Privacy Policy
Last updated: 14 August 2026
StreakPrep ("we", "us", "our") is operated by STREAKPREP (Udyam Registration No. UDYAM-UP-28-0226716), a micro enterprise registered in Uttar Pradesh, India. This policy explains what personal data we collect, why, and what rights you have over it, in line with India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
1. What we collect
From the parent/guardian who registers: WhatsApp phone number (used to log in and deliver quizzes/OTPs), name and email if you choose to provide them, and a 4-digit PIN (stored as a one-way hash — we never see or store your actual PIN).
About the student(s) you register: name, class (6–10), and chosen subjects.
Usage data: quiz answers, scores, streaks, and which pages/buttons are used, so the product can track progress and we can see what's working or broken.
Payment data: once paid subscriptions go live, payments are processed by Razorpay directly — we do not store your card, UPI, or bank details ourselves.
2. Why we collect it
- To create and secure your account (OTP + PIN login)
- To deliver daily quizzes on the website and via WhatsApp
- To track a student's streak, score history, and subject progress
- To bill for paid subscriptions once that's live
- To understand product usage and fix what's broken (we do not use third-party advertising trackers)
3. Children's data and parental consent
StreakPrep is built for students in Classes 6–10, most of whom are minors under the DPDP Act. For that reason, only a parent/guardian can create an account — the student never registers directly, and the phone number, PIN, and login always belong to the parent. By registering, the parent gives consent on the student's behalf for the data described in this policy.
We do not run targeted advertising, behavioural tracking, or third-party ad networks aimed at students. Our own product analytics are used only to understand how the app itself is used — not to profile or advertise to children.
4. Who we share data with
We share the minimum data needed with service providers who help us run StreakPrep:
- MSG91 — delivers WhatsApp/SMS OTPs (receives your phone number to send the code)
- Cloudflare — hosts our website, database, and app infrastructure
- Razorpay — processes payments once paid plans are live
We do not sell personal data to anyone, for any reason.
5. How long we keep it
We retain account and usage data for as long as the account is active. If you ask us to delete an account, we delete the associated personal data within a reasonable time, except where we're required to retain records (e.g. payment records) under Indian law.
6. Your rights
Under the DPDP Act, you can:
- Ask what personal data we hold about you or your child
- Ask us to correct inaccurate data
- Ask us to delete your account and associated data
- Withdraw consent at any time (this may mean we can no longer provide the service)
- Raise a grievance with us, and if unresolved, with the Data Protection Board of India
To exercise any of these, email us at [email protected] — we'll respond within a reasonable time.
7. Security
PINs are stored as salted one-way hashes, not plaintext. OTPs are single-use and expire quickly. We use standard security practices for a product of this size, but no system is 100% secure — please keep your WhatsApp number and PIN private.
8. Changes to this policy
We may update this policy as the product grows (for example, once payments go live). We'll update the "Last updated" date above when we do.
9. Contact us
Questions or grievances about your data: [email protected]