gravix247-legal

Privacy Policy — Gravix247

Last updated: 16 June 2026

This Privacy Policy explains how Gravix247 (“Gravix247”, “we”, “us”, or “our”) collects, uses, shares, and protects information when you use the Gravix247 mobile application (the “App”), available on Google Play.

This Privacy Policy describes our data practices. Where your consent is required under applicable law, we seek it through the App at the relevant point — for example, when you sign in, when you enable Google Drive backup for the Answer Library, or when you opt into push notification categories. If you do not agree with these practices, please do not use the App.


1. Who we are

Gravix247 is developed and operated by Shivam Sachan, an individual developer based in Delhi, India (“Data Fiduciary” under the Digital Personal Data Protection Act, 2023). For any privacy-related question, request, or grievance, contact:

Email: dskj4178@gmail.com


2. Who can use the App

Gravix247 is intended for users who are 18 years of age or older. By using the App, you confirm that you are at least 18 years old. We do not knowingly collect personal data from individuals under the age of 18. We may ask you to confirm your age, and if we become aware that an account belongs to a user under 18, we will suspend or delete that account and any associated personal data.


3. Information we collect

We collect only the information necessary to operate the App, personalise your learning experience, and provide the features you use.

3.1 Account and profile information

When you sign in using Google Sign-In, we receive and store:

During profile setup, you also provide (all required to complete setup):

3.2 Device information

We generate a device-linked identifier — a one-way cryptographic (SHA-256) hash derived from your device’s identifier and your account email. When linked to your account, we treat this identifier as personal data. It is used solely to:

3.3 Study and usage data

To provide the App’s core features, we store data you generate while using the App, including:

We may also use this data in an aggregated and, where feasible, de-identified form to understand how the App’s features are used and to improve them.

3.4 User-generated content (Answer Library)

If you use the Answer Library feature to scan and store handwritten Mains answers:

3.5 Purchase information

If you purchase access to premium content (e.g., unlocking specific Prelims subjects or test series) through Google Play Billing, we receive and store:

We do not collect, process, or store your payment card or banking details. All payments are processed directly by Google Play under Google’s own privacy and payment terms.

3.6 Push notification data

We use Firebase Cloud Messaging (FCM) to deliver push notifications (e.g., daily current affairs, test reminders, study tips). This requires storing a device-specific FCM token. You can control which notification categories you receive, or disable notifications entirely, from within the App’s Settings. Notification delivery also depends on your device’s operating system settings.

3.7 Information we do not collect

Gravix247 does not use third-party advertising networks, does not show ads, and does not use third-party analytics, advertising, or tracking SDKs. We do not access your contacts, call logs, SMS, photos (other than what you explicitly select for scanning), or location.

Note that the infrastructure providers listed in Section 6 (e.g., Google, Supabase) may process limited technical data — such as IP address, device/OS information, or request logs — as part of operating their services. This is standard for any app built on cloud infrastructure and is governed by those providers’ own privacy policies.


4. How we use your information

We use the information described above to:


Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we process your personal data on the basis of your consent. Consent is obtained separately for different purposes — for example, when you sign in with Google (account creation), when you enable Google Drive backup for the Answer Library (Drive access), and when you opt into push notification categories (notifications).

You may withdraw consent at any time by: disabling the relevant feature in the App’s Settings, revoking permissions through your Google Account, or emailing us at dskj4178@gmail.com. Withdrawing consent for a feature may limit or disable that feature.


6. How we share your information

We do not sell your personal data. We share information only as necessary with the following categories of recipients:

Recipient Role Purpose Data involved
Google (Sign-In, Drive, Firebase Cloud Messaging, Play Billing) Platform and service provider Authentication, Drive-based storage for Answer Library, push notifications, purchase processing Account info, Drive files (your own account), FCM token, purchase tokens
Supabase Hosting and database service provider (data hosted in Singapore) Storing app data (account info, study data, bookmarks, metadata, purchase records) All categories described in Section 3, except Drive file contents

These providers process data in accordance with their own applicable terms and privacy policies, in addition to the purposes described here. We may also disclose information where required by law, court order, or to protect the rights, property, or safety of Gravix247, our users, or the public.


7. Cross-border data transfer

Our database infrastructure (Supabase) is hosted in Singapore, and Google’s services operate on global infrastructure. As part of delivering the App’s features, your personal data may therefore be stored and processed outside India. We select service providers that maintain appropriate security and confidentiality safeguards, consistent with the DPDP Act’s requirements for cross-border data transfers.


8. Data storage, security, and retention

We apply reasonable technical and organisational security measures appropriate to the sensitivity of the data, including:

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Retention:


9. Your rights and grievance redressal

As a “Data Principal” under the DPDP Act, you have the right to:

In-app account deletion

You can delete your Gravix247 account at any time directly from within the App — no need to email us. Go to Settings → Delete Account and follow the two-step confirmation. Deletion is immediate and permanent once confirmed.

What gets deleted from our servers:

What gets cleared from your device:

What is NOT deleted: PDF files you backed up to your own Google Drive are not deleted by Gravix247 — those files are in your personal Google Drive account and remain entirely under your control.

Irreversibility: Account deletion is permanent and cannot be reversed. All data is deleted at the moment you confirm. If you wish to use Gravix247 again after deleting your account, you will need to create a new account.

To exercise any of these rights, email us at dskj4178@gmail.com with the subject line “Privacy Request”. We will:


10. Data breach notification

In the event of a personal data breach involving your personal data, we will notify you without delay, through the App or your registered email, describing the nature of the breach, the personal data affected, steps you can take to protect yourself, and how to contact us.

We will also notify the Data Protection Board of India without delay, and provide a detailed report within 72 hours of becoming aware of the breach, as required under the DPDP Rules, 2025.


11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the App’s features, or applicable law. We will update the “Last updated” date at the top of this page when changes are made. Significant changes will be communicated through the App. Your continued use of the App after any changes constitutes your acceptance of the revised Privacy Policy.

Where a change introduces a new purpose for processing your personal data, we will seek your consent before that processing begins, as required by the DPDP Act.


12. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Grievance Officer:

We will acknowledge grievances within 7 days and resolve them within 90 days, as set out in Section 9.