Privacy Policy

Germanacharya processes data needed to create accounts, authenticate users, provide licensed learning features, secure protected content and support the portal. The institution that supplies a licence may be independently responsible for deciding which learners receive access and how exported progress information is used.

If you receive access through a school or another organisation, its own privacy notice may also apply to decisions it makes about your enrolment, licence allocation or educational administration.

• Account and authentication data: name, email address, email-verification status, internal account identifier, password hash or Google sign-in identifiers, role, preferences and current session information.
• Licence and administration data: licence code, batch or institution, assigned learner or email, selected level, allocation and activation dates, access period, expiry, revocation status and administrative audit records.
• Learning and usage data: answers, correctness, progress, practice scores, level and skill usage, question counts, last-learning activity and daily or lifetime AI-credit consumption.
• AI-feature data: chat messages, written answers, images, microphone audio, transcripts, generated replies, evaluations and related timestamps when you choose to use an AI-supported feature.
• Technical and security data: IP address, browser and device information, request paths and timing, user agent, session identifiers, rate-limit events, protected-content access, suspected automation patterns and account-linked watermark codes.
• Communications data: messages, attachments and information supplied through support, feedback or privacy requests.
• We obtain data from you, from the institution supplying your licence, from Google when you choose Google sign-in and automatically from your browser or use of the Service.

• Contract and service delivery: create and secure accounts, activate licences, provide questions and media, save progress, enforce allowances and provide requested AI feedback.
• Legitimate interests: administer licences, maintain and improve the Service, answer support requests, protect accounts and intellectual property, detect scraping or account sharing, investigate misuse and establish or defend legal claims.
• Consent: load optional Google Analytics or Microsoft Clarity tools. You may refuse or withdraw analytics consent without losing essential account or licensed learning functions.
• Legal obligations: retain or disclose information where required for compliance, lawful requests, dispute handling or the protection of legal rights.
• Where the institution determines the purpose of educational administration, it is responsible for identifying its legal basis and providing any additional information required by law.

Authorized and email-verified school administrators can view and export licence codes and status, assigned learner name and email, verification status, level, activation and expiry dates, expiry progress, questions answered, practice accuracy, level and skill usage, daily AI-credit usage and last-learning activity.

School administrators cannot use the school dashboard to view passwords, password hashes, active sessions, complete individual answers or complete AI conversations. Main platform administrators retain broader access where necessary to operate, secure and support the Service.

We disclose data only as needed to the institution that supplied the licence, providers working for us, professional advisers, a successor to the Service or authorities where required by law. We do not sell personal data.

Only the data necessary for the selected function is sent to an AI provider. Avoid including unnecessary personal or confidential information about yourself or another person in an AI prompt, recording, image or document.

Germanacharya is based in India. Providers may process data in India, the European Economic Area, the United States or other countries in which they operate. These countries may have different data-protection laws.

Where applicable law requires a transfer safeguard, we rely on an adequacy decision, contractual safeguards or another permitted mechanism. You may contact us for information about safeguards relevant to your data.

Essential cookies and browser storage support secure sign-in, the single-active-session control, language, theme, consent preferences and requested learning functions. Blocking essential storage may prevent the Service from working correctly.

Google Analytics and Microsoft Clarity load only when configured and after analytics consent. They may receive online identifiers and information about page use, clicks, navigation and device characteristics. Clarity may also receive an internal user identifier and account-type tag for signed-in users.

Your analytics choice, policy version and timestamp are stored in your browser for up to 180 days. Withdrawal stops future optional collection and attempts to remove accessible first-party analytics cookies; it does not automatically erase information already held by a provider.

• Account and learning data is generally kept while the account is active and afterwards only while needed for deletion processing, security, legal obligations or disputes.
• Licence, allocation and audit records may be retained after expiry or account deletion to prevent reuse, document access rights, investigate misuse and resolve contractual or legal issues. Identifiers may be removed or restricted where continued identification is unnecessary.
• AI content and diagnostic logs are retained only as needed to provide, troubleshoot and protect the relevant feature, subject to provider settings and legal requirements.
• Support, security and anti-abuse records are kept only as long as reasonably needed for the request, investigation, defence of claims or prevention of repeated abuse.
• Analytics retention is controlled through the applicable provider settings. Deleted information may remain temporarily in restricted backups until the normal backup-rotation cycle completes.
• You may request deletion from your profile or at support@germanacharya.com. An ordinary account without a linked licence or administrative role is scheduled for deletion after a 24-hour safety period. Requests involving a linked licence, payment record or administrative access require manual review so that access and audit obligations can be handled safely.
• While an automatic deletion is pending, sign-in is blocked. After deletion, the account and associated learning data are removed; limited licence, security or legal records may be retained where deletion would conflict with a legal obligation, security requirement, contractual record or the rights of another person.

We use access controls, password hashing, email verification, secure authentication cookies, server-side licence checks, rate limits and monitoring of protected-content access. Protected images or media may contain visible or technical watermark identifiers derived from an account identifier.

Access logs, watermark identifiers and anti-abuse signals may be used to identify scraping, automated extraction, account sharing, unauthorized redistribution or attempts to bypass usage limits. No online service can guarantee absolute security.

Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to certain processing and withdraw consent. Send a request to support@germanacharya.com; we may verify your identity before acting. Withdrawal does not affect processing already lawfully completed.

EU and EEA residents may complain to the data-protection authority in their place of residence, work or the alleged infringement. You may also contact the institution about data it controls for licence allocation or educational administration.

AI practice scores and usage limits do not make decisions that produce legal or similarly significant effects about you.

The Service is intended to be provided through adults or institutions capable of authorizing learner access. Institutions providing access to minors are responsible for supplying required notices and obtaining any authorization required by applicable law. Contact us if you believe a minor’s data was provided without appropriate authority.

We may update this Policy when the Service, providers or legal requirements change. We will change the date above and provide additional notice where a material change requires it.