Privacy Policy

Last updated: April 2026

1. Who We Are

This privacy policy applies to learnityourself.in (“the Platform”), operated by Indraprastha Innovations Private Limited(“IIPL”, “we”, “us”), a company incorporated in Hyderabad, Telangana, India. The brand “Learn it Yourself ®” is a Class 41 registered trademark of IIPL.

2. Compliance Framework

This Platform is operated from India and complies with the Digital Personal Data Protection Act, 2023 (“DPDPA 2023”) and the rules notified under it, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 where applicable, and the consumer-facing requirements of Google AdSense and Google Analytics. For users located in the European Union / UK, we apply equivalent rights under GDPR / UK GDPR.

3. Information We Collect

3.1 Information you provide directly

  • Account data — name, email address, profile photo (when you sign in with Google).
  • Learning preferences — selected language, discipline, and goal.
  • Communications — messages you send via the contact form or by email.

3.2 Information collected automatically

  • Usage data — pages visited, quiz scores, session duration, referrer, country / region (derived from IP, not stored verbatim), device type. Collected via Google Analytics 4.
  • Advertising signals — when ads are enabled, Google AdSense may set cookies to serve relevant ads. See our Cookie Policy.

3.3 Children

We do not knowingly collect personal data from any user under the age of 18 without verifiable parental consent, in line with DPDPA 2023 §9. If you believe a child has provided us personal data, write to our Grievance Officer (§9 below) for prompt deletion.

4. Lawful Basis & Purpose

  • Performance of service — to provide the learning platform you sign up for (account creation, progress tracking).
  • Consent (DPDPA 2023 §6) — for analytics, advertising, and email notifications you opt in to.
  • Legitimate use (DPDPA 2023 §7) — for security, fraud prevention, and to comply with legal obligations.

5. How We Use Your Information

We use your information to:

  • provide and personalise the learning experience;
  • track your progress and surface recommended next chapters;
  • send notifications you have requested (e.g. “notify me” for an upcoming chapter or language);
  • analyse aggregate usage to improve the platform;
  • display advertisements (where enabled) via Google AdSense;
  • respond to your enquiries and corrections.

6. Sharing

We share personal data only with:

  • Sub-processors we use to run the platform — currently Google (for sign-in, analytics, advertising), Vercel (for hosting), and our Postgres database provider. Each is bound by a data processing agreement.
  • Law enforcement / regulators, only when compelled by law, served with a valid order, or required to protect rights and safety.

We do not sell personal data.

7. Data Retention

  • Account data — retained while your account is active, and for 12 months after the last sign-in or until you request deletion, whichever is sooner.
  • Quiz / progress data — retained for the lifetime of the account.
  • Analytics data (GA4) — retained for 14 months in an aggregated form, then auto-deleted by Google.
  • Server logs — retained for 90 days for security / debugging then rotated.
  • Communications — retained for 24 months unless legal hold applies.

8. Cross-Border Transfers

Our hosting and sub-processors may store data outside India (e.g. EU, US). Where data is transferred outside India, we rely on the legal basis available under DPDPA 2023 §16 — i.e. transfers to countries that are not on a Central Government restricted list — and bind sub-processors to contractual safeguards. For EU/UK users, we additionally rely on Standard Contractual Clauses where required.

9. Your Rights — and How to Exercise Them

Under DPDPA 2023 §11–§14 you have the right to:

  • obtain confirmation that we hold your data and a summary of it;
  • correct or update inaccurate or incomplete data;
  • erase data we no longer need (the “right to erasure”);
  • nominate a person to exercise these rights on your behalf in case of death or incapacity;
  • withdraw consent at any time (without affecting earlier processing);
  • file a grievance with our Grievance Officer.

9.1 Grievance Officer

As required by DPDPA 2023 §8(10) and the IT Rules 2011 §5(9), we nominate the following Grievance Officer:

Grievance Officer — Indraprastha Innovations Private Limited
Email: grievance@learnityourself.in
Postal: Indraprastha Innovations Private Limited, Hyderabad, Telangana, India

We will acknowledge a grievance within 48 hours and respond on the merits within 30 days of receipt, in line with DPDPA 2023.

If you are not satisfied with our response, you may approach the Data Protection Board of India established under DPDPA 2023 §18.

10. Security

We use industry-standard transport encryption (HTTPS/TLS), least-privilege access controls, and per-environment secret management. No system is perfectly secure; if we become aware of a personal-data breach that is likely to result in significant harm, we will notify the Data Protection Board and affected users without undue delay, in line with DPDPA 2023 §8(6).

11. Cookies and Similar Technologies

See our dedicated Cookie Policy for the full inventory of cookies we use, their categories, and how to control them.

12. Google AdSense

We display advertisements served by Google AdSense. Google may use cookies (e.g. __gads, NID) and other identifiers to serve relevant ads. You can manage personalisation via Google's Ad Settings.

13. Updates to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this page indicates the latest revision. Material changes will be notified by a banner on the homepage and (where you have an account) by email.

14. Contact

General privacy queries: privacy@learnityourself.in
Grievance Officer: grievance@learnityourself.in