Privacy Policy
This Policy explains what personal data we collect, why, and the rights you have over it. We are committed to the Digital Personal Data Protection Act, 2023 (DPDP) and to collecting only what we genuinely need.
1. What we collect
Account details you give us (name, email, phone, target exam and language); learning activity (attempts, scores, streaks and plan progress); notes and files you upload; and basic device and usage data needed to run and secure the service.
2. How we use it
To run your account, personalise your study plan, generate summaries from your notes, show progress, send the digests and alerts you opt into, process payments, and improve the Platform. We do not sell your personal data.
3. Legal basis & consent
We process your data on the basis of your consent and to deliver the service you asked for. You can withdraw consent for optional processing (such as marketing messages) at any time without affecting core access.
4. Sharing
We share data only with vetted processors who help us operate — for example payment gateways, cloud hosting and communication providers — under contracts that bind them to protect it. We may disclose data where required by law.
5. Retention & security
We keep personal data only as long as needed for the purposes above or as the law requires, then delete or anonymise it. We protect it with encryption in transit, access controls and regular reviews.
6. Your rights
You may access, correct, or erase your personal data, withdraw consent, or nominate a representative, by writing to us. We will respond within the timelines set by the DPDP Act.
7. Children
We do not knowingly process the data of children under 18 without verifiable parental consent. If you believe a child has given us data without consent, contact us and we will remove it.
8. Grievance Officer & contact
Our Grievance Officer is Aaryan Sharma. For any privacy concern, write to legal@aimthetarget.com. We acknowledge within 48 hours, verify the requester's identity, and handle the request under our documented privacy-request process within the applicable statutory timeline.