Privacy Policy

Last Updated: September 23, 2025

Introduction

Global People's Academy ("we", "us", "our") provides digital educational content and online test services across our website and mobile apps (Android and iOS). This Privacy Policy explains what we collect, why, how we use it, how we store/process it using Firebase Firestore, when we share it with service providers, how long we keep it, and how to exercise rights via our Contact Form.

Controller and contacts

Controller: Global People's Academy. Primary contact: Contact Form available on the website and in the apps. Use the Contact Form for privacy requests, including access, correction, portability, objection, and deletion.

What we collect

How we use data

Legal bases

We rely on one or more of: performance of a contract (providing services), legitimate interests (security, fraud prevention, improvements), and consent where required for specific processing.

Data storage and processors

We store personal data primarily in Google Firebase Firestore and may use other Firebase services such as Hosting and Cloud Functions. Google acts as our processor/service provider under the Firebase Data Processing and Security Terms; we remain the data controller.

Payments

In‑app digital purchases on Android use Google Play Billing; on iOS use Apple In‑App Purchase. Website purchases are processed by Razorpay. We receive payment confirmations and entitlement metadata but do not store card PAN/CVV or UPI PIN on our servers.

Sharing

We share personal data with service providers only as necessary to operate the service (e.g., Firebase, platform billing, payment processors) and as required by law. We do not sell personal data.

Security

We implement reasonable technical and organizational measures such as HTTPS in transit and role‑based access controls in storage. No method is 100% secure, but protections are designed to reduce risk appropriate to the data.

Retention

We retain data only as long as needed to provide services, meet legal obligations, resolve disputes, and enforce agreements; when no longer needed, data is deleted or de‑identified.

Your rights and deletion

Submit access, correction, portability, objection, or deletion requests via the Contact Form. Upon verifying identity, requests are processed within a reasonable period, and deletions extend to records in Firestore and connected processing systems unless retention is required by law.

Children

Our services are not directed to children. Users under 18 should use the services with parental or legal guardian consent.

Cookies and similar tech

On the website, cookies or similar technologies support core functionality and security; in mobile apps, SDKs may provide analogous functionality. Controls are available in browser settings and device permissions where applicable.

Changes

We may update this Privacy Policy to reflect changes in services or legal requirements. The “Last Updated” date indicates the effective date; continued use after changes signifies acceptance.

Contact

For privacy inquiries or to exercise rights, use the Contact Form available on our website and apps.