MyndaqAI

Privacy Policy

Last updated: August 2026 · Effective immediately

This Privacy Policy explains how Myndaq, operated by Hyeontech Solutions Private Limited, TF-6, Pragati Apartment, B-2 Model Town West, Ghaziabad, Uttar Pradesh 201009, India("Myndaq", "we", "us", "our"), collects, uses, shares, stores, and protects your personal data when you use myndaq.com and the Myndaq application (the "Service"). We act as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and follow the Information Technology Act, 2000 and the rules made thereunder. By using the Service, you agree to this Policy. If you do not agree, please discontinue use.

1. Information we collect

1.1 Account information

When you sign up we collect your display name and, depending on your sign-in method, your email address or phone number, along with your country and the exam or course you select. Sign-in is handled by Firebase Authentication (Google sign-in or phone OTP); we receive an authentication identifier and do not store your password.

1.2 Learning activity

To personalise your experience, we collect data about how you use the Service: quiz attempts and scores, AI chat history, practice session durations, module progress and accuracy, course enrolments, streaks and XP, writing drafts, and speaking-practice attempts. This powers your analytics, adaptive difficulty, and recommendations.

1.3 Content you submit

Some features let you submit content: photos you upload to ask a doubt, text answers you write, and voice recordings you make in speaking practice. We process this content to generate the relevant AI response, feedback, or score (see Section 4).

1.4 Payment information

Payments from customers in India are processed by Razorpay; for customers outside India, payments are processed by Dodo Payments (dodopayments.com), which acts as the Merchant of Record for the transaction. We store your plan, payment status, and transaction identifiers (such as Razorpay or Dodo Payments order and payment IDs). We do not collect or store your full card number, CVV, UPI ID, or bank credentials — these are handled entirely by the payment processor.

1.5 Device and usage data

We automatically collect your IP address, browser type and version, device type and screen size, timezone, and approximate country (derived from IP). This supports analytics, security, and localisation (such as default currency and language). Meta Pixel also receives page URLs, standard browser and device information, its advertising-cookie identifiers, and the PageView or completed-registration event described in Section 10.

1.6 Fraud prevention and security data

To detect fraudulent signups, account sharing, and unauthorised access, we collect and process:

  • Device fingerprint — a hash derived from your browser's user agent, language, timezone, screen size, and canvas rendering, used to identify devices across sessions and detect bot signups. It is not linked to any third-party advertising identifier.
  • IP address, network operator (ASN), and approximate country — resolved server-side to detect suspicious patterns, rate-limit signups from datacentre networks, and block automated attacks.

1.7 AI interaction data

Your chat messages with the AI tutor are stored to maintain conversation context and to power your analytics. We also record the model used and token/cost metadata for internal rate limiting. Chat history is automatically and permanently deleted after 7 days. We do not sell your conversation data. Limited, de-identified samples may be reviewed internally to improve quality.

2. How we use your information

We use your data to:

  • Provide and personalise the learning experience (adaptive practice, AI tutoring, progress tracking, feedback)
  • Process payments and manage subscriptions
  • Send account-related communications (confirmations, security alerts, service notices)
  • Detect and prevent fraud, abuse, and security threats
  • Analyse usage to maintain and improve the Service
  • Comply with legal obligations

We do not sell your personal data or serve third-party advertisements inside Myndaq. We use Meta Pixel to measure and improve Myndaq's own marketing campaigns as described in Section 10.

3. Legal basis and consent

We process your personal data on the basis of the consent you give when you create an account and use the Service, and on the legitimate uses permitted under the DPDP Act (such as providing a service you have requested, keeping the Service secure, understanding usage, and measuring our campaigns). You may withdraw consent at any time (see Section 6). Withdrawing consent does not affect processing already carried out and may limit some processing.

4. How we share your information

We share data only with the service providers (sub-processors) needed to operate the Service. When AI features are used, we send the necessary content — your question and relevant context, and for image or voice tasks the uploaded image or recording — to the relevant provider to generate a response, feedback, audio, or a score. We do not send your name, email, or phone number to these AI or speech providers.

  • Google — Firebase Authentication (login), Gemini (AI tutor, and scoring of spoken-answer transcripts), Google Cloud Text-to-Speech (generating spoken audio for practice), and Google Analytics (aggregate usage analytics — see Section 10).
  • Anthropic — Claude, used as an AI fallback and to generate and score certain content (such as writing feedback).
  • Microsoft Azure — speech-to-text transcription of your recorded speaking answers (the resulting transcript is then scored by the AI providers above; Azure does not itself score your speech).
  • Sarvam AI — Indian-language speech recognition and synthesis, used where Indian-language voice features are enabled.
  • Razorpay — payment processing in India; receives only what is needed to complete your transaction.
  • Dodo Payments — the Merchant of Record and payment processor for customers outside India; receives the billing and transaction details needed to take payment, calculate and remit applicable taxes, and handle refunds.
  • Amazon Web Services (AWS) — hosting and storage, in the ap-south-1 (Mumbai) region.
  • Cloudflare — content delivery and security (CDN / web application firewall).
  • Meta Platforms — Meta Pixel receives PageView and completed-registration events plus associated browser, device, network, page URL, cookie and pseudonymous event information to measure Myndaq campaigns. We do not send Meta your learning answers, AI chats, recordings, email address, phone number, or internal account identifier.

We may also disclose data where required by law or to protect our rights, users, or the public. Apart from the analytics and campaign-measurement providers disclosed above, we do not share data with advertisers, data brokers, or social media platforms.

5. Data retention

  • Account data: retained while your account is active; deleted 30 days after a deletion request.
  • Learning activity: retained while your account is active; deleted or de-identified with your account.
  • AI chat history: automatically and permanently deleted after 7 days.
  • Authentication events: retained for 90 days for security monitoring.
  • Administrative audit logs: retained for 13 months.
  • Payment records: retained as required by applicable tax and financial law (typically up to 7 years).
  • Free Mock records: your exam selection, answers and final result are retained for the lifetime of your account and deleted with it. Raw speaking audio you record in a free mock is hard-deleted within a maximum of 30 days; temporary processing copies are deleted immediately after transcription; speech transcripts are never part of your result and are deleted on the same 30-day clock as the audio, while the derived scores remain. Free Mock funnel events are kept for a defined window and then aggregated or deleted.

5a. Free Mock processing

When you take the one-time Free Mock, we process: your exam selection and attempt state; the answers you submit and the resulting scores; and, where the paper includes writing or speaking, your written responses and recorded audio. Written and spoken responses in AI-scored sections are processed by our AI providers (currently Google, Anthropic and Microsoft Azure, as described in Section 4) solely to produce your score and feedback; audio is transcribed as part of this processing. We also record server-side funnel events about the attempt (for example that a mock was started or submitted) and limited first/last-touch attribution fields (such as UTM parameters and the referring site); we do not send your answers, question text, transcripts, audio or result details to analytics or advertising services.

6. Your rights

Subject to applicable law, you have the right to:

  • Access your data — much of it is visible in your Profile and Analysis pages.
  • Correct inaccurate data — edit your name and preferences in Profile.
  • Delete your account and data — Profile → Account → Delete Account (30-day grace period).
  • Withdraw consent — block analytics or advertising cookies through your browser, delete your account, or contact us for processing requests.
  • Export a copy of your data — contact support@myndaq.com.
  • Nominate, under the DPDP Act, another person to exercise your rights in the event of death or incapacity.
  • Grievance redressal — raise concerns with our Grievance Officer (Section 11).

7. Children's data

Myndaq is used by exam aspirants, some of whom are under 18 ("children" under the DPDP Act). A child may use the Service only with the verifiable consent of a parent or legal guardian, who accepts our Terms and this Policy on the child's behalf and is responsible for the child's use of the Service. We do not knowingly process a child's personal data without such consent.

We do not carry out targeted advertising directed at children, and we do not serve advertising inside Myndaq. Meta Pixel is used for aggregate campaign measurement rather than to show advertisements inside the Service. A parent or guardian can block analytics or advertising cookies through the child's browser and can contact us to access, correct, or delete their child's data or to withdraw consent. If we learn that we have processed a child's data without the required consent, we will take steps to delete it.

8. Security

We use reasonable security safeguards, including encrypted connections (HTTPS/TLS), authentication via Firebase, server-side rate limiting, fraud detection, and access-controlled administrative systems. Our administrative panel is not exposed to the public internet. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International data transfers

Your data is primarily stored in India (AWS ap-south-1, Mumbai). Some sub-processors, particularly AI and speech providers, Meta Platforms, and our international payment processor (Dodo Payments) for customers outside India, may process data on servers located outside India. Where this happens, we rely on the provider's contractual protections and process only what is necessary for the stated purpose, and only as permitted under applicable Indian law.

10. Cookies, local storage and analytics

We use cookies and local storage for authentication (Firebase session tokens), remembering preferences, analytics, and campaign measurement. We use Google Analytics 4 to understand, in aggregate, how our pages are used (for example, which pages are visited and from which country). Google Analytics sets its own cookies and collects device and usage information as described in Google's privacy documentation; we do not send it your name, email, or learning content, and we do not use it to serve advertisements inside Myndaq. You can opt out of Google Analytics using the Google Analytics opt-out browser add-on or by blocking analytics cookies in your browser.

Meta Pixel loads with the Service and may set the _fbp and _fbccookies and send PageView and CompleteRegistration events to Meta for campaign measurement. We do not send Meta your learning content or direct account contact details. You can block these cookies and requests using your browser's privacy controls or a content blocker; doing so does not reduce Myndaq functionality.

During a timed assessment (such as a listening, reading, or full mock test) we also temporarily save your in-progress work in your browser's local storage — this includes your selected answers, the time you started, your position in the test, and any questions you have marked for review. This lets you safely resume the same attempt if the page reloads or your connection drops, without losing your answers. It stays on your device, is scoped to that test attempt, and is cleared when you submit the test or it is superseded by a new attempt. Your answers are also saved to our servers when you submit so that we can score the attempt and show your results.

11. Grievance Officer and contact

For privacy questions, data-rights requests, or complaints, you may contact our Grievance Officer. We will acknowledge your request within 48 hours and endeavour to resolve it within the timelines required by applicable law.

Grievance Officer: Jasvinder Singh
Entity: Hyeontech Solutions Private Limited
Email: support@myndaq.com
Website: myndaq.com
Address: TF-6, Pragati Apartment, B-2 Model Town West, Ghaziabad, Uttar Pradesh 201009, India
CIN: U62099UP2025PTC224160
GSTIN: 09AAHCH9623G1ZB

12. Changes to this Policy

We may update this Policy from time to time. We will communicate material changes via in-app notice. Your continued use of the Service after changes take effect constitutes acceptance.

MyndaqAI
© 2026 Myndaq · myndaq.com