Chirpy Souls — Privacy Policy

Depending on how you use Chirpy Souls, we may collect the data categories below:

• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.
• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.
• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.
• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.

We use the information we collect for the following purposes, and no others:

• To respond to your support requests and doubts.
• To process payments and issue invoices and receipts.
• To send you course-related notifications — only after you opt in.
• To create, secure and maintain your account.
• To meet our legal, tax and accounting obligations.
• To detect and prevent fraud, abuse and policy violations.
• To deliver the courses, live classes, notes and mock tests you have access to.

We do not sell your personal data. We share limited data only with the service providers needed to run Chirpy Souls:

• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.
• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.
• Razorpay — our payment processor, to take payments and issue refunds.
• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.

Each provider is bound to use the data only to perform its service for us, not for its own purposes.

You are entitled to the following rights over your personal data:

• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.
• Correct information that is inaccurate or out of date.
• Delete your data, subject to legal retention requirements.
• Withdraw consent for any non-essential processing at any time.
• Access a copy of the personal data we hold about you.

Contact [email protected] to act on any of the above, and we will get back to you as the law requires.

Chirpy Souls is designed for learners aged 13 or older. Users under 18 should use the app and make purchases only with permission from a parent or guardian. We do not knowingly gather information from anyone under 13, and we remove any such data as soon as we become aware of it.

We keep your account data for as long as your account stays active. You can request deletion at any time using the in-app “Delete my account” option or by emailing [email protected]. We delete your personal data within 30 days, except records we are legally required to retain for tax, accounting or compliance reasons (typically up to 7 years).

We protect your data with industry-standard safeguards: bcrypt-hashed passwords, TLS 1.2+ encryption for all data in transit, and encrypted database backups. Our team performs routine security reviews and applies critical patches within 72 hours of disclosure.

We may update this policy from time to time. For any significant change, we will give you in-app notice and revise the “Last updated” date above. Your continued use of Chirpy Souls after the change indicates your acceptance of it.

Questions or complaints about how we treat your data? Write to [email protected]. We respond to grievances as soon as we can and within the limits set by the DPDP Act.