CS FUNDA — Privacy Policy

To provide our services, CS FUNDA collects these types of information:

• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.
• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.
• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.
• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.

We use the information we collect for the following purposes, and no others:

• To send you course-related notifications — only after you opt in.
• To process payments and issue invoices and receipts.
• To deliver the courses, live classes, notes and mock tests you have access to.
• To create, secure and maintain your account.
• To respond to your support requests and doubts.
• To detect and prevent fraud, abuse and policy violations.
• To meet our legal, tax and accounting obligations.

Your data is never sold. We disclose the minimum necessary data only to the partners that power CS FUNDA:

• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.
• Razorpay — our payment processor, to take payments and issue refunds.
• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.
• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.

Each provider is bound to use the data only to perform its service for us, not for its own purposes.

Our service is intended for users aged 13 and above. If you are under 18, you must use the app and make any payment only with the consent of a parent or legal guardian. We do not knowingly collect data from children under 13; if we learn we have, we delete it promptly.

Under the DPDP Act and Google Play’s policies, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct information that is inaccurate or out of date.
• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.
• Delete your data, subject to legal retention requirements.
• Withdraw consent for any non-essential processing at any time.

To exercise any of these rights, email [email protected] and we will respond within the timelines required by law.

Security is built in: passwords are stored only as bcrypt hashes, every connection is protected with TLS 1.2 or above, and backups are kept encrypted. We review our security posture regularly and remediate critical vulnerabilities within 72 hours.

We keep your account data for as long as your account stays active. You can request deletion at any time using the in-app “Delete my account” option or by emailing [email protected]. We delete your personal data within 30 days, except records we are legally required to retain for tax, accounting or compliance reasons (typically up to 7 years).

If we make a material change to how we handle your data, we will notify you in the app and update the “Last updated” date at the top of this page. Continuing to use CS FUNDA after a change takes effect means you accept the revised policy.

For any privacy question, concern or grievance, reach our team at [email protected]. Grievances are acknowledged quickly and resolved within the periods required under India’s DPDP Act.