Privacy Policy (DPDP Act 2023 Compliant)

1. Data Fiduciary Identity & Data Collection Scope

BharatPrep AI acts as a Data Fiduciary under the Digital Personal Data Protection (DPDP) Act 2023. We collect digital personal data that you voluntarily provide to us during registration and portal usage. This includes your name, email address, target exam (UPSC, SSC CGL, Banking, JEE, NEET, GATE, etc.), active subject preferences, MCQ practice performance logs, study planner tasks, and conversational interaction transcripts with our AI Teacher ("Guruji").

2. Explicit Consent & Purpose Minimization

Your personal data is processed strictly based on your free, specific, informed, unconditional, and unambiguous consent. We use your data solely to:

• Formulate custom-tailored explanations and Socratic hints matching your selected exam difficulty level.
• Maintain your AI Mentor cognitive memory profile to trigger personalized study recommendations.
• Analyze weak-area performance metrics and compute speed/accuracy benchmarks.
• Schedule automated revision reminders in your personalized Study Planner.

3. Data Security, 256-Bit Encryption & Storage

All student credentials and transaction records are protected using industry-standard 256-bit SSL/TLS encryption in transit and AES-256 encryption at rest. Sensitive materials, such as notes and AI prompts, are stored on secured remote cloud databases. We utilize secure Firebase Authentication tokens to safeguard account persistence.

4. Third-Party Data Sharing & Protection of Minors

BharatPrep AI does not sell, rent, or trade your private personal data. Interaction prompts and texts are safely channeled through our secure rate-limited Google LLM API pipelines solely to synthesize tutor feedback responses. Furthermore, we do not track or serve targeted advertisements to minor students.

5. Rights of Data Principal (Under DPDP Act 2023)

As a Data Principal under Indian law, you possess statutory rights to:

• Right to Access: View your active AI Cognitive Memory Profile and stored performance logs.
• Right to Correction & Erasure: Update inaccurate data or request complete deletion of your account and records.
• Right to Withdraw Consent: Withdraw processing consent at any time through your Profile Settings.
• Right to Nominate: Nominate another individual to exercise your rights in the event of incapacity.