Garvitaa M — Privacy Policy

When you use the Garvitaa M app and website, we collect the following categories of personal and sensitive data:

• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.
• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.
• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.
• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.

We use the information we collect for the following purposes, and no others:

• To deliver the courses, live classes, notes and mock tests you have access to.
• To respond to your support requests and doubts.
• To meet our legal, tax and accounting obligations.
• To send you course-related notifications — only after you opt in.
• To create, secure and maintain your account.
• To process payments and issue invoices and receipts.
• To detect and prevent fraud, abuse and policy violations.

We do not sell your personal data. We share limited data only with the service providers needed to run Garvitaa M:

• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.
• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.
• Razorpay — our payment processor, to take payments and issue refunds.
• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.

Each provider is bound to use the data only to perform its service for us, not for its own purposes.

Your data is retained while your account is active. You may delete your account whenever you wish — either through the in-app “Delete my account” control or by writing to support@igniterapp.com. Once requested, we erase your personal data within 30 days, apart from records we must keep for legal, tax or accounting purposes (usually up to 7 years).

With respect to the data Garvitaa M holds, you can:

• Access a copy of the personal data we hold about you.
• Delete your data, subject to legal retention requirements.
• Withdraw consent for any non-essential processing at any time.
• Correct information that is inaccurate or out of date.
• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.

To exercise any of these rights, email support@igniterapp.com and we will respond within the timelines required by law.

Our service is intended for users aged 13 and above. If you are under 18, you must use the app and make any payment only with the consent of a parent or legal guardian. We do not knowingly collect data from children under 13; if we learn we have, we delete it promptly.

We protect your data with industry-standard safeguards: bcrypt-hashed passwords, TLS 1.2+ encryption for all data in transit, and encrypted database backups. Our team performs routine security reviews and applies critical patches within 72 hours of disclosure.

If we make a material change to how we handle your data, we will notify you in the app and update the “Last updated” date at the top of this page. Continuing to use Garvitaa M after a change takes effect means you accept the revised policy.

Questions or complaints about how we treat your data? Write to support@igniterapp.com. We respond to grievances as soon as we can and within the limits set by the DPDP Act.