Privacy Policy

We collect only the information reasonably necessary to operate, secure, and improve the Service.

Account Information. When you create or maintain an account, we may collect:

• Name
• Email address
• Phone number (optional)
• Educational board, class, school name, city, and state
• Profile photograph uploaded by you

If you choose to sign in using Google authentication services, we may additionally receive your verified Google email address, display name, profile image URL, and Google account identifier, in accordance with Google's authentication and privacy practices.

Service Usage Information. We may collect information relating to your interaction with the Service, including:

• Quizzes attempted and related performance data
• XP points, streaks, achievements, and leaderboard rankings
• Referral codes used or shared
• Support requests and communications
• Notifications sent through the platform

Social Features. If you use social or leaderboard features, certain information — including your display name, avatar, and aggregated statistics — may be visible to other authenticated users of the Service.

Payment Information. Paid subscriptions are processed through Razorpay. We may receive limited transactional information, including:

• Billing cycle
• Subscription plan
• Payment reference identifiers
• Transaction status

We do not collect or store card numbers, CVV details, UPI PINs, or banking credentials. Such information is collected directly by Razorpay through its secure payment infrastructure.

Device and Technical Information. We may automatically collect technical and diagnostic information, including:

• IP address
• Browser type and version
• Operating system
• Device identifiers
• Crash reports
• Application logs and usage metadata

We process personal data for purposes including:

• Delivering educational content, quizzes, and answer keys
• Managing accounts and authentication
• Operating leaderboards, referral systems, and social features
• Sending transactional communications such as OTPs, invoices, password resets, and support replies
• Processing subscriptions and payments through Razorpay
• Displaying advertisements to free-tier users
• Detecting fraud, abuse, cheating, and unauthorised access
• Improving platform functionality, content quality, and user experience
• Complying with legal and regulatory obligations

We do not sell personal data to third parties.

We primarily process personal data on the basis of consent provided when you:

• create an account;
• accept this Privacy Policy and the Terms of Service; and
• continue to access or use the Service.

Certain processing activities may continue on other lawful grounds permitted under applicable Indian law, including fraud prevention, maintenance of security logs, tax compliance, accounting obligations, and compliance with lawful governmental requests.

You may withdraw your consent at any time by deactivating your account, subject to our legal retention obligations.

The Service uses cookies, browser storage technologies, session identifiers, and similar mechanisms to:

• Maintain authenticated sessions
• Remember user preferences and settings
• Protect accounts against abusive or suspicious activity
• Support advertising functionality for free-tier users

You may disable cookies through your browser settings; however, certain core features of the Service, including account authentication, may cease to function properly.

We do not currently use third-party analytics cookies on the Service.

The daily paper and certain features of the Service may be available free of charge and supported through third-party advertising networks.

When advertisements are displayed, advertising providers may independently receive limited technical information, including:

• IP address
• Browser and device information
• Cookie identifiers
• Page interaction data

SkyZack AI does not intentionally share users' names, email addresses, phone numbers, quiz scores, or educational performance data with advertising networks.

SkyZack AI does not use student academic performance or educational records for behavioural advertising profiling.

Users subscribed to paid plans may receive an advertisement-free experience, subject to the applicable subscription terms.

Personal data is stored using infrastructure operated by reputable cloud-service providers. Our servers and databases may be located both inside and outside India.

As the Service grows, infrastructure locations and hosting arrangements may change from time to time.

Certain third-party providers used by the Service may operate globally and may process information on infrastructure located outside India.

Accordingly, personal data may be transferred to, processed in, or stored in jurisdictions outside India, subject to contractual safeguards, reasonable security measures, and applicable legal requirements.

Payments for paid plans are processed by Razorpay (“Razorpay”).

When you initiate a payment transaction, we may share limited information with Razorpay, including:

• Selected subscription plan
• Transaction amount
• Internal order references

Payment credentials and financial information are entered directly into Razorpay's hosted payment environment and are not processed or stored by SkyZack AI.

From Razorpay, we may receive:

• Payment identifiers
• Subscription identifiers
• Transaction status
• Billing information

for subscription management, fraud prevention, accounting, and customer support purposes.

We may disclose limited personal data to trusted third-party service providers strictly for operational purposes.

Razorpay. Used for payment processing, subscription billing, fraud prevention, and transaction verification.

Google. Used only where users voluntarily choose Google Sign-In functionality for authentication.

All third-party processors are expected to process information solely for authorised purposes and in accordance with applicable contractual and legal obligations.

We do not sell or commercially trade personal data.

The Service may contain links to external websites, resources, advertisements, or applications not operated or controlled by SkyZack AI.

We are not responsible for the privacy practices, content, availability, or policies of such third parties, and users are encouraged to review their policies independently before sharing personal information.

SkyZack AI may use artificial intelligence systems, machine-learning models, and automated generation technologies to produce question papers, answer keys, explanations, summaries, and educational suggestions.

AI-generated outputs may contain inaccuracies, omissions, outdated information, or unintended errors.

Such outputs are provided solely as educational assistance tools and should not be treated as official academic material or relied upon as the sole source for examinations, academic decisions, legal matters, medical matters, or other consequential decisions.

Users are encouraged to independently verify important information from authoritative educational sources.

Many users of the Service may be below eighteen (18) years of age.

By creating or using an account, the user represents that:

• they are at least 18 years old; or
• where the user is a minor, a parent or lawful guardian has reviewed and consented to this Privacy Policy and the use of the Service.

We presently rely upon such declarations made during account registration and do not independently verify parental consent through separate verification mechanisms.

Parents or guardians seeking to review, withdraw consent, or request deletion of a minor's account may contact us using the details provided below.

To maintain platform security and integrity, we may monitor activity for purposes including:

• Detection of unauthorised sign-in attempts
• Prevention of scraping, automation, and abuse of platform limits
• Detection of cheating or misuse of paid content
• Fraud prevention and chargeback investigations

Repeated or serious violations may result in suspension or termination of accounts in accordance with our Terms of Service.

Personal data is retained only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required under applicable law.

Different categories of information may be retained for different durations, including:

• Account and service information while the account remains active
• Financial and billing records as required by Indian tax and accounting laws
• Security and audit logs for fraud prevention and investigation purposes
• Support communications to maintain records of disputes and resolutions

Where appropriate, information may subsequently be deleted, anonymised, or securely archived.

Users may deactivate their accounts at any time through the account settings page or by contacting the grievance officer.

Upon deactivation:

• access to the Service may be disabled;
• active sessions may be revoked; and
• social visibility on leaderboards and related features may be removed.

Certain information may continue to exist in encrypted backups, security logs, audit records, or legally required financial records for limited retention periods.

Requests for permanent deletion may be submitted to the grievance officer, subject to applicable legal obligations and operational retention requirements.

Subject to applicable law, users may have the right to:

• Access personal data associated with their account
• Correct or update inaccurate information
• Request deactivation or deletion of accounts
• Withdraw consent where processing is based on consent
• Submit grievances relating to data handling practices

The Service does not currently respond to browser-based “Do Not Track” signals.

We implement reasonable technical, organisational, and administrative safeguards intended to protect personal data against unauthorised access, misuse, disclosure, alteration, or destruction.

Such safeguards may include:

• Encryption in transit
• Access restrictions
• Security monitoring
• Authentication controls

However, no method of electronic storage or transmission can be guaranteed to be completely secure.

In the event of a security incident materially affecting personal data, we may investigate the incident, take corrective measures, notify affected users where appropriate, and comply with applicable legal reporting obligations.

We may disclose personal information where required by:

• applicable law;
• court orders;
• lawful governmental requests; or
• regulatory obligations.

We may also disclose information where reasonably necessary to:

• enforce our Terms of Service;
• prevent fraud or abuse;
• protect platform security; or
• safeguard the rights, property, or safety of users or the public.

In the event of a merger, acquisition, restructuring, financing, or transfer of business assets involving SkyZack AI, personal data may be transferred to the relevant successor or acquiring entity, subject to applicable legal protections.

We reserve the right to modify or update this Privacy Policy from time to time to reflect operational, legal, or technological changes.

Updated versions shall become effective from the “Last Updated” date stated above.

Continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

This Privacy Policy shall be governed by and construed in accordance with the laws of India.

Any disputes arising out of or relating to this Privacy Policy or the use of the Service shall be subject to the exclusive jurisdiction of the courts located in Chennai, Tamil Nadu, India.