SKM LEGEND SERVICES — Privacy Policy

When you use the SKM LEGEND SERVICES app and website, we collect the following categories of personal and sensitive data:

• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.
• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.
• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.
• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.

Your data is used strictly to operate and improve the service, specifically:

• To deliver the courses, live classes, notes and mock tests you have access to.
• To meet our legal, tax and accounting obligations.
• To respond to your support requests and doubts.
• To create, secure and maintain your account.
• To process payments and issue invoices and receipts.
• To detect and prevent fraud, abuse and policy violations.
• To send you course-related notifications — only after you opt in.

SKM LEGEND SERVICES does not sell or rent your information. We share it only with the following parties, and only as far as needed:

• Razorpay — our payment processor, to take payments and issue refunds.
• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.
• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.
• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.

These providers act on our instructions and may not use your data for their own ends.

Security is built in: passwords are stored only as bcrypt hashes, every connection is protected with TLS 1.2 or above, and backups are kept encrypted. We review our security posture regularly and remediate critical vulnerabilities within 72 hours.

We retain personal data only as long as needed to provide the service or as the law requires. You are always free to delete your account via the in-app “Delete my account” option or by contacting [email protected]; we will remove your data within 30 days, save for records we are obliged to keep for tax or compliance (typically up to 7 years).

This app is meant for people aged 13 and above. If you are a minor (under 18), a parent or legal guardian must approve your use of the app and any payments. We never knowingly collect personal data from children under 13.

With respect to the data SKM LEGEND SERVICES holds, you can:

• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.
• Access a copy of the personal data we hold about you.
• Delete your data, subject to legal retention requirements.
• Correct information that is inaccurate or out of date.
• Withdraw consent for any non-essential processing at any time.

To exercise any of these rights, email [email protected] and we will respond within the timelines required by law.

If we make a material change to how we handle your data, we will notify you in the app and update the “Last updated” date at the top of this page. Continuing to use SKM LEGEND SERVICES after a change takes effect means you accept the revised policy.

For any privacy question, concern or grievance, reach our team at [email protected]. Grievances are acknowledged quickly and resolved within the periods required under India’s DPDP Act.