Privacy Policy

Who we are and what this covers

REVISIONPREP a product of INACADEMICS (“RevisionPrep”, “we”) is the data fiduciary and controller for personal data processed through revisionprep.com and our applications. Our registered office is at REVISIONPREP a product of INACADEMICS, 117, RAICHANDANI BUSINESS BAY, KOKAPET - HYDERABAD (TELANGANA) INDIA.

This policy explains what we collect, why, who we share it with, how long we keep it, and what rights you have. It applies to students, parents, teachers, prospective customers and site visitors. Where a school has purchased access for its students, the section “Where a school has purchased access” explains how responsibility is divided between us and the school.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (India), and, where it applies to you, the UK and EU General Data Protection Regulation.

What we collect

We do not collect government identifiers, biometric data, or health data, and we ask that you do not send them to us. We do not store full payment card numbers; these are handled directly by our payment providers.

Why we use it, and on what legal basis

Where we rely on legitimate interests, we have assessed that our interest does not override your rights and freedoms, and you may object at any time by writing to [email protected].

Children and student data

Many of our users are children. We treat student data with corresponding care, and the following commitments apply to every account we identify as belonging to a person under 18.

• We do not serve behavioural or targeted advertising to student accounts, and we do not permit any third party to do so through our Service.
• We do not track students across other websites or applications, and we do not build advertising profiles.
• We do not sell, rent or trade student personal data in any circumstances.
• We collect only what is necessary to deliver the learning service and to show the student and, where applicable, their parent or teacher their own progress.
• We do not use student answers or submitted work to train, fine-tune or evaluate any machine learning model. Where we improve our own question bank, we use aggregated statistics that cannot identify an individual.

Parental consent

Where the account holder is under 18, we obtain verifiable consent from a parent or legal guardian before processing personal data, as required by section 9 of the Digital Personal Data Protection Act, 2023. For students under 16 in the EEA or the United Kingdom, parental consent is also the basis on which we rely under Article 8 GDPR. Consent is obtained at registration by CONSENT_MECHANISM — e.g. verified parent email confirmation link plus payment instrument check.

Where a school registers students, the school confirms to us that it has obtained or is otherwise lawfully entitled to provide that consent, and has informed parents of the processing.

A parent or guardian may at any time review, correct, export or delete their child’s data by writing to [email protected] from the email address on record.

Progress, performance and who can see it

As you use the Service we record learning data — questions attempted, answers, marks, time spent, confidence ratings, streaks and progress by topic — and turn it into the progress views, recommendations and any leaderboards shown in your account.

Your individual progress and performance data is private to your account by default. It becomes visible to another person only in the following situations:

• a teacher or school administrator can see the progress of the students in their own class or institution, where that school or teacher provisioned or is linked to the account through a licence;
• a parent or guardian who holds or is linked to a student’s account, or who provided consent for an under-18 account, can see that student’s progress;
• where we display a leaderboard or ranking, we show it only to other members of the same class or group where one exists, and we identify participants by first name or a display name of their choosing rather than by full name or email. You can ask us to remove you from any leaderboard by writing to [email protected].

We do not publish an individual student’s marks or ranking publicly, and we do not share one student’s performance with unrelated students, parents or schools. Any performance statistics we publish about the Service as a whole are aggregated and do not identify any individual.

Cookies and similar technologies

We use cookies and similar technologies as described in our Cookie Policy. We do not set analytics or marketing cookies on student accounts without a lawful basis, and we do not use marketing cookies at all where the user is identified as a child.

Who we share it with

We do not sell personal data. We share it only with service providers who process it on our instructions under a written contract, and only to the extent needed to run the Service:

We may also disclose personal data where required by law, court order or a lawful request from a public authority; to establish, exercise or defend legal claims; to investigate suspected breach of our Terms; or in connection with a merger, acquisition or sale of assets, in which case we will notify you and the acquirer will remain bound by this policy.

Automated processing and artificial intelligence

The Service offers AI-assisted features such as automated feedback and marking, hint generation, answer explanation and study recommendations. To generate a response, your submitted text may be transmitted to a third-party model provider for the sole purpose of producing that output. We contract with those providers on terms that prohibit them from retaining your data beyond the immediate request and from using it to train their models. We do not use your submitted content to train, fine-tune or evaluate any public or third-party AI model without your specific, separate and revocable permission.

We do not make any decision producing legal or similarly significant effects about you by purely automated means. Automated feedback is a study aid, not an assessment.

International transfers

We are based in India and our providers may be located elsewhere. Where we transfer personal data out of the EEA or the United Kingdom, we rely on the UK International Data Transfer Agreement or the European Commission’s Standard Contractual Clauses, together with a transfer risk assessment and any supplementary technical measures required. Where the Government of India restricts transfers to a particular country under section 16 of the Digital Personal Data Protection Act, 2023, we comply with that restriction. A copy of the safeguards we rely on is available on request from [email protected].

How long we keep it

When a retention period ends, we delete the data or irreversibly anonymise it so that it can no longer be linked to you.

Security

We protect personal data using encryption in transit (TLS 1.2 or above), encryption at rest, role-based access control, least-privilege administrative access, logging of administrative actions, and regular review of our providers. Passwords are stored only as salted hashes.

No system is perfectly secure. If a personal data breach occurs that is likely to result in risk to you, we will notify you and the Data Protection Board of India, and any other regulator with jurisdiction, within the timeframes the law requires.

Your rights

Subject to the conditions in applicable law, you may ask us to:

• confirm what personal data we hold about you and give you a copy;
• correct data that is inaccurate, incomplete or out of date;
• erase your data where we no longer have a lawful basis to hold it;
• restrict or object to processing, including profiling;
• port your data to another provider in a structured, machine-readable format;
• withdraw consent at any time, without affecting processing already carried out;
• nominate another person to exercise these rights on your behalf in the event of death or incapacity, as provided by section 14 of the Digital Personal Data Protection Act, 2023.

Write to [email protected]. We will verify your identity and respond within 30 days. There is no charge unless a request is manifestly unfounded or excessive.

If you are not satisfied with our response, you may complain to the Data Protection Board of India, or, if you are in the EEA or the United Kingdom, to your national supervisory authority.

Where a school has purchased access

When a school, tuition centre or other institution buys seats for its students, the institution determines the purpose of the processing and is the data fiduciary and controller. We act as data processor on its instructions, under the data processing terms of our written agreement with that institution.

In that arrangement the institution is responsible for informing students and parents, for obtaining any necessary consent, and for handling access and deletion requests in the first instance. We will assist the institution in meeting those obligations, and will refer a request made directly to us to the institution while acknowledging it to the individual.

Marketing

We send marketing email only to adults who have opted in, and to institutional contacts in a business capacity. Every marketing email carries an unsubscribe link that works immediately. We do not send marketing to accounts identified as belonging to a child. Transactional messages about your account, purchases and security are not marketing and cannot be opted out of while your account is active.

Changes to this policy

We will post any change on this page with a revised effective date. Where a change materially affects how we use your personal data, we will notify registered users by email before it takes effect and, where the law requires it, obtain fresh consent.

Contact and Grievance Officer

• Privacy enquiries and rights requests: [email protected]
• Grievance Officer: Mr. Srinivas, [email protected]
• Postal address: REVISIONPREP a product of INACADEMICS, 117, RAICHANDANI BUSINESS BAY, KOKAPET - HYDERABAD (TELANGANA) INDIA
• Response time: acknowledgement within 48 hours of receipt, and resolution within 15 days, in accordance with the Consumer Protection (E-Commerce) Rules, 2020 and the Information Technology Rules.
• Data Protection Officer (where appointed): [email protected]