Privacy Policy

1. Introduction

BrainBuzz Academy (“we”, “our”, or “us”), operated by KTR Web Works, is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at brainbuzzacademy.com, our mobile application, and related services (collectively, the “Platform”).

By accessing or using the Platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.

2. Information We Collect

Personal Information: When you register on our Platform, we collect your name, mobile phone number, and email address. If you make a purchase, we collect billing information necessary to process your payment.

Usage Data: We automatically collect information about how you interact with the Platform, including pages visited, quizzes attempted, test scores, time spent on sections, device information (device type, operating system, browser), IP address, and referral URLs.

OTP Verification Data: We use your mobile number to send One-Time Passwords (OTPs) via SMS for authentication. OTP records are stored temporarily and deleted after verification or expiration.

Performance Data: Test attempts, scores, answers, time spent per question, bookmarks, and study progress are collected to provide you with analytics and personalised learning recommendations.

3. How We Use Your Information

We use the collected information to:

• Create and manage your account on the Platform
• Authenticate your identity via OTP-based login
• Provide personalised exam preparation content and analytics
• Process payments and manage subscriptions (BrainBuzz Pass)
• Send important notifications about your account, tests, and new content
• Analyse usage patterns to improve Platform features and content quality
• Provide customer support and respond to your queries
• Comply with legal obligations and enforce our Terms of Service

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following limited circumstances:

• Payment Processors: We use Razorpay to process payments. Your payment information is shared directly with Razorpay and is subject to their privacy policy.
• SMS Gateway: We use 2Factor.in to send OTP messages. Your phone number is shared with them solely for authentication purposes.
• Hosting Providers: Our Platform is hosted on Vercel (frontend) and Railway (backend). Data is stored on PostgreSQL databases managed through Railway.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction.

5. Data Security

We implement industry-standard security measures to protect your personal data, including encrypted data transmission (HTTPS/SSL), secure password hashing, rate-limited API endpoints, and regular security audits. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Test performance data is retained to enable long-term progress tracking. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your account and associated data
• Withdraw consent for marketing communications at any time
• Request a copy of your data in a portable format

To exercise any of these rights, please contact us at brainbuzzacademy@gmail.com.

8. Cookies and Tracking

We use cookies and local storage to maintain your login session, remember your language preferences, and analyse Platform usage. You can control cookie settings through your browser, but disabling cookies may affect the functionality of the Platform.

9. Third-Party Links

Our Platform may contain links to third-party websites (YouTube, Telegram, etc.). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

10. Children's Privacy

Our Platform is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete such information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.