Privacy Policy

This policy explains what data Conceptual Minds collects, why we collect it, how we use it, and the choices you have. We've written it in plain language — no dense legalese.

It applies to everyone who uses our website and product, whether you're signed in or not.

We collect three categories of data:

• Account data — your name, email, password (hashed), and any profile info you add.
• Learning data — notes you save, cards you study, tests you take, and your progress over time.
• Technical data — device type, browser, IP address, and basic usage events used for security and analytics.

We use data to:

• Run the Service — sign you in, save your work, sync devices
• Personalise study — schedule cards, recommend chapters
• Send transactional emails — receipts, password resets, alerts
• Improve the product through aggregate analytics
• Detect abuse and keep accounts secure

We don't sell your data. We don't show third-party advertising on the Service.

We share data only with vetted processors that help us run the Service, under strict contracts:

• Cloud hosting and database providers
• Email delivery services for transactional mail
• Payment processors for billing
• Analytics providers (aggregated, anonymised data only)

We may disclose data when legally required — for example, in response to a valid court order — and will tell you when we can.

We use a small number of cookies for authentication, preferences, and basic analytics. We don't use cross-site advertising trackers.

Most browsers let you block or delete cookies. Doing so may break sign-in or other features.

We keep your account and learning data for as long as your account is active. You can delete your account from settings at any time — your data is permanently removed within 30 days, except where we're required to keep records (e.g. tax invoices).

You can, at any time:

• Access the personal data we hold about you
• Correct anything inaccurate
• Export your learning data
• Delete your account and associated data
• Withdraw consent for optional processing

Email privacy@conceptualminds.in to exercise any of these rights.

We protect your data with encryption in transit (TLS) and at rest, row-level access controls in our database, regular backups, and access reviews for our team.

No system is perfect — if we detect a breach affecting your data, we'll notify you promptly.

We'll update this policy when our practices change. Material changes will be announced in-product or by email at least 14 days before they take effect.

Questions or requests? Email privacy@conceptualminds.in or use the contact page.