Privacy Policy

This Privacy Policy explains what data Afsal ("we") collects when you use RankFlow, why we collect it, and how we handle it.

1. What we collect

• Account: your email address (and name, if you sign in with Google), plus a securely hashed password if you sign up with email.
• Study progress: the tasks you tick off, your daily study goal, and streak counters.
• Payment records: the Razorpay order and payment IDs, amount, currency, and payment status. We do NOT store your card number, CVV, UPI PIN, or bank details — those stay with Razorpay.
• Basic technical data: IP address and browser type recorded in server logs for security and abuse prevention.
• Analytics: if enabled, Meta Pixel records page views and purchase events for advertising measurement. See "Cookies and analytics" below.

2. How we use it

• to run your account and save your syllabus progress;
• to process payments and send you a receipt email;
• to send essential service emails (sign-in, password reset, receipts);
• to protect the Service from abuse and to comply with law;
• to measure advertising performance, when Meta Pixel is enabled.

We do not sell your data. We do not use your progress data for advertising.

3. Who processes your data on our behalf

We use trusted service providers ("data processors"):

• Lovable Cloud (Supabase infrastructure): hosts our database, authentication, and application backend.
• Razorpay: processes payments in India. Governed by Razorpay's own privacy policy.
• Google (OAuth): used if you choose "Continue with Google" to sign in.
• Lovable Email (notify.rankflow.pro): delivers transactional emails such as receipts.
• Meta (Facebook Pixel): optional analytics for ads measurement.

4. Cookies and analytics

We use essential cookies to keep you signed in. If Meta Pixel is enabled, it may set cookies on your device to attribute conversions to ad campaigns. You can block these cookies in your browser or use tools like an ad blocker; the core Service will still work.

5. Data retention

We keep your account and progress data for as long as your account exists. Payment and receipt records are retained for at least 8 years to comply with Indian tax and accounting law. If you delete your account, we remove your progress and personally identifying data within 30 days; anonymised aggregates and legally required payment records may be retained.

6. Your rights

You can:

• access, correct, or export the personal data we hold about you;
• request deletion of your account and associated data;
• withdraw consent for optional analytics.

To exercise any of these, email highscorekerala@gmail.com. We will respond within 30 days.

7. Security

Data is transmitted over TLS and stored in managed, access-controlled infrastructure. Passwords are hashed. We restrict internal access to what is needed to run the Service. No online service is perfectly secure — please use a strong, unique password and tell us immediately if you suspect unauthorised access.

8. Children

RankFlow is intended for NEET aspirants, most of whom are 16 or older. Users under 18 should use the Service with parental consent. We do not knowingly collect data from children under 13; if you believe a child under 13 has created an account, contact us and we will delete it.

9. Changes

We may update this Policy. Material changes will be communicated by email or an in-app notice.

10. Contact

For privacy questions or requests, email highscorekerala@gmail.com. Our registered address is 676542, Malappuram, Kerala, India.