Privacy Policy

In plain words: we collect the minimum we need — your Google sign-in details, the questions you ask, and basic usage data — to explain your doubts and keep the service running. We don’t sell your data, we don’t show ads, and students under 18 are protected with parental consent. Details follow.

1. Who is responsible for your data

Plyxzy Solutions Private Limited (CIN: U62010RJ2026PTC116279), operating DoubtBoard, is the data fiduciary (controller) for personal data processed through the Service. Registered office: A-49, Bhairava Nagar, Kalyanpura Road, S.F.S. Mansarovar, Jaipur – 302020, Rajasthan, India. Contact for all privacy matters: support@doubtboard.in. For complaints, see Grievance redressal below.

Scope — India only. The Service is offered and directed only to users in India, and this Policy is written for Indian law — in particular the Digital Personal Data Protection Act, 2023 (DPDP Act). We do not target or offer the Service in other jurisdictions, and this Policy does not address foreign data-protection regimes such as the GDPR. Explanations are available in many languages because India is multilingual — language availability is not an offer of the Service in any other country. Pricing is in Indian Rupees only, and payments run through an Indian payment gateway. If we ever offer the Service in the EU, UK, or elsewhere, we will update this Policy before that offering begins, not after.

2. What we collect

• Account data — when you sign in with Google: your name, email address, and profile picture. We do not receive your Google password.
• Learning content — the questions you type, images you upload (e.g. photos of problems or papers), your chosen explanation language, and the explanations generated for you.
• Usage data — question counts (used to enforce the free-tier limit), feature usage events, approximate performance timings, and error reports.
• Technical data — IP address (used for rate limiting and abuse prevention), browser/device type, and cookies described below.
• Payment data — payments are handled by our payment gateway (Razorpay). We receive subscription status and transaction references, never your card number or UPI credentials.

3. Why we process it

• To generate and display board explanations — the core service you ask for.
• To operate your account, enforce free-tier limits, and prevent abuse.
• To measure and improve product quality (analytics, error diagnosis).
• To process subscriptions and comply with tax and accounting law.
• To respond to your requests and grievances.

4. Who processes data on our behalf

We share data only with processors needed to run the Service:

• Google — sign-in (OAuth).
• AI model providers (such as Anthropic, Google, Moonshot AI, or OpenRouter, depending on configuration) — receive your question text/images to generate explanations. They are contractually restricted from using API data to train models where such options exist, per their respective API terms.
• Railway — application hosting and database.
• PostHog — product analytics (usage events).
• Sentry — error reporting.
• Razorpay — payment processing.

We do not sell personal data, and we do not share it with advertisers.

5. Cookies

We use a session cookie to keep you signed in (essential) and analytics cookies to understand product usage. We do not use advertising or cross-site tracking cookies. Where local law requires opt-in consent for analytics cookies, they are set only after you accept a consent banner; the essential sign-in cookie is always used.

6. Children’s data

• Date of birth. We ask every account for a date of birth so we can apply the DPDP Act’s protections for users under 18. It is used only for this purpose, cannot be changed by the user once set (corrections via the Grievance Officer), and until a date of birth is provided we treat the account as belonging to a child.
• No profiling of children. For users under 18 we do not build individual analytics profiles, do not use session recording, and do not use behavioural advertising or tracking. Their usage appears only in aggregate, anonymous statistics; enforcing question limits is service provision, not monitoring. We never sell anyone’s data.
• Paid subscriptions. A paid subscription for a user under 18 is set up by a parent or legal guardian, who provides their email, accepts a consent statement at checkout, and makes the payment. The guardian is the contracting and paying party; the student is the authorised user. We record who consented, when, to which consent text, and from which IP address.
• Withdrawal. Consent can be withdrawn as easily as it was given — at doubtboard.in/consent or by writing to the Grievance Officer. Withdrawal immediately cancels any paid subscription.
• Parents/guardians may review or request deletion of their child’s data by writing to support@doubtboard.in or the Grievance Officer.

7. Retention and deletion

We keep account and learning data while your account is active. You can delete your account yourself at any time from doubtboard.in/account — deletion is immediate, removes your profile, questions, and consent records, and cancels any active subscription. You may also request deletion by emailing support@doubtboard.in from your registered address; we will action it within 30 days. In either case we may retain what the law requires (tax and payment records held by our payment gateway, fraud-prevention data). Analytics and error data are retained per the retention settings of our processors and then deleted or anonymised.

8. Your rights

Under the DPDP Act and applicable law, you may:

• access the personal data we hold about you — download it yourself as a machine-readable file from your account page, or ask us;
• request correction of inaccurate data — your name is editable on the account page; date-of-birth corrections go through the Grievance Officer;
• erase your data — self-serve on the account page, or by request (subject to legal retention duties);
• withdraw consent, which may limit the Service we can provide;
• raise a grievance with our Grievance Officer (below), and escalate to the Data Protection Board of India if unresolved.

9. Grievance redressal

In accordance with the Information Technology Act, 2000 and rules made thereunder, the Consumer Protection (E-Commerce) Rules, 2020, and the DPDP Act, the Grievance Officer for DoubtBoard is:

• Sunkkalp Kataria, Director, Plyxzy Solutions Private Limited
• Email: grievance@doubtboard.in (subject line “Grievance”)
• Phone: +91 95099 24211

We acknowledge grievances within 48 hours and resolve them within 30 days of receipt. If you are not satisfied with our resolution of a data-protection grievance, you may approach the Data Protection Board of India.

10. Where data is stored

Our infrastructure and processors may store data outside India (e.g. cloud regions operated by our hosting and AI providers). We transfer data only to jurisdictions permitted under applicable Indian law and rely on our processors’ contractual and security commitments.

11. Security

Data is encrypted in transit (TLS); access to production systems is restricted; we follow the principle of least privilege and validate all external inputs. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you and the authorities as required by law.

12. Changes to this Policy

We will update this Policy as the Service evolves and announce material changes in the app or by email. The “Last updated” date below reflects the current version.

See also our Terms of Service and Refund & Cancellation Policy.