Privacy Policy

1. Information We Collect

• Account details: your name and email address. If you sign in with Google, we receive your name, email and profile picture from Google. Passwords are stored only as a one-way hash and are never readable by us.
• Study content: the questions, topics, notes, and any images or PDFs you submit to our AI tools, together with the material those tools generate for you.
• Usage data: which features you use, your generation history, test scores, learning-journey progress, XP and rewards.
• Payment records: subscription status, plan, billing dates and transaction identifiers. We never receive or store your card, UPI or bank details — those go directly to the payment provider.
• Device data: a push-notification token if you enable notifications, plus basic technical information such as IP address, used for security and rate limiting.

2. How We Use Your Data

• To generate AI answers, notes, tests and study plans for you
• To personalise your learning journey and track progress
• To manage your account, subscription and billing
• To send notifications you have opted into
• To protect the service against abuse, fraud and automated attacks
• To diagnose faults and improve features

We do not sell your personal data. We do use analytics and advertising measurement tools on our website — see section 5.

3. AI Processing and Third Parties

Graspify's AI features are powered by third-party AI processing providers. When you use a tool such as the doubt solver, notes generator, mock tests or the learning journey, the content you submit is sent to a provider so a response can be generated and returned to you. These providers process your content to produce your result; they are not permitted to use it to advertise to you.

Please do not enter passwords, financial details, identity-document numbers, or personal information about other people into the AI tools.

4. Who Else Receives Data

• AI processing providers — to generate the outputs you request
• Razorpay — to process payments made on graspify.in
• Google Play Billing — to process subscriptions bought inside the Android app
• Google Firebase — to deliver push notifications
• Analytics and advertising providers (Google, Meta, Vercel) — as described in section 5
• Hosting and database providers — to run the service
• Legal authorities — only where required by law or valid legal process

5. Cookies, Analytics and Advertising

Analytics and advertising cookies only load if you accept them. On your first visit we ask, and nothing is sent to Google or Meta unless you agree and confirm you are 18 or older. Declining changes nothing about how you can use Graspify. Your answer is remembered for six months, and you can change it any time via "Cookie Settings" in the footer.

Our website uses cookies and similar technologies for three purposes:

• Essential: to keep you signed in and to protect forms against automated abuse. These cannot be turned off without breaking the site.
• Analytics: Google Analytics and Vercel Analytics, to understand which pages and features are used.
• Advertising measurement: Google Ads conversion tracking and the Meta (Facebook) Pixel, which tell us when someone who saw one of our ads went on to sign up. These providers may also use this data for their own advertising purposes, in line with their policies.

You can block or delete cookies in your browser settings, and use Google's and Meta's own opt-out controls. Blocking analytics and advertising cookies does not affect your access to Graspify.

The Android app does not carry these advertising trackers. It uses Google Firebase only to deliver the notifications you opt into.

6. Data Retention

We keep your account and study content for as long as your account exists. If you ask us to delete your account, it is deactivated immediately and permanently erased 30 days later — signing in during those 30 days cancels the deletion. After that we remove your personal data and study content, except where we are legally required to retain records, for example payment and tax records. Backups are overwritten on a rolling basis.

7. Data Security

Data is transmitted over encrypted connections and passwords are stored hashed. We apply rate limiting, bot protection and access controls. No system can be guaranteed completely secure, and we cannot promise absolute security.

If a breach affects your personal data, we will notify the Data Protection Board of India and the users concerned without undue delay, as required by the Digital Personal Data Protection Act, 2023, and tell you what happened and what to do about it.

8. Students Under 18

Graspify is built for students, and some of our users are under 18. If you are under 18, you should use Graspify only with the involvement and consent of a parent or guardian, and a parent or guardian should be the one to make any payment.

A parent or guardian may contact us at founder@graspify.in to review, correct or delete a child's data, and we will act on such a request.

9. Your Rights

• Access: request a copy of the personal data we hold about you
• Correct: update or correct inaccurate information
• Delete: request deletion of your account and data
• Withdraw consent: turn off notifications, or stop using the AI tools, at any time

To exercise any of these, email founder@graspify.in.

10. Changes to This Policy

We may update this policy. The "last updated" date above will change, and continued use of Graspify after an update means you accept the revised policy.