Your Privacy Matters
Last updated: November 3, 2026
This Privacy Policy explains how Apar Academy ("we," "our," or "us") collects, uses, stores, and protects your personal information when you use our AI-powered learning platform. We are committed to maintaining your trust and protecting your privacy in compliance with applicable data protection laws.
Data Collection
We collect only essential information to provide personalized learning experiences
Data Protection
Your data is encrypted and protected using industry-standard security measures
No Data Selling
We NEVER sell your personal data to third parties or advertisers
Google OAuth
We only access basic profile info (name, email, picture) when you sign in with Google
Your Control
You can access, modify, or delete your data at any time
Secure Storage
All data is stored securely with encryption at rest and in transit
Apar Academy offers Google Sign-In as a convenient authentication option. When you choose to sign in with Google, we access limited information from your Google account to create and manage your Apar Academy account.
What Google Data We Access:
- Email Address: Used as your unique account identifier and for essential communications about your account
- Name: Used to personalize your learning experience and display in your profile
- Profile Picture: Optionally displayed on your Apar Academy profile (you can change or remove this)
How We Use Google Data:
- To authenticate your identity and provide secure access to your account
- To create and maintain your user profile on our platform
- To personalize your learning experience with your name
- To send essential account-related communications (password resets, security alerts)
What We DO NOT Do With Your Google Data:
- We do NOT sell your Google data to third parties
- We do NOT use your Google data for advertising purposes
- We do NOT share your Google data with data brokers or resellers
- We do NOT access your Google Drive, Gmail, Calendar, or any other Google services
- We do NOT transfer your Google data to third parties except as necessary to provide our services
Google's Limited Use Disclosure:
Apar Academy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking Google Access:
You can revoke Apar Academy's access to your Google account at any time by visiting your Google Account Permissions. Note that revoking access may limit your ability to sign in to your Apar Academy account.
We collect the following types of information to provide and improve our educational services:
Account Information (collected during registration):
- Name and email address (from direct registration or Google Sign-In)
- Profile picture (optional, from Google or uploaded by you)
- Password (hashed and encrypted, only for email registrations)
- Contact preferences and notification settings
Learning Data (collected during your use of the platform):
- Courses enrolled and chapters accessed
- Quiz scores, test results, and assignment submissions
- Study progress and time spent on content
- Notes, bookmarks, and learning preferences
- Apar Tutor chats, kept so you can continue your study
Technical Data (automatically collected):
- Device type, operating system, and browser information
- IP address (for security and approximate location)
- Session cookies and authentication tokens
- Error logs and performance data
We use your information for the following purposes:
- Authentication: To verify your identity and provide secure access to your account
- Personalization: To customize your learning experience, recommend courses, and track progress
- Communication: To send essential account notifications, course updates, and support responses
- Analytics: To understand usage patterns and improve our platform (aggregated, anonymized data)
- Security: To protect against fraud, unauthorized access, and abuse of our services
- AI Features: To power Apar Tutor and our other AI features
- Legal Compliance: To comply with applicable laws and respond to legal requests
We do NOT sell your personal data. We may share information only in the following circumstances:
- Service Providers: With trusted partners who help us operate our platform (hosting, payment processing) under strict confidentiality agreements, and OpenAI, which processes typed questions and course content to write AI replies
- AI Services: With AI model providers to write AI replies. They receive the typed question, course content, the student's class and study counts. We don't send the student's name, email or phone, unless the student types it into a question
- Legal Requirements: When required by law, court order, or government request
- Safety: To protect the rights, safety, and security of our users and the public
- Business Transfers: In case of merger, acquisition, or sale of assets (with user notification)
- With Your Consent: When you explicitly authorize us to share specific data
We implement robust security measures to protect your data:
- All data is encrypted in transit using TLS 1.3 (HTTPS)
- Data at rest is encrypted using AES-256 encryption
- Passwords are stored only as salted hashes (Argon2 or PBKDF2)
- JWT tokens are used for secure session management
- Regular security audits and penetration testing
- Access controls and principle of least privilege for staff
- Data stored in secure PostgreSQL databases with regular backups
- Incident response procedures for potential data breaches
Our servers are primarily located in India. If you access our services from outside India, please note:
- Your data may be transferred to and processed in India
- We ensure appropriate safeguards for international transfers
- We comply with applicable data protection laws including GDPR where applicable
- Standard contractual clauses are used for transfers to third-party processors
We use cookies and similar technologies for the following purposes:
- Essential Cookies: Required for authentication, security, and basic functionality
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Help us understand how users interact with our platform (anonymized)
- Performance Cookies: Monitor and improve platform performance
We do NOT use cookies for third-party advertising or tracking across other websites. You can manage cookie preferences through your browser settings.
We retain your data for the following periods:
- Account Data: Retained while your account is active and for 90 days after deletion request
- Learning Progress: Retained while your account is active
- Transaction Records: Retained for 7 years for tax and legal compliance
- Security Logs: Retained for 1 year for security analysis
- Support Communications: Retained for 3 years
- Anonymized Analytics: May be retained indefinitely for research purposes
You can request deletion of your data at any time, subject to legal retention requirements.
You have the following rights regarding your personal information. To exercise any of these rights, please contact us at privacy@aparacademy.com or use the settings in your account dashboard.
Right to Access
Request a copy of all personal information we hold about you
Right to Rectification
Update or correct inaccurate information in your profile
Right to Deletion
Request permanent deletion of your account and personal data
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Restrict Processing
Limit how we process your personal information
Right to Object
Object to processing for certain purposes like marketing
Right to Withdraw Consent
Revoke previously given consent at any time
Right to Lodge Complaint
File a complaint with a data protection authority
You have the right to request deletion of your account and all associated personal data at any time.
How to Delete Your Account:
- Navigate to your Account Settings in your dashboard
- Click on "Delete Account" option
- Confirm your decision
- Alternatively, email us at privacy@aparacademy.com with your deletion request
What Happens When You Delete Your Account:
- Your personal information (name, email, profile) will be permanently deleted
- Your learning progress and course data will be removed
- Any active subscriptions will be cancelled
- This action is irreversible
- Some data may be retained for legal compliance (up to 90 days)
Apar Academy is designed for students of various ages, including those under 18. We take children's privacy seriously:
- Users under 13 years of age require verifiable parental consent before creating an account
- We collect only the minimum necessary information from minor users
- Parents/guardians can review, modify, or delete their child's personal information by contacting us
- We do not serve behavioral advertising to users we know are under 13
- We comply with the Children's Online Privacy Protection Act (COPPA) and similar regulations
If you believe we have inadvertently collected information from a child under 13 without proper consent, please contact us immediately at privacy@aparacademy.com.
Questions About Your Privacy?
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us.
Email: privacy@aparacademy.com
Data Protection Officer: dpo@aparacademy.com
Address: Apar Academy, India
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:
- We will update the "Last updated" date at the top of this policy
- We will notify you via email or through a prominent notice on our platform
- For significant changes affecting your data rights, we may ask for your renewed consent
- Continued use of our services after changes indicates acceptance of the updated policy