SUTRIK — Privacy Policy

When you use the SUTRIK app and website, we collect the following categories of personal and sensitive data:

• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.
• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.
• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.
• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.

Your data is used strictly to operate and improve the service, specifically:

• To send you course-related notifications — only after you opt in.
• To create, secure and maintain your account.
• To meet our legal, tax and accounting obligations.
• To respond to your support requests and doubts.
• To deliver the courses, live classes, notes and mock tests you have access to.
• To process payments and issue invoices and receipts.
• To detect and prevent fraud, abuse and policy violations.

SUTRIK does not sell or rent your information. We share it only with the following parties, and only as far as needed:

• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.
• Razorpay — our payment processor, to take payments and issue refunds.
• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.
• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.

These providers act on our instructions and may not use your data for their own ends.

We retain personal data only as long as needed to provide the service or as the law requires. You are always free to delete your account via the in-app “Delete my account” option or by contacting support@igniterapp.com; we will remove your data within 30 days, save for records we are obliged to keep for tax or compliance (typically up to 7 years).

Security is built in: passwords are stored only as bcrypt hashes, every connection is protected with TLS 1.2 or above, and backups are kept encrypted. We review our security posture regularly and remediate critical vulnerabilities within 72 hours.

This app is meant for people aged 13 and above. If you are a minor (under 18), a parent or legal guardian must approve your use of the app and any payments. We never knowingly collect personal data from children under 13.

You are entitled to the following rights over your personal data:

• Access a copy of the personal data we hold about you.
• Delete your data, subject to legal retention requirements.
• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.
• Correct information that is inaccurate or out of date.
• Withdraw consent for any non-essential processing at any time.

To exercise any of these rights, email support@igniterapp.com and we will respond within the timelines required by law.

We may update this policy from time to time. For any significant change, we will give you in-app notice and revise the “Last updated” date above. Your continued use of SUTRIK after the change indicates your acceptance of it.

For any privacy question, concern or grievance, reach our team at support@igniterapp.com. Grievances are acknowledged quickly and resolved within the periods required under India’s DPDP Act.