Privacy Policy
Last updated: 11 October 2026
This policy explains what personal data Eduzol collects, why, who handles it for us, how long we keep it and how you can exercise your rights. It covers the Eduzol mobile app and the website at eduzol.com.
Eduzol (“we”, “us”) is the Data Fiduciary for this data under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”). When you sign up we also show you a short consent notice that summarises this policy.
The data we collect
We collect only what the app needs to work. We do not ask for your phone number, contacts, location, photos or any government ID.
Account details
Your name, email address and profile photo, and a user ID we assign. If you sign in with Apple and choose to hide your email, we receive an Apple relay address instead of your real one.
From: Google or Apple, when you sign in.
Why: To create your account, sign you in and show your profile.
Consent record
Which version of our consent notice you accepted, when, your confirmation that you are 18 or older, and the platform and app version you used.
From: You, when you accept the consent notice.
Why: To show that we have your consent, as the law requires.
Exam choices
The exams you add and which one you mark as primary.
From: You.
Why: To choose which questions to show you.
Practice activity
Each answer you give: the question, the option you picked, whether it was correct, how long you took and when. Questions you skip are also recorded.
From: Your use of the app.
Why: To grade answers, show your history and run spaced repetition, which brings back questions you got wrong.
Progress and statistics
Accuracy and question counts for each exam and topic, your review schedule, your current and best streaks, the days you practised, and your device's timezone.
From: Calculated from your practice activity; the timezone is sent by your device.
Why: To show your progress and streak, and to count streak days in your local time.
Question reports
The question you flag, the reason you choose and any note you add.
From: You, when you report a question.
Why: To find and fix mistakes in our questions.
Messages to us
Your email address and whatever you write when you contact support or the Grievance Officer.
From: You.
Why: To answer you and to handle requests and complaints.
Server logs
For each request to our servers: your IP address, the address requested, the method, the result, how long it took and a random request ID.
From: Recorded automatically by our servers.
Why: To keep the service secure, investigate errors and stop abuse.
Waitlist email (website only)
The email address you submit and, if you used one, the exam page you submitted it from.
From: You, on this website.
Why: To send you one message when the app becomes available.
Data stored on your device
The app keeps a few things on your phone so it works offline and remembers your settings: your sign-in session, questions you skipped while offline (sent to us when you reconnect), the subject you last practised, your light or dark mode choice, and whether you have accepted the consent notice. Uninstalling the app removes them.
Why we are allowed to use it
We process your personal data on the basis of your consent, which you give when you accept the consent notice at sign-up. We use it only for the purposes listed above. If we want to use it for a new purpose, we will ask you first.
What we don’t do
- We do not sell or rent your personal data.
- We do not share your progress or answers with other users.
Who processes data for us
These service providers handle data on our behalf, under contract, and only to provide their service to us:
- Supabase — sign-in and our database. Your account and all app data are stored here.
- Amazon Web Services — runs our servers and keeps our server logs.
- Google and Apple — sign-in. They confirm who you are and pass us your account details. Their own privacy policies cover what they collect when you sign in.
- Our email provider — to receive and reply to messages you send us.
We may also disclose data where Indian law requires it, for example in response to a valid order from a court or government authority.
Where your data is stored
Your account and app data and our server logs are stored on servers in Mumbai, India. Google and Apple may process sign-in data in other countries under their own policies.
How long we keep it
- Account and app data — for as long as you have an account. When you delete your account, it is erased straight away, in one step, from our live database.
- Server logs — 7 days, then deleted automatically.
- Messages to support or the Grievance Officer — as long as needed to resolve your request, and then up to one year so we can show how it was handled.
- Waitlist emails — until we send the launch message, or until you ask us to remove yours.
How we protect it
All data travels over encrypted (HTTPS) connections. Access to our database and servers is limited to the people who run Eduzol and protected by authentication. Your answers are graded on our servers, and the correct answers are never sent to the app before you answer.
If a personal data breach affects you, we will tell you and the Data Protection Board of India without delay, as the DPDP Act requires, including what happened, its likely effect on you and what we are doing about it.
Your rights
Under the DPDP Act you have the right to:
- Withdraw your consent at any time. Because the app cannot work without the data above, withdrawing consent means deleting your account: open the app, go to Profile and tap “Withdraw consent” or “Delete account”. It is as easy as signing up. Withdrawal does not affect processing that happened before it.
- Get a summary of the personal data we hold about you, what we do with it, and who we have shared it with.
- Correct, complete or update your data. Your name and photo come from Google or Apple, so changes you make there apply the next time you sign in.
- Erase your data. Deleting your account erases everything; see Delete your account.
- Have your grievances handled by our Grievance Officer.
- Nominate someone to exercise these rights for you if you die or become unable to act.
To use any right that the app does not handle directly, email the Grievance Officer at yadhu.krishna@eduzol.com from the email address on your account, so we can confirm it is you. We will reply within the times listed on our Contact & grievances page, and in any case within 90 days.
Age requirement
Eduzol is only for people aged 18 or older. You must confirm your age before you can sign up. We do not knowingly process the personal data of anyone under 18. If we learn that an account belongs to someone under 18, we will delete it and its data.
This website and cookies
This website does not set cookies, does not use analytics and does not track visitors. Our hosting provider may keep standard access logs, including IP addresses, for security. The only personal data the website collects is the email address you choose to give us on the waitlist.
Where the service is offered
Eduzol is offered to users in India. This policy is written for, and governed by, Indian law.
Changes to this policy
When we change this policy, we will update the date at the top of this page. If a change affects what data we collect or why, we will show you the new consent notice in the app and ask for your consent again before continuing.
Contact and complaints
Grievance Officer: Yadhu Krishna, yadhu.krishna@eduzol.com
General support: support@eduzol.com
If you are not satisfied with how we handle your complaint, you can complain to the Data Protection Board of India. The DPDP Act asks you to raise the complaint with us first.