JoyyBannerjii — Privacy Policy

Depending on how you use JoyyBannerjii, we may collect the data categories below:

• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.
• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.
• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.
• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.

JoyyBannerjii processes your information only for these purposes:

• To process payments and issue invoices and receipts.
• To meet our legal, tax and accounting obligations.
• To deliver the courses, live classes, notes and mock tests you have access to.
• To detect and prevent fraud, abuse and policy violations.
• To create, secure and maintain your account.
• To respond to your support requests and doubts.
• To send you course-related notifications — only after you opt in.

Your data is never sold. We disclose the minimum necessary data only to the partners that power JoyyBannerjii:

• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.
• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.
• Razorpay — our payment processor, to take payments and issue refunds.
• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.

Each provider is bound to use the data only to perform its service for us, not for its own purposes.

JoyyBannerjii is designed for learners aged 13 or older. Users under 18 should use the app and make purchases only with permission from a parent or guardian. We do not knowingly gather information from anyone under 13, and we remove any such data as soon as we become aware of it.

Under the DPDP Act and Google Play’s policies, you have the right to:

• Withdraw consent for any non-essential processing at any time.
• Access a copy of the personal data we hold about you.
• Correct information that is inaccurate or out of date.
• Delete your data, subject to legal retention requirements.
• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.

Contact [email protected] to act on any of the above, and we will get back to you as the law requires.

Your data is retained while your account is active. You may delete your account whenever you wish — either through the in-app “Delete my account” control or by writing to [email protected]. Once requested, we erase your personal data within 30 days, apart from records we must keep for legal, tax or accounting purposes (usually up to 7 years).

Passwords are hashed with bcrypt and never stored in plain text. All traffic is encrypted in transit using TLS 1.2 or higher, and database backups are encrypted at rest. We run regular security reviews and patch critical dependencies within 72 hours of a disclosure.

We may update this policy from time to time. For any significant change, we will give you in-app notice and revise the “Last updated” date above. Your continued use of JoyyBannerjii after the change indicates your acceptance of it.

Have a question, complaint or grievance about your privacy? Email us at [email protected]. We aim to acknowledge every grievance promptly and resolve it within the timelines set by the DPDP Act.