BigDataYatra — Privacy Policy

When you use the BigDataYatra app and website, we collect the following categories of personal and sensitive data:

• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.
• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.
• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.
• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.

Your data is used strictly to operate and improve the service, specifically:

• To deliver the courses, live classes, notes and mock tests you have access to.
• To send you course-related notifications — only after you opt in.
• To meet our legal, tax and accounting obligations.
• To detect and prevent fraud, abuse and policy violations.
• To create, secure and maintain your account.
• To respond to your support requests and doubts.
• To process payments and issue invoices and receipts.

Your data is never sold. We disclose the minimum necessary data only to the partners that power BigDataYatra:

• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.
• Razorpay — our payment processor, to take payments and issue refunds.
• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.
• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.

We share with them only what each one strictly needs, and nothing more.

Under the DPDP Act and Google Play’s policies, you have the right to:

• Delete your data, subject to legal retention requirements.
• Access a copy of the personal data we hold about you.
• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.
• Withdraw consent for any non-essential processing at any time.
• Correct information that is inaccurate or out of date.

Contact support@igniterapp.com to act on any of the above, and we will get back to you as the law requires.

We retain personal data only as long as needed to provide the service or as the law requires. You are always free to delete your account via the in-app “Delete my account” option or by contacting support@igniterapp.com; we will remove your data within 30 days, save for records we are obliged to keep for tax or compliance (typically up to 7 years).

BigDataYatra is designed for learners aged 13 or older. Users under 18 should use the app and make purchases only with permission from a parent or guardian. We do not knowingly gather information from anyone under 13, and we remove any such data as soon as we become aware of it.

Security is built in: passwords are stored only as bcrypt hashes, every connection is protected with TLS 1.2 or above, and backups are kept encrypted. We review our security posture regularly and remediate critical vulnerabilities within 72 hours.

Should we materially change our data practices, we will post an in-app notice and refresh the “Last updated” date shown above. By continuing to use BigDataYatra after the update, you agree to the new policy.

Questions or complaints about how we treat your data? Write to support@igniterapp.com. We respond to grievances as soon as we can and within the limits set by the DPDP Act.