notify you through the platform or via email.