Privacy Policy

Effective date: 13 October 2026

This policy explains what information the Kundali IQ Study Hub app and website (also published as Disha Astro; together "the app", "we") process, why, and the choices you have. It is written to meet the Information Technology Act, 2000 and rules made under it, the Digital Personal Data Protection Act, 2023 ("DPDP Act") and Google Play requirements.

1. What the app does

Study Hub for competitive exams (SSC, Railway, Banking, Teaching, UPSC) and school (Class 6–12: NCERT/CBSE, ICSE/ISC, Odisha BSE/CHSE in English, Hindi and Odia), practice tests, Daily Dose and Smart Revision, the Sunday Mega Mock, teacher class tests, a career guide, 60+ student tools (PDF, photo and converter tools), AI study tools, official-source Current Affairs and Bharat Alerts, plus daily-life, household, reminder and wellness-log utilities. Kundli/astrology features are paused at the time of writing.

2. Information you provide

• Account: name, email or phone and sign-in identifiers from Firebase Authentication (Google, email/password or guest).
• Study activity: answers, scores, mistakes, streaks, chosen class/board/exam and language. Most practice history is stored only on your device; some progress (e.g. completed topics, course access) is synced to your account.
• AI study tools: the text, questions and photos you choose to submit (for example a photo of a question in the Doubt Solver, a page for OCR, or an answer for evaluation).
• Sunday Mega Mock: the display name you choose (first name is enough), your answers, score and time. Your display name, score and time can appear on the weekly top-20 leaderboard visible to other users.
• Weekly league (optional): only if you choose Join the league, the app sends this week's study totals (questions, correct answers, Daily Dose days, focus minutes, Sunday mock done) so our server can compute capped XP. We store the board name you choose, your weekly XP and the study groups you create or join. Other students see only that name and XP (all students, or members of your group). You can leave at any time with Leave the league and remove my scores, which deletes your league entries; weeks older than 8 weeks are deleted automatically.
• Class tests: when you join a teacher's test you enter a name and optional roll number; your name, roll number, answers and score are visible to that teacher. Class tests close after 30 days and are deleted automatically about a week later.
• Invites: your invite code and which account invited you (to give both accounts bonus AI units).
• Other utilities you use: reminders, household status/expenses/tasks, wellness logs (water, steps, BMI, blood pressure), document-expiry reminders (we do not need full Aadhaar/PAN/passport images), and astrology inputs such as birth date/time/place when those features are available.

3. AI processing (OpenAI)

When you use an AI feature, the content you submit (text and, where you attach one, a photo) is sent by our secured server to OpenAI, L.L.C. (USA) to produce the answer. Your Firebase ID token is used for authentication; the OpenAI key never reaches your device. We send only what is needed for the request and a pseudonymous safety identifier, not your name or email.

• The student AI chat answers study questions only. If a message mentions self-harm, abuse or severe distress, the app shows helplines (Tele-MANAS 14416, Childline 1098, emergency 112).
• Our servers do not store the text or photos of your personal AI requests after the answer is returned; we keep only usage counters needed for daily limits. Answers for public content (e.g. notes for a textbook chapter, a link for an official news item) are cached and reused for all learners because they contain no personal data.
• Under OpenAI's API data policy, API data is not used to train models by default and may be retained by OpenAI for a limited period for abuse monitoring.
• Please do not upload faces, identity documents or other personal information in study photos.

Using AI features involves transfer of the submitted content outside India for processing.

AI reports and safety reports

When astrology reports are available and you request one, the minimum birth/question/chart context needed is sent to the AI provider to generate that report. If you use the in-app Report AI content control, the generated text, your selected reason and an account-linked abuse-control identifier are sent to our moderation backend and kept as needed to review safety issues; these reports are deleted with your account.

4. Students under 18 (children)

The app is built for students, including school students under 18. Under the DPDP Act, a child's data is processed with the consent of a parent or lawful guardian. If you are under 18, please use the app with your parent's or guardian's permission; by allowing a child to create or use an account, the parent/guardian gives that consent and may contact us at any time to review or delete the child's data.

• We show no advertising and do not use the advertising ID. We do not do behavioural tracking or targeted ads directed at children.
• Analytics and crash reports are used only to keep the app working and improve features (see section 6).
• Public display is limited to a chosen first name on the weekly mock leaderboard and, only if the student joins it, the weekly league; teachers see only the data described for class tests.

5. Payments

Most study courses are free. The UPSC Complete plan is a one-time ₹499 purchase on the Study website, processed by Razorpay. We do not store card numbers, UPI PINs or bank credentials; we keep payment references and access records needed for verification, support and accounting. In the Android app, purchases (when offered) use Google Play Billing; Google processes the payment and we receive only the purchase confirmation. Android builds do not show external checkout. Astrology report checkout is paused.

6. Analytics and stability

Firebase Analytics may collect app-interaction and device/app-instance information to understand feature usage; Firebase Crashlytics collects crash and diagnostic data to fix problems. In the Android app both are off until you choose "Allow" on the first-launch privacy screen, are always off for users under 13, and can be changed any time in Legal & Privacy → Privacy choices. They are never used for advertising.

7. Current Affairs and Bharat Alerts

Automatic Current Affairs use official/government/regulator sources and keep links to the original notice. Daily questions may be edited by an AI model only from those stored official records.

8. Service providers

We do not sell personal data. Providers that process data for us: Google Firebase/Google Cloud (authentication, database, hosting, functions, analytics, crash reports, and App Check/Play Integrity to block fake apps from our servers), Google Play (in-app purchases), OpenAI (AI features) and Razorpay (payments, website only). Each operates under its own terms and privacy practices.

9. Retention

• Account data: until you delete your account.
• Weekly league entries: up to 8 weeks, or until you leave the league or delete your account.
• Weekly mock entries and class-test results: kept for leaderboards/teachers and removed when you delete your account; class tests close after 30 days and are deleted (with their results) about a week later.
• Payment and security records: as long as needed for legal, accounting and fraud-prevention obligations.
• Device-only data (practice history, streaks, downloaded files) stays on your device until you clear app data or uninstall.

10. Your rights (DPDP Act 2023)

You may ask to access a summary of your data, correct or update it, erase it (see account deletion), withdraw consent, and nominate another person to exercise these rights in case of death or incapacity. Write to the grievance contact below. If you are not satisfied with our response you may complain to the Data Protection Board of India.

11. Security

We use Firebase Security Rules, server-side verification, encrypted connections (HTTPS) and least-privilege access. No online service can guarantee absolute security.

12. Grievance Officer and contact

Never send passwords, OTPs, card/UPI credentials or identity-document images by email.

13. Changes

We will update this page when the app or the law changes and show the new effective date above.