YDU Academy privacy policy

Last updated 15 October 2026. What we collect, why we collect it, who we share it with, how long we keep it and the choices you have.

About this policy

This privacy policy explains how YDU Academy (“YDU Academy”, “we”, “us” or “our”) collects, uses, shares, stores and protects personal data when you use the YDU Academy mobile app, our courses and the web pages we publish, including this one (together, the “service”).

YDU Academy is based in Khandwa, Madhya Pradesh, India. Our contact details, including our Grievance Officer’s, are at the end of this policy.

It applies to everyone who uses the service, whether or not they have an account. Please read it together with our Terms of use. By creating an account or using the service, you agree to the processing described here. If you do not agree, please do not use the service.

The short version

We collect only what the service needs: your mobile number to sign you in, the profile details you choose to add, your purchases and your learning progress.
Payments happen on Razorpay’s secure checkout. Your card, UPI and bank details never reach YDU Academy.
We do not sell your personal data, we do not show third-party ads and we do not track you across other apps or websites.
You can see, correct or delete your data at any time, and delete your account in the app or without it — see “Deleting your account” below.

Information you give us

Mobile number: the Indian mobile number you sign in with, using a one-time password (OTP). It identifies your account.
Name: the name on your profile. A new account starts with a placeholder such as “Learner 1234” until you change it.
Optional profile details: an email address, your city, your learning goal and the subjects you are interested in, if you choose to add them.
Profile photo: only if you choose to add one. You pick a single photo, and only that photo is uploaded.
Ratings and reviews: the star rating and the text you write about a course you own.
Messages to us: what you send when you email or call our team, such as a question, a refund request or a complaint.

Information created when you use the service

Purchases: the course you bought, its price, any coupon and discount, the payment status (pending, paid or refunded), the payment method type (for example UPI or card) and the order and payment references from Razorpay.
Learning progress: the courses you own, the lessons you complete, the last lesson you opened and where you stopped watching, so you can continue on any device.
App activity: events such as opening the app, viewing a course, starting or completing a lesson, starting checkout and the words you search for. Each event records the time and, if you are signed in, your account.
Account records: when your account was created, when you last signed in and whether it is active or blocked.
Inbox messages: the notifications we send to you, kept in your in-app inbox.

Information from your device

Push notification token: if you allow notifications, your phone gets a token from Expo and Firebase Cloud Messaging (or Apple’s push service). We store it with the platform (Android or iOS) and when it was last used, so notifications reach that phone.
Connection data: when the app connects to our servers, they receive your IP address and basic request details such as the time. We use this to deliver the service, keep it secure and limit abuse, for example how often sign-in codes can be requested.
Our hosting providers may keep short-lived server logs that include IP addresses, for security and troubleshooting.
We do not use your advertising ID, and we do not collect hardware identifiers such as your IMEI.

Information that stays on your device

Some information is stored only on your phone and is not sent to our servers. You can remove most of it with Clear data on this device in Settings, and all of it by uninstalling the app.

Notes you write on lessons.
Courses you save for later, and your recent searches.
A copy of the course catalog, so the app opens quickly.
Your preferences, such as theme, language and notification switches.
Your sign-in session, kept in your phone’s secure storage.

Payments

Payments are processed by Razorpay Software Private Limited (“Razorpay”). You enter your card, UPI, net-banking or wallet details directly on Razorpay’s checkout or in your UPI app. Those details never reach YDU Academy’s app or servers.

To take a payment, we give Razorpay your name, mobile number, email address (if your account has one), the amount and our order reference. Razorpay tells us whether the payment succeeded, the payment reference and the payment method type, which we keep with your order. Razorpay handles your payment information under its own privacy policy and the security standards that apply to payment companies.

What we do not do

We do not sell, rent or trade your personal data.
We do not show third-party advertising, share your data with advertisers or data brokers, or track you across other apps and websites.
We do not access your contacts, call logs, SMS messages, location, microphone or camera.
We do not access the photos or files on your phone, apart from the one profile photo you choose to upload.
We do not collect card numbers, CVV, UPI PINs, net-banking passwords or other payment credentials.
We do not ask for sensitive information such as Aadhaar, PAN, health or bank account details.

Permissions the app asks for

The app asks for a permission only when a feature needs it. You can say no, and you can change your choice later in your phone’s settings.

Notifications: to send course updates, learning reminders and account messages. The app works without it; you just will not receive push notifications.
Photos: only when you tap to add or change your profile photo, so you can choose a picture. Only the photo you pick is used.
Internet access: to sign you in, load courses, stream lessons and sync your progress.

How we use your information

We use personal data only for the purposes below, and we will ask for your consent before using it for any new purpose:

To create and secure your account, and to sign you in with a one-time password sent to your mobile number.
To sell you courses, take payment through Razorpay, unlock what you bought and keep records of your orders.
To stream lessons, save your progress and let you continue where you stopped, on any device.
To show your ratings and reviews on course pages and calculate course ratings.
To send you service messages and, if you allow them, push notifications about your courses, new lessons, reminders and new courses.
To answer your questions, process refunds and resolve complaints.
To understand how the service is used — for example which courses are viewed and where learners stop — so we can improve courses and the app and suggest related courses.
To keep the service safe: preventing fraud, abuse and unauthorised access, and enforcing our Terms of use.
To comply with the law, respond to lawful requests from authorities and keep the records the law requires.

Legal basis

We process your personal data with your consent, which you give when you create an account and use the features described here, and for the legitimate uses allowed by the Digital Personal Data Protection Act, 2023 — for example, where you have voluntarily given us data for a specific purpose, to comply with the law or a court order, or in an emergency.

You can withdraw your consent at any time by deleting your account or contacting us. This does not affect processing that happened before you withdrew it, and features that need the data, such as signing in, will stop working.

We share personal data only with the parties below, only as much as each needs, and only for the purposes in this policy. Service providers process data on our behalf and under our instructions.

Razorpay: to process payments, refunds and payment disputes.
Cloud hosting and database providers: to run our servers and store account, order, progress, profile photo, course image and lesson video data.
Expo, Google Firebase Cloud Messaging and Apple Push Notification service: to deliver push notifications to your phone.
An SMS service provider: to send sign-in codes to your mobile number.
Everyone who views a course page: your profile name, star rating and review text, if you review that course.
Authorities and others where the law requires: to comply with a legal obligation, court order or lawful government request, or to protect the rights, property or safety of our learners, the public or YDU Academy.
A buyer or successor: if YDU Academy is merged, acquired or sells its assets, personal data may be transferred as part of the deal, under this policy or one that protects it at least as well.

Where your data is stored

Your data — including profile photos, course covers and lesson videos inside our server uploads storage — is stored on secure servers run by our hosting providers. Some providers, such as Expo and our cloud hosting providers, may store or process data outside India. Any transfer outside India is made only as Indian law permits, including any restrictions notified by the Government of India under the Digital Personal Data Protection Act, 2023, and only to providers that protect data with appropriate safeguards.

How we protect your information

We protect personal data with reasonable security practices and procedures. No method of storage or transmission is completely secure, but if a personal data breach happens we will act quickly to contain it and will inform affected users and the Data Protection Board of India as the law requires.

Our safeguards include:

Data between the app and our servers travels over encrypted HTTPS connections.
Sign-in codes are stored only as a one-way cryptographic hash, expire after 5 minutes and stop working after 3 wrong attempts.
Your sign-in session is kept in your phone’s secure storage and expires after a set time.
Lesson videos are kept in private storage and played through short-lived links issued only to learners allowed to watch them.
Only authorised people who need it to run the service can access personal data, and admin accounts are protected by hashed passwords.
Payment details are handled by Razorpay and never stored on our systems.

How long we keep your information

We keep personal data only for as long as we need it for the purposes in this policy:

Account and profile data: for as long as your account exists. It is deleted when you delete your account.
Sign-in codes: deleted as soon as they are used, and expire automatically after 5 minutes.
Orders, course access, progress and reviews: for as long as your account exists, then deleted, except records the law requires us to keep.
App activity: deleted automatically about 13 months after it is recorded. If you delete your account sooner, your activity is first separated from your account so it can no longer be linked to you.
Push notification tokens: until you log out, the token stops working or you delete your account.
Support messages: for as long as we need them to resolve your request and handle any follow-up.
Records required by law: tax, accounting and payment records may be kept for as long as Indian law requires (generally up to 8 years), even after your account is deleted.
Backups: deleted data may remain in secure backups for a limited time, until those backups are overwritten in their normal cycle.

Deleting your account

You can delete your account at any time. In the app, go to Profile → Settings → Delete account and confirm. Your account is deleted immediately.

Without the app, email yduacademy@gmail.com from any device with the subject “Delete my account” and the mobile number registered with your account. We will confirm the request with you and delete the account within 7 days. Our Delete account page explains the steps, and exactly what is deleted and what is kept.

Deleting your account permanently removes your profile and photo, your purchases and course access, your lesson progress, your ratings and reviews, your inbox messages and your device tokens, and separates your app activity from your account. Deletion cannot be undone, and purchased courses cannot be restored or refunded afterwards.

Your rights and choices

Under applicable law, including the Digital Personal Data Protection Act, 2023, you can ask us to do the things below. Contact us using the details under “Grievance Officer and contact”. We may first confirm your identity, for example on your registered mobile number, and we will respond within 30 days.

Access: get a summary of the personal data we hold about you, how we use it and who we have shared it with.
Correction: correct, complete or update your data. You can edit your profile details in the app at any time.
Erasure: delete your account, or ask us to delete specific data we no longer need.
Withdraw consent: stop processing that relies on your consent, from then on.
Nomination: name another person to exercise your rights if you die or become unable to do so.
Grievance redressal: have your complaint handled by our Grievance Officer and, if you are not satisfied, complain to the Data Protection Board of India.
Notifications: turn off push notifications at any time in your phone’s settings.

Children

YDU Academy is made for adults learning a trade. It is not directed at children, and you must be 18 or older to create an account. A parent or lawful guardian may let a child learn with the parent’s own account, under their supervision.

We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or guardian, and we do not track children, build profiles of them or show them targeted advertising. If you believe a child has given us personal data, contact us and we will delete it.

Cookies and similar technologies

The app does not use cookies. It stores some information on your phone, as described under “Information that stays on your device”.

Our policy web pages, including this one, do not set cookies, run analytics scripts or show ads. Razorpay’s checkout pages may use cookies under Razorpay’s own policies.

Third-party services

The app opens some services run by others, such as Razorpay’s checkout and your UPI app. Their privacy policies govern how they use your information, and we encourage you to read them. We are not responsible for the practices of services we do not control.

Changes to this policy

We may update this policy when our service or the law changes. We will update the “Last updated” date at the top and, for significant changes, tell you in the app before they take effect. If you keep using the service after a change takes effect, the updated policy applies.

Grievance Officer and contact

For questions, requests about your personal data, or complaints about how we handle it, contact our Grievance Officer. Please include the mobile number registered with your account. We acknowledge complaints within 48 hours and resolve them within 30 days of receiving them.

Grievance Officer: Deepak Kushwah
Email: yduacademy@gmail.com (subject “Privacy request” or “Grievance”)
Phone: +91 7489301982
Address: YDU Academy, Khandwa, Madhya Pradesh, India