Privacy Policy

1The data we collect

We collect only what a feature actually needs. The table below is the complete list; the sections that follow explain the more sensitive items in full.

SMS on Android

On Android, to spare you typing the OTP, we use Google's SMS User Consent API. When an OTP arrives, Android shows you a prompt asking whether to share that one message with Learninough. If you agree, we read the code out of that single message and nothing else. The app does not hold the `READ_SMS` permission, and it cannot read your inbox, your message history, or any message you did not approve.

Device identifiers

We do not use advertising identifiers — there is no IDFA, no Google Advertising ID, and no device fingerprinting in the app.

The app does create a few identifiers of its own: a random ID that keeps your downloads and playback to one device, a push token so we can send you notifications, and — only if you opt in to usage analytics — a random app-instance ID that Google Analytics uses to count installations. Our app-update service keeps a random install identifier of its own too, and so does the error-reporting tool built into our video player in the Android and iOS apps, which sends it with every crash report and app session it records — see section 9.

There is one identifier we cannot avoid. When you play a copy-protected lecture, or download one in the Android or iOS app, the DRM module on your device or in your browser (Widevine on Android and in browsers such as Chrome, Edge and Firefox; FairPlay on iPhone, iPad and in Safari) exchanges a licence with our video provider, and that exchange carries an identifier tied to your device or browser. It is used solely to issue the playback licence and enforce copy protection on our tutors' work — never to profile or track you, and never for advertising.

2Your phone contacts

If — and only if — you tap to share your contacts and grant the OS permission, we read the entries in your address book that have a phone number, and we keep that copy up to date for as long as you stay signed in and the permission stays on. The Android and iOS apps check your address book again when you sign in and when you open or return to the app (usually no more than once every six hours), and a few seconds after you add, edit or delete a contact while the app is open. New numbers are added, renamed contacts are updated, and numbers you delete are marked as removed and no longer used for matching. The web app never reads your contacts. For each number, we send the following to our servers:

• a SHA-256 hash of the phone number, which is what we actually match against other users. A hash is not encryption: phone numbers are short, so a hash can be worked back to the full number, all the more easily when it sits beside the last four digits below. We therefore treat it as personal data, just like the number itself;
• the last four digits of the phone number, stored in plain text; and
• the contact's name as it appears in your address book, stored in plain text.

The app never shows you these names or digits. A match appears under the name and photo that person uses on their own Learninough profile. We keep the name and last four digits only so that, the next time the app reads your address book, it can tell whether an entry has been renamed or its number has changed.

We do not upload the full phone number in readable form, and we do not upload email addresses, photos, addresses, notes, or any other field from your address book. We use this data only to connect you with learners you already know. It shows you which of your contacts are already on Learninough, so you can send them a connection request. When you and another learner have both shared your contacts, and each of you has the other's number, we also count you as friends. If your profile is Public, they can see which courses you are taking (on their home screen and on course pages) and which faculty members you follow (on those faculty members' pages). You see theirs on the same terms. We never message your contacts, and we never sell or share this data with anyone.

The people in your address book have rights too

Your contacts have not agreed to anything with us, and we take that seriously. Their names, and the hashed and partial numbers above, exist on our servers only to serve the matching feature for you, including matching anyone who joins after you shared. Removing someone from your phone stops them showing as a match the next time the app reads your contacts, but it does not erase what you already shared — that stays until you withdraw or delete your account, and either of those deletes all of it. By sharing your contacts you confirm you are entitled to do so.

How to withdraw

Revoke the Contacts permission in your device settings to stop any further reading, and email us at support@learninough.com to have everything we already hold from your address book erased. We will action it within 30 days and confirm when it is done.

3Location

We use your location for one thing: putting you on the right leaderboards — "Near you" (your city), your state and your country. We do not track your movements, we never read your location in the background, and we do not use it for advertising. We work out your area in two ways.

From your IP address, automatically

Each time you sign in, and each time you open Learninough while signed in, the app asks ipwho.is, a third-party geolocation service, where your internet connection appears to be. The request carries your IP address and the standard technical details every web request carries, which in a browser include its type and language setting. It never carries your name, your phone number or any account identifier. From the answer we store your country, state, city and postal code, plus the coordinates of that city, which are accurate to roughly the level of a town, not a street or a building. This needs no permission, and it happens on the web app too.

From your device, only if you ask

If you tap Add location for rank on your profile, or Use exact location or Update my location on the leaderboard, your phone or browser asks whether Learninough may use your location. If you allow it, the app takes one reading, once, while it is open — never in the background and never continuously — and sends those coordinates to BigDataCloud, a third-party service, which returns the name of the place. We store the resulting country, state, city and postal code. Where the place has no city, we store the name of your town, village or neighbourhood as your city instead. The coordinates from your device are not stored; any city coordinates an earlier IP lookup stored stay on the record. You can switch the permission off at any time in your device settings.

Who sees it, and how long we keep it

• If you are ranked, learners on the same city, state or country leaderboard see your name, profile photo, points and rank — so appearing on a "Near you" board tells them you are in their city, or, if your area came from your device and the place has no city, in their town, village or neighbourhood. See section 8.
• On the web, people who are not signed in see a Top learners card listing the five highest-ranked learners across the whole Platform. If your profile is Public and you are among them, it shows your first name, the initial of your last name, your rank, your points and how your rank has moved. It never shows your profile photo or your area. If your profile is Private, you never appear on it.
• The stored record itself is visible only to you and to our systems that build the leaderboards — other learners never see your area, postal code or coordinates.
• We keep one location record for you. Each new reading replaces the last, except that an area set from your device is not overwritten by a later IP lookup. Once you are ranked, the leaderboards also keep a copy of its country, state and city, brought up to date at most every 15 minutes.
• Deleting your account erases your stored location and takes you off every leaderboard. The leaderboards' copy of your country, state and city is kept, but it is never shown to anyone.
• Because the IP lookup runs each time you open the app while signed in, the only way to stop it completely today is to delete your account.
• If you opt in to usage analytics, Google Analytics also works out an approximate location from your IP address — see section 4.

4How we measure your study activity

Study tracking is not a side-channel — it is the product. The streak counter, the weekly study-time chart on your profile, the "continue where you left off" button, and course progress all run on it.

While you are signed in, we record:

• when each visit to the app starts and ends, whatever you do in it and not only studying, and how much of it was active rather than idle (once 60 seconds pass without you touching the screen or clicking, the rest of that pause counts as idle and is subtracted, so your study time is honest; typing, and scrolling with a mouse wheel or trackpad, do not count as activity);
• which screen of the app you are on and for how long;
• your watch position, completion percentage and actual watch time for each lecture (only time the video is really playing counts — not pauses, buffering or parts you skip ahead past). Where a course caps the total watch time for each lecture at a set multiple of its length, this watch time is what the cap counts, and once it is reached the lecture locks — it can no longer be played or downloaded;
• a daily roll-up — total time, active time, session count, streak day, and a breakdown of time per screen;
• your device platform and app version.

This is buffered in a database on your device and synced to our servers in the background, so your progress survives a bad network and follows you to a new phone. We do not build advertising profiles from it and we do not sell it. It stays with us and the provider that hosts our database — except that the faculty member who teaches a course can see your progress through its lectures (see section 9), and, if you opt in to usage analytics (below), the start and end of each session, and how much of it was active, are also reported to Google. It is used to run the features above, to understand which courses work, and — in aggregate — to improve the Platform.

Usage analytics — only if you opt in

Separately, we use Google Analytics for Firebase to see, in aggregate, which parts of the app get used. It is off until you turn it on — through the prompt the web app shows until you answer it, or under Settings → Privacy → Share usage data. That switch in Settings is also where you turn it off again at any time, on the web as well as in the Android and iOS apps (Settings is available once you are signed in). On the web you can also clear this site's data in your browser, which turns it off and brings the prompt back. Until you turn it on, the app does not start Google Analytics at all. When it is on, Google receives a random identifier for your installation, your Learninough account's internal identifier (a random code, not your name or phone number), the screens you open, when each session in the app starts and ends and how much of it was active, plus the device, app-version and approximate-location details Google Analytics collects automatically. It never receives your name, phone number, email address or chat messages. Turning it off stops collection, and in the Android and iOS apps it also resets that identifier.

5Chat, voice notes and attachments

You can message a tutor, message another learner directly, and talk in the group chat of a course you are enrolled in. We store each message so it can be delivered and so your history is there when you come back. We also store who you messaged and when, and when each message was delivered, read and — for a voice note — first played. While you type, the person you are chatting with sees that you are typing; we pass that signal on but do not store it.

Separately, whenever you are signed in with the app open — whether or not you are chatting — we record that you are online, when you were last seen, and whether you are on Android, iOS or the web. Your online / last-seen status shows at the top of any direct chat with you, including one someone has only just opened — see section 8.

If a course's faculty member turns on group chat for it, everyone enrolled in the course is added to its group automatically, and anyone who enrols later joins it too. Your name and profile photo then appear in the group's member list, which the course's faculty and every learner enrolled in the course can see — even if you never post there, and even if your profile is set to Private. Your name stays on that list after your access to the course ends. A message in a course group chat is seen by everyone in that group.

You can attach photos and documents, and record voice notes. These are uploaded to our storage, each at its own long, randomly generated web address, and shown to you and to the others in that conversation. Anyone who obtains a file's address can open that file, so do not pass it on. Your microphone is used only while you are recording a voice note: recording starts when you tap the microphone button, a running timer shows for as long as it lasts, and it stops when you tap send or discard, or leave the conversation. Your camera is used only when you choose to take a photo to attach. When you attach from your photo library, the app shows your photos on your device so you can choose, and only the photos and files you select are uploaded.

You can react to a message with an emoji, which the others in that conversation can see, and save messages to a list that is private to you. We store each reaction and each saved message with your account. Anyone in a conversation can forward a message — yours included, and any photo, document or voice note in it — to someone else they chat with, where it is marked as forwarded. A forwarded copy is a separate message: deleting your original does not remove it, and an attachment is passed on at the same web address rather than copied.

Notifications

When a message is sent, our notification service — hosted by Amazon Web Services in Mumbai — receives it, decrypts it, and sends the sender's name, the web address of their profile photo and a short preview of the message through Google Firebase Cloud Messaging to the other people in the conversation, and through Apple's push service to an iPhone or iPad. That is what lets the notification show who wrote, their photo and what they said, and it means Google and Apple handle those previews — see section 9.

Being straight with you about encryption

6Payments and Elite Coins

How you pay depends on where you buy. On the web app, you pay through Paytm, a third-party payment gateway. In the iPhone and iPad app you pay by in-app purchase through Apple's App Store, and in the Android app by in-app purchase through Google Play; Apple and Google take that payment under their own terms. Your card, UPI and bank credentials go directly to Paytm, Apple or Google. They never pass through Learninough and we never store them.

What we do keep is the record of the transaction: which course or bundle, the amount, the GST component, the payment method and bank (and the last four digits of a card, where the gateway reports them), the gateway's or store's transaction reference, any coupon or coins applied, the date, and how long your access lasts. For an App Store or Google Play purchase we also keep the store's own record of it, including the country of your store account. For a Paytm payment, we create the order record as soon as you tap Pay, so we also keep a record of a payment that fails, expires or that you do not finish, with the reason given for it, and for a completed payment we keep the gateway's own report of it. If Apple refunds or revokes an App Store purchase, we record that too. We are required to retain this for tax and accounting purposes — see section 10. We also use the categories of the courses you own, bought or free, to choose the courses we suggest to you under "The best courses for you".

The faculty member who teaches a course can see who has enrolled in it. When you buy or enrol in a course, its faculty member can see that you did, with your name, the date and how long your access lasts. For a purchase, they can also see the amount you paid, any coupon or coins applied, the payment reference, and the payment method and bank (and the last four digits of a card, where the gateway reports them), so they can follow their enrolments and the earnings they are paid from them. When you buy a bundle, the faculty member of each course in it can see that you enrolled, and those paid from the sale can also see the amount, the payment reference and any coupon or coins applied. If you use one of their coupons, they can see that you redeemed it and what you paid. They never see your card, UPI or bank credentials.

So that a store purchase can be matched to your account, we give Apple the internal identifier of your Learninough account (a random code, not your name or phone number), and Google a one-way scrambled form of it, when you start the purchase.

Elite Coins are a virtual reward, not money. We record your balance and the ledger of how you earned and spent them. They have no cash value and cannot be withdrawn — see the Terms & Conditions.

7AI features

Where Learninough offers an AI study assistant, what you type or attach in it stays on your device. As of the effective date of this policy, the assistant does not send your questions or attachments to us or to any third-party AI provider, and we do not store them. The conversation is cleared when you close it.

If that changes — if the assistant starts sending what you type to our servers or to an external model provider — we will update this policy and tell you in the app before your prompts start going anywhere new. We will never use your private chat messages with tutors to train an AI model.

8What other people can see

Most of your data is private. These parts are not:

• Course and teacher reviews. Your rating and written review of a course are published on the course page next to your name and profile photo. If you rate a teacher, your ratings and review are shown on the teacher's profile next to your name once we have approved them. Treat every review as public: anyone can read it, including the teacher it is about. Do not put anything private in a review.
• Your profile. Anyone signed in to Learninough can open your profile and see your name, profile photo, a one-line headline (usually the exams you are studying for, such as "CA & CMA Aspirant"), how many connections you have, and which of their own connections you share. If your profile is set to Public, they can also see up to 20 of the courses you are learning, the badges you have earned and who you are connected with, find you in Search, and send you direct messages. If you set it to Private in Edit Profile → Account Privacy, only your accepted connections see those extra details, find you in Search or can message you directly; tutors and our staff can still message you. Your name, photo, headline and connection count stay visible either way.
• Suggestions and finding people. We suggest learners to each other: first people who share your connections or the exam you are studying for, then other learners. A suggestion shows your name, profile photo and headline, and can also show how many connections you share and your current study streak. Anyone signed in can also find you by your name or bio when they start a new chat or forward a message. This happens even if your profile is set to Private. Private stops learners who are not your connections from seeing your courses, badges and connections, and from messaging you. It does not hide you from suggestions or from that search.
• What you study, shown to your connections. People you are connected with can see which courses you are enrolled in and which faculty you follow, next to your name, photo and study goal — for example, a course card may read "Priya is learning this", and a course page lists the connections enrolled in it, most recently active first. On the web app they can also see your latest study activity (the course you last watched, finished, enrolled in or took a quiz in, and when) and your current study streak. Your connections see all of this even if your profile is set to Private.
• People who have your number. If another learner has your phone number saved and shares their contacts with us — whether before or after you join — we show them that you are on Learninough, with your name, profile photo and study goal. They can open your profile and ask to connect with you. This happens even if your profile is set to Private. If you have also shared your contacts and their number is among them, and your profile is set to Public, they can also see which courses you are taking and which faculty you follow — see section 2.
• Your online / last-seen status. Whether you are online, and when you were last active, is shown at the top of every direct chat with you — including one that someone has only just opened and you have never replied to. Your Private setting does not change this. See section 5.
• Feed comments and likes. Your comments and likes on a feed post are shown with your name and photo to everyone who can see that post.
• Chat reactions. The emoji you react with are seen by the others in that conversation.
• Course group chats. If a course has a group chat, everyone enrolled in the course is added to it automatically, and stays on its member list after their access ends. The course's faculty and the other members can see your name and profile photo in that list, even if your profile is set to Private and even if you never post. Everything you send there is shown to all of them, with your name and photo.
• Your courses, to their faculty. The faculty member who teaches a course you enrol in sees that you are enrolled, what you paid for it, your progress through its lectures, and your answers and scores in its tests — see section 6 and section 9.
• Leaderboards. If you are ranked, learners on your city ("Near you"), state and country leaderboards see your name, profile photo, points and rank, and whether your rank has gone up or down, even if your profile is set to Private. They can also find you on those boards by searching for your name. See section 3.
• Top learners. If your profile is Public and you are among the five highest-ranked learners on Learninough, your first name, the initial of your last name, your points, your overall rank and whether it has gone up or down appear in a "Top learners" list on the home page of the web app. Anyone can see that list without signing in. It never shows your photo or your area. Setting your profile to Private removes you from it.
• Printed-notes orders. If you claim printed notes, the faculty member of that course sees your name, phone number, email address (if you have given us one) and the postal address you chose, until you delete your account — see section 9.
• Course certificates. When you pass a course test we issue a certificate showing your name and profile photo as they were when it was issued, the course, its instructor, the date and your result (score, correct answers and time taken). If your profile had no name or photo at that point, the certificate shows the ones on your profile now. Anyone with the certificate number or its QR code can open it on our website without signing in, so treat a certificate as public.

9Who we share data with

We do not sell your personal data. We do not share it with data brokers, advertisers or ad networks, and the app contains no advertising SDK. We share data only with the service providers that make the Platform run, with Apple or Google when you buy through their store, with the faculty members who teach the courses you enrol in (and, if you claim printed notes, the one who posts them), and with other learners as set out in section 8 — and only to the extent each one needs:

We will also disclose personal data where we are legally required to — to a court, a regulator, or a law-enforcement authority acting under due process — and where it is necessary to investigate fraud or protect someone's safety.

Where your data is stored

Our notification and web checkout services run in Amazon Web Services' Mumbai region, in India. Our other providers — including Supabase, Google, Apple and Testpress — may store and process data on servers located outside India. Where that happens, we rely on contractual safeguards with those providers, and we transfer data only to jurisdictions not restricted by the Central Government under the DPDP Act.

10How long we keep it

• Your account and profile — for as long as your account is open. Deleting your account destroys your login permanently and closes the profile, so it stops being visible in Learninough, with two exceptions: a course certificate you earned can still be opened by anyone with its number or QR code, and notifications other people already received about something you did — a like, a comment, a connection request — still show your name and photo (see section 13). The record behind it is retained, because the purchases, payments and study history below are attached to it.
• Purchase and tax records — whether you bought on the web app or through the App Store or Google Play — for 8 years, as Indian company and tax law requires, including after you delete your account. We cannot delete these on request.
• Contact data you shared — until you withdraw (see section 2) or delete your account, either of which erases it. Separately, while your account is open, we keep a copy of your name, email address and photo in the matched-contact list of every learner whose shared contacts include your number, whether or not you have shared your own. Withdrawing your own contacts does not affect those copies; deleting your account erases them.
• Your location — one record, replaced by each new reading, kept while your account is open and erased when you delete your account — see section 3. If you were ranked, the leaderboards also hold the country, state and city they last ranked you in; that copy is kept with the closed profile when you delete your account, and is no longer shown to anyone.
• Study activity and analytics — the study records we hold are retained after your account closes, attached to the closed profile and no longer visible to anyone in the app. If you opted in to usage analytics, what Google Analytics has already received, including your account's internal identifier, stays with Google for the retention period set in our Google Analytics account. Deleting your account does not erase it. To have it removed, email us — see section 13. We may also keep aggregated statistics that cannot identify you.
• Course certificates — retained after your account closes, so that whoever you gave one to can still check it. Anyone with its number or QR code can still open it, with your name, photo and result — see section 8.
• Chat messages and attachments — retained after your account closes. The people you messaged keep their side of those conversations, where you appear only as a deleted account.
• Postal addresses and printed-notes orders — an address you save is kept until you delete it in Profile → My Addresses or delete your account, either of which erases it. A printed-notes order keeps its own copy of the name, phone number and address the notes are posted to, so the faculty member can post them and you can both see where they went, and the message we send the faculty member also carries your email address. That copy is kept while your account is open. Deleting your account erases it: the order is removed, and the message and notification we sent the faculty member are rewritten to say your details were removed — and, if the notes had not been posted yet, not to post them. We cannot recall what the faculty member has already written down, a notification already delivered to their device, or the copy of the message our notification service received when it was sent; and our database backups keep the earlier version until they expire.
• Sign-in sessions, wishlists, and the devices registered for your downloads and playback — erased when you delete your account.
• Why you deleted your account — if you told us, kept with the closed profile, so we can learn from it.
• Support tickets — your message, the name, phone number and email you give on the form, and any file you attach — retained after the ticket is closed, and after you delete your account, so we have a record if you come back to us about it. We do not delete them on a fixed schedule; email support@learninough.com if you want one removed.

11How we protect your data

• All traffic between the app and our servers uses HTTPS/TLS.
• In the iPhone and iPad app, a copy of your sign-in token is kept in the iOS Keychain; in the Android app it is encrypted with a key held in the Android Keystore; on the web app it is kept in your browser's local storage. Your longer-lived session, which keeps you signed in between visits, is held in your device's or browser's standard app storage — so anyone with access to your unlocked device, or to a browser you are signed in on, may be able to reach your account. Lock your device, and sign out on a shared computer. Signing out ends your session, but it does not remove the copy of your profile or your recent searches that the app keeps on your device or in your browser — see section 14.
• Chat message text is encrypted at rest — with the limits set out honestly in section 5.
• Copy-protected lectures are encrypted with DRM, and a downloaded lecture plays only inside the app. In the Android and iOS apps we also block screenshots and screen recording while course content is on screen; a web browser gives us no way to do that, so the web app cannot. Your name and phone number are also drawn faintly over a lecture while you watch it, to discourage piracy.
• Access to production data is limited to staff who need it.

No system is perfectly secure, and we will not pretend otherwise. If a personal-data breach occurs, we will notify the Data Protection Board of India and every affected user, as the DPDP Act requires.

12Learners under 18

Many people preparing for the exams we teach are under 18, and they are welcome here — but Indian law treats a child (anyone under 18) differently, and so do we.

• If you are under 18, you may use Learninough only with the consent of your parent or legal guardian.
• We do not serve advertising to anyone, and we therefore never serve targeted advertising to a child.
• We do not ask your age, so the app cannot tell that you are under 18 and treats you as it treats every learner: it records your study activity as described in section 4, offers you usage analytics (off until you turn it on), and, if you are ranked, shows your name, profile photo, points and rank on the leaderboards described in section 8. We never build advertising profiles from anyone's data, a child's included.
• A parent or guardian may, at any time, ask to see what we hold about their child, correct it, or have it erased — email support@learninough.com and we will verify the relationship before we act.

If we discover that we hold a child's data without valid guardian consent, we will delete it.

13Your rights, and how to use them

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Know what personal data we hold about you and who we have shared it with;
• Correct anything inaccurate, complete anything incomplete, and update anything stale — most of this you can do yourself in Profile → Edit;
• Erase your personal data, and have your account deleted;
• Withdraw consent you previously gave. You can switch usage analytics off yourself, in the app under Settings → Privacy → Share usage data. For contacts, revoke the Contacts permission in your device settings to stop any further reading, and email support@learninough.com to have what we already hold erased — see section 2;
• Nominate another person to exercise these rights on your behalf if you die or become incapacitated;
• Complain to us, and escalate to the Data Protection Board of India if we do not resolve it.

Deleting your account

You can do it yourself, in the app under Settings → Account → Delete, or on the web at app.learninough.com/delete-account. You can also email support@learninough.com from your registered account and we will verify it is you.

Deleting destroys your login permanently: you will not be able to sign in again, and the phone number and email on the account are released, so they can be used to register afresh. Your profile closes and stops appearing in search, leaderboards, friend lists, reviews and chats, and nobody can start a conversation with you. Two things still carry your name. A course certificate you earned can still be opened by anyone who has its number or QR code, and it shows your name and the profile photo you had when it was issued. And a notification you caused before you left, such as a like, a comment, a reply, or a connection request or acceptance, stays in the notifications of the person it went to, whether a learner or a faculty member. It shows your name and, if you had one, your photo, until they delete it.

What deleting erases: your sign-in sessions, your saved addresses, your wishlists, the devices registered for your downloads and playback, your stored location record, the contacts you shared (and the copies of your details in other learners' matched-contact lists) — and the name, phone number and address on any printed-notes order you claimed. That order is removed, and the faculty member is told your details were removed and, if the notes had not been posted yet, not to post them.

Most of the records behind your account are kept. Your profile details (name, phone number, email and the other details you filled in), purchases, payments, coin ledger, study history, course certificates, reviews and messages, the country, state and city the leaderboards last ranked you in (if you were ranked), your devices' switched-off notification tokens, support tickets, and why you left are retained as set out in section 10, attached to a closed profile rather than to someone anyone can find. The exception is a course certificate: anyone with its number or QR code can still open it, with your name, photo and result, after you delete your account. Deletion is permanent — courses you have bought will not be recoverable, and deleting is not a refund.

If you want personal data erased beyond that, email support@learninough.com and tell us what you want removed. We will do what we can and tell you plainly what the law requires us to keep.

We respond to any request under this section within 30 days.

14Cookies and on-device storage

We do not use advertising cookies. The web app uses your browser's local storage, and the mobile apps use on-device storage, to hold your sign-in session, your preferences (theme, download and streaming quality), your recent searches, your downloaded courses, and a cache of your study progress so the app works offline.

Besides those, the app keeps on your device a copy of your profile, so it opens straight away even when you are offline: your name, phone number, email address, photo, bio, study goals, coin balance and streak. It also keeps your bookmarks; the answers of a test, or of the sign-up questions, that you have not finished; the random device ID described in section 1; a fingerprint of your phone book if you shared your contacts, so the app can tell whether it has changed; and your notification and privacy choices. In the Android and iOS apps it also keeps the chat photos and voice notes you have viewed or played, and the chat attachments you save. In the Android app, the text and pictures of your latest chat notifications (up to eight messages from each person) are kept so a notification can show the conversation, and are deleted when you open that conversation or sign out. On the web app, your study progress and bookmarks are kept in your browser's databases rather than its local storage. Signing out removes your downloaded courses and your chat notifications, but not the rest of what is listed here — including the copy of your profile and your recent searches. To remove them from a shared device, clear the browser's data or uninstall the app.

Clearing your browser's data for our site removes everything the web app stored. Uninstalling a mobile app removes nearly everything it stored on your device. The exception is on an iPhone or iPad, where the iOS Keychain keeps two things after you uninstall. The first is a copy of your sign-in token, if you were signed in, which the app discards the next time it is installed and opened. The second is the random device ID described in section 1, which is reused if you install the app again. A backup of your phone, to iCloud or to your Google account on Android, may also hold a copy of the app's storage. Anything you chose to save outside the app stays where you put it, such as a chat photo saved to your gallery or a certificate saved to your files.

If you allow usage analytics on the web app, Google Analytics sets two cookies of its own — _ga, which recognises your browser between visits, and _ga_JF6K2RV1HB, which keeps track of your current visit — and keeps a random identifier for your browser in the browser's storage. Until you allow it, the web app does not start Google Analytics, so none of these is created. If you turn analytics off later, collection stops, but the cookies stay until they expire or you clear your browser's data — see section 4.

15Changes to this policy

We will update this policy when what we do with your data changes. If a change is significant, we will tell you in the app or by message before it takes effect — we will not quietly broaden what we collect. The "last updated" date at the top always reflects the current version.

16Contact us, and our Grievance Officer

For any question about this policy, to exercise a right, or to raise a complaint, write to us and we will come back to you within 30 days:

• Email — support@learninough.com
• Grievance Officer — Ramees M K, LEARNINOUGH PRIVATE LIMITED
• Registered office — 43/2684/A2, Suite No. B4, Kolathara, Rahiman Bazar, Kolathara, Kozhikode, Kozhikode - 673655, Kerala

We publish a Grievance Officer because Indian law requires it — the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, 2023. If we do not resolve your complaint to your satisfaction, you may escalate it to the Data Protection Board of India.