Privacy policy

This policy explains what personal data Ralso Academy collects when you use the website https://academy.ralsoglobal.com and the Android app, why we use it, who processes it for us, how long we keep it and how you can use your rights. Ralso Academy is run by RALSO GLOBAL (OPC) PRIVATE LIMITED, No.16, Sri Balaji Nagar, Vengaivasal, Medavakkam, Tambaram, Kanchipuram 600100, Tamil Nadu, India ("we", "us"). Under India's Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for this data.

1. What we collect

• Account: your name, the email address or mobile number you sign in with, and, if you use Google sign-in, the name, email address and picture address of your Google account. Your interface language, leaderboard name and whether your name is shown on leaderboards.
• Preparation details: the exams you prepare for, their dates, your elective subject, your preparation level, daily study time and a score you choose to tell us.
• Study activity: your answers, practice sessions and mock tests (answers, changed answers and time taken), study plan, bookmarks, mistake book, flashcards, course progress and the notes you write on lessons, quiz battles, streaks, XP, badges and leagues, the questions you ask the AI doubt solver with its answers, and question reports you send.
• Notifications and devices: your notification choices. For phone notifications, the push subscription your browser or the app gives us (the address of its push service and encryption keys) and the browser name. If you turn on WhatsApp: your WhatsApp number, when you agreed and to which wording, messages you send us there (answer taps, STOP, START) and delivery receipts.
• Payments: the plan, amount, coupon, status and Razorpay's order and payment references. You enter card, UPI or bank details in Razorpay's own window; we never see or store them.
• Age and consent: whether you told us you are under 18, when your parent or guardian agreed, and which versions of our terms and this policy you accepted, and when. We do not ask for or store your date of birth.
• Security data: sign-in codes (kept only as a scrambled hash and valid for 10 minutes), your IP address (used briefly to limit repeated requests) and server logs.
• Offline study: packs you download stay on your device; answers you give offline are sent to us when you are back online.

We do not use advertising or third-party analytics trackers. The analysis you see (knowledge map, readiness, performance) is computed by us from your own answers; our staff see usage figures for the whole service.

2. Why we use it

• To create your account, sign you in and keep it secure.
• To provide the service: practice, mock tests and their analysis, study plans and the coach, reminders, leaderboards and leagues (under your leaderboard name, or as "Anonymous aspirant" if you hide it), quiz battles, current affairs and courses.
• To send the messages you chose (in the app, phone, WhatsApp, email) and messages about your account (sign-in codes, PRO purchases and expiry, data exports, deletion requests).
• To take payments and keep the accounts the law requires.
• To answer support requests and grievances, and to prevent abuse and fraud.
• To improve questions and features using statistics about all students.

We use your data with your consent, which you give when you create your account and when you switch on optional features such as WhatsApp, and for the uses the law allows without consent, such as keeping payment records.

3. Who processes data for us

These service providers process data only to provide their service to us:

We do not sell your personal data. We disclose it to others only when the law or a lawful order requires it.

4. Where your data is stored

Our servers and those of our providers may be in India or in other countries. Data leaves India only as Indian law allows.

5. How long we keep it

• Account and study data: while your account is open. When you delete your account it is erased at the end of a 7-day grace period, except as listed below.
• Payment records: eight years, because the law requires companies to keep their books of account (Companies Act, 2013, section 128). After your account is deleted they no longer point to you.
• Anonymised answers and attempts: kept without your name, contact details or any way to sign in, so question statistics and other students' ranks stay correct. We cannot link them back to you.
• Sign-in codes: 10 minutes. Data exports: 7 days. Security logs: a short period.

6. Security

The service is served only over HTTPS. Sign-in codes are stored as hashes, sessions use secure cookies, staff see only what their role allows and admin actions are logged, and payment details never reach our servers. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• See your data: Profile → Download my data gives you a copy (a JSON file and a readable page).
• Correct it: change your name, exams and choices in Profile, or ask us to correct anything else.
• Erase it: Profile → Delete my account, or without the app at https://academy.ralsoglobal.com/account/delete. Deletion happens after a 7-day grace period; signing in during that period cancels it.
• Withdraw consent: switch off any notification or WhatsApp at any time (or reply STOP on WhatsApp). Withdrawing consent to the whole policy means deleting your account. Withdrawing does not affect what was done before.
• Nominate someone to use these rights for you if you die or cannot act, by writing to us.
• Complain: contact our Grievance Officer (below). If you are not satisfied, you may approach the Data Protection Board of India.

8. Children

Many of our students are preparing for school and entrance exams. If you are under 18 you may use Ralso Academy only with the consent of a parent or lawful guardian, who should read this policy with you. When you sign up we ask whether you are under 18 and record that your parent or guardian agreed. We do not show advertising to anyone and do not track children's behaviour for advertising. A parent or guardian can ask us to see or delete a child's data at rubesh.dayalan@ralsoglobal.com.

9. Changes to this policy

When we change this policy we update the date at the top. If a change is important, the app asks you to accept the new version.

10. Grievance Officer and contact

• Rubesh Dayalan, Grievance Officer, RALSO GLOBAL (OPC) PRIVATE LIMITED, No.16, Sri Balaji Nagar, Vengaivasal, Medavakkam, Tambaram, Kanchipuram 600100, Tamil Nadu, India
• Email: rubesh.dayalan@ralsoglobal.com

We acknowledge a grievance within 24 hours where we can and aim to resolve it within 15 days, and in any case within 90 days.