Privacy Policy
This Policy explains what personal data we collect, why, who we share it with and the rights you have. For the Digital Personal Data Protection Act, 2023 (DPDP), the Data Fiduciary is FiveUP Tech LLP (registered office: Wadner DL-724, Hinghaghat Road, Wadner, Wardha, Maharashtra 442301, India), operating the AimTheTarget brand. In short: we do not sell your personal data, we show no third-party advertising, sign-in is passwordless, payment card details never touch our servers, marketing is opt-in, and our analytics runs without session recording.
1. What we collect
Details you give us: phone number and/or email (for OTP sign-in), display name, a linked Telegram ID if you connect one, your preparation profile (target exams, attempt, subjects, study preferences, language) and your confirmation that you are 18 or older. Content you create: notes, uploaded files, questions to the AI assistant and answers you submit for evaluation. Generated by use: learning activity (attempts, scores, per-question timing, streaks, plan progress), test-integrity signals during timed tests (such as the test tab losing focus — we never use your camera or microphone), AI usage counts, and technical data (IP address for security and rate limiting, device and browser type, error logs). Payments: order metadata only (what was bought, amount, status) — card, UPI and bank details go directly to the payment gateway and are never stored by us.
2. How we use it
To run and secure your account, deliver the product (tests, notes, flashcards, current affairs, timetable and your own analytics), personalise your study experience, process purchases and refunds, send service messages and the notifications you opt into, improve the Platform, and meet legal obligations. We do not sell your personal data and we do not share it with advertisers.
3. AI processing of your content
When you use an AI feature, the relevant content (your question, the note you asked us to summarise, the answer you submitted) is processed by AI service providers acting on our instructions — currently Anthropic (Claude) for language-model responses. We minimise what we send: content is limited to what the feature needs, and personal identifiers such as your name, phone number and email are scrubbed from it before it is sent. Your content serves your request only — per-user AI outputs are never shared with or retrievable by other users — and we do not authorise any AI provider to use your content to train its models.
4. Legal basis & consent
We process personal data with your consent or for legitimate uses permitted by the DPDP Act, such as processing necessary to provide the service you asked for. Marketing communications are consent-only (opt-in): you can withdraw consent at any time, as easily as you gave it, from settings or any message's opt-out link, without losing access to features that do not need it.
5. Sharing & processors
We share personal data only with service providers under contract, acting on our instructions: cloud database and storage (Supabase), payment gateways (Razorpay, and other RBI-authorised partners we may add — they receive order details, not your identity data from us), AI providers (Anthropic), notification infrastructure (Novu and delivery providers), messaging platforms you link (Telegram), edge and bot-protection (Cloudflare, including Turnstile), and product analytics and error monitoring (PostHog, Sentry). We may also disclose data where the law requires, to protect users or the Platform, or as part of a business restructuring with notice to you. Our primary systems are hosted in India; where a processor handles data outside India we do so as the DPDP Act permits, under protective contracts.
6. Cookies & analytics
We use an essential session cookie to keep you signed in, security tokens for bot protection, and preference storage for language and display settings. Our analytics uses first-party identifiers to understand feature usage — configured without session recording, without autocapture and with URLs sanitised — and our analytics events are built to exclude message contents, notes, answers, phone numbers and emails. We use no advertising cookies or third-party ad trackers. Blocking essential cookies will prevent sign-in.
7. Retention & security
We keep your account data and content while your account is active so your study history stays available to you. On a verified deletion request we delete or irreversibly anonymise your personal data, except records the law requires us to keep (for example, payment and tax records). We protect data with encryption in transit, passwordless authentication, server-side session controls including sign-out-everywhere, account-scoped access to your notes and AI history, upload scanning, rate limiting, and monitoring with personal data scrubbed from logs. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as the DPDP Act requires.
8. Your rights
Under the DPDP Act you may access a summary of your personal data and its processing, correct or update it (much of your profile is editable in settings), request erasure of your data and account, withdraw consent, and nominate an individual to exercise your rights if you are unable to. Write to legal@aimthetarget.com from your registered email, or use in-product settings where available; we may verify your identity first. If you are unsatisfied with our response you may escalate to the Data Protection Board of India. The Act also requires that you not impersonate anyone, suppress material information, or file false or frivolous grievances.
9. Children
The Platform is available only to users who are at least 18 years old, and sign-up requires that confirmation. We do not knowingly process data of children under 18, and we do not direct the Platform, its tracking or any advertising at children. If we learn an account belongs to a person under 18 we will close it and delete its personal data, subject to any legally required retention. If you believe a minor is using the Platform, contact us and we will act promptly.
10. Grievance Officer & contact
Our Grievance Officer is Aaryan Sharma (FiveUP Tech LLP, Wadner DL-724, Hinghaghat Road, Wadner, Wardha, Maharashtra 442301, India). For any privacy concern or to exercise your rights, write to legal@aimthetarget.com. We acknowledge within 24 hours, verify the requester's identity, and resolve within 15 days or the applicable statutory timeline. Material changes to this Policy are notified on the Platform with a revised date.