IGrowUpClick — Privacy Policy

When you use the IGrowUpClick app and website, we collect the following categories of personal and sensitive data:

• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.
• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.
• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.
• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.

We use the information we collect for the following purposes, and no others:

• To create, secure and maintain your account.
• To meet our legal, tax and accounting obligations.
• To send you course-related notifications — only after you opt in.
• To respond to your support requests and doubts.
• To process payments and issue invoices and receipts.
• To detect and prevent fraud, abuse and policy violations.
• To deliver the courses, live classes, notes and mock tests you have access to.

Your data is never sold. We disclose the minimum necessary data only to the partners that power IGrowUpClick:

• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.
• Razorpay — our payment processor, to take payments and issue refunds.
• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.
• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.

We share with them only what each one strictly needs, and nothing more.

Under the DPDP Act and Google Play’s policies, you have the right to:

• Access a copy of the personal data we hold about you.
• Withdraw consent for any non-essential processing at any time.
• Delete your data, subject to legal retention requirements.
• Correct information that is inaccurate or out of date.
• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.

Write to us at [email protected] to use any of these rights; we reply within the legally required period.

Security is built in: passwords are stored only as bcrypt hashes, every connection is protected with TLS 1.2 or above, and backups are kept encrypted. We review our security posture regularly and remediate critical vulnerabilities within 72 hours.

We keep your account data for as long as your account stays active. You can request deletion at any time using the in-app “Delete my account” option or by emailing [email protected]. We delete your personal data within 30 days, except records we are legally required to retain for tax, accounting or compliance reasons (typically up to 7 years).

IGrowUpClick is designed for learners aged 13 or older. Users under 18 should use the app and make purchases only with permission from a parent or guardian. We do not knowingly gather information from anyone under 13, and we remove any such data as soon as we become aware of it.

Should we materially change our data practices, we will post an in-app notice and refresh the “Last updated” date shown above. By continuing to use IGrowUpClick after the update, you agree to the new policy.

Have a question, complaint or grievance about your privacy? Email us at [email protected]. We aim to acknowledge every grievance promptly and resolve it within the timelines set by the DPDP Act.