Privacy policy

Information Abhyaas collects

When you create an account, Abhyaas stores your name, email address, account status and account creation time. Passwords are never stored as readable text; only an Argon2 password hash is retained.

If you choose Google sign-in, Abhyaas receives your verified email address, name and Google account identifier. We do not receive your Google password or request access to Gmail, Drive, Calendar, contacts or other Google services.

For account security, we process session records, token hashes, sign-in timestamps and privacy-preserving digests associated with failed sign-in attempts. Standard server logs may also contain an IP address, requested page and technical error information.

When saved practice and progress features are enabled, Abhyaas may store your answers, scores, attempted subjects, study time and practice history so those features work for you.

How information is used

We use this information to create and secure your account, keep you signed in, restore your preparation space, provide practice and progress features, prevent abuse, diagnose technical problems, respond to support requests and improve the platform.

Doubt solver and study memory

When you use the doubt solver, Abhyaas saves your question text, recognized text from question images, replies and source references in conversations connected to your account. Your question, recent conversation context, relevant study preferences and any attached image are sent to the Google Gemini service to prepare the answer. Avoid including personal or confidential information in questions or images.

Abhyaas validates and resizes attachments in memory, strips image metadata, and does not save the image files in its database or file storage. The AI provider processes requests under its own service and data terms.

Study memory records academic topic counts and your chosen explanation style to personalize future replies and suggestions. You can pause or clear it from Study memory on the doubt-solver page. Clearing study memory does not delete saved conversations or reset abuse-prevention limits. Abhyaas does not automatically fine-tune a shared model from this memory.

Google user data

Google profile information is used only to identify you, create or connect your Abhyaas account and display your account details. Google user data is not used for advertising, sold, or shared for unrelated purposes. Abhyaas does not store Google access or refresh tokens.

Cookies and sessions

Abhyaas uses a strictly necessary HttpOnly authentication cookie. It cannot be read by normal frontend JavaScript and is used to restore and rotate your secure session. We do not currently use advertising or behavioural-tracking cookies.

When information is shared

We do not sell personal information. Information may be processed by infrastructure or authentication providers required to operate Abhyaas, including Google when you voluntarily choose Google sign-in. Information may also be disclosed when required by law, to protect users, or to investigate misuse. Providers are limited to the information needed for their service.

Retention and deletion

Account information is retained while your account remains active or while it is reasonably needed to provide the service, meet legal obligations, resolve disputes and protect the platform. Short-lived authentication and password-reset credentials expire automatically. You may request account deletion using the contact address below.

Your choices and rights

You may ask to access, correct or delete your personal information, withdraw consent where processing relies on consent, or raise a privacy grievance. We may need to verify your identity before completing a request. You can also revoke Abhyaas access from your Google Account permissions.

Security

Abhyaas uses password hashing, short-lived access credentials, rotating hashed sessions, HttpOnly cookies, origin checks, login throttling and server-side authorization. No internet service can promise absolute security, but we limit the information collected and apply safeguards appropriate to the current platform.

Children

Abhyaas is designed for CDS aspirants and is not intended for children under 18. We do not knowingly create accounts for children. If you believe a child has provided personal information, contact us so it can be reviewed and removed.

Changes to this policy

This policy may be updated when Abhyaas adds features, changes providers or needs to reflect legal requirements. The effective date will be updated, and material changes will be communicated within the platform where appropriate.