Sukhalaya — Privacy Policy

When you use the Sukhalaya app and website, we collect the following categories of personal and sensitive data:

• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.
• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.
• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.
• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.

Sukhalaya processes your information only for these purposes:

• To create, secure and maintain your account.
• To process payments and issue invoices and receipts.
• To send you course-related notifications — only after you opt in.
• To detect and prevent fraud, abuse and policy violations.
• To deliver the courses, live classes, notes and mock tests you have access to.
• To respond to your support requests and doubts.
• To meet our legal, tax and accounting obligations.

Sukhalaya does not sell or rent your information. We share it only with the following parties, and only as far as needed:

• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.
• Razorpay — our payment processor, to take payments and issue refunds.
• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.
• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.

We share with them only what each one strictly needs, and nothing more.

Security is built in: passwords are stored only as bcrypt hashes, every connection is protected with TLS 1.2 or above, and backups are kept encrypted. We review our security posture regularly and remediate critical vulnerabilities within 72 hours.

Our service is intended for users aged 13 and above. If you are under 18, you must use the app and make any payment only with the consent of a parent or legal guardian. We do not knowingly collect data from children under 13; if we learn we have, we delete it promptly.

With respect to the data Sukhalaya holds, you can:

• Correct information that is inaccurate or out of date.
• Withdraw consent for any non-essential processing at any time.
• Delete your data, subject to legal retention requirements.
• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.
• Access a copy of the personal data we hold about you.

Contact support@igniterapp.com to act on any of the above, and we will get back to you as the law requires.

We retain personal data only as long as needed to provide the service or as the law requires. You are always free to delete your account via the in-app “Delete my account” option or by contacting support@igniterapp.com; we will remove your data within 30 days, save for records we are obliged to keep for tax or compliance (typically up to 7 years).

Should we materially change our data practices, we will post an in-app notice and refresh the “Last updated” date shown above. By continuing to use Sukhalaya after the update, you agree to the new policy.

Questions or complaints about how we treat your data? Write to support@igniterapp.com. We respond to grievances as soon as we can and within the limits set by the DPDP Act.