Privacy Policy

CA Rishab Daga ("we", "our", or "us") is owned and operated by Rishab Daga. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application and related services.

By using CA Rishab Daga, you agree to the collection and use of information as described in this policy.

1. Information We Collect

• Mobile Number: Used for OTP-based authentication. This is mandatory to use the app.
• Name: Collected during registration for personalisation.
• Email Address: Optional. Collected for account communication.
• Device ID: A unique identifier generated on your device for security (device binding feature). This prevents unauthorised account sharing.
• Payment Information: Processed securely by Razorpay. We do not store your card or bank details.
• Usage Data: Video watch progress and access logs for access control and enforcement of usage limits.

2. How We Use Your Information

• To authenticate your identity via OTP
• To provide access to purchased courses and e-books
• To enforce one-device security and video watch limits
• To process payments via Razorpay
• To send transactional SMS (OTP only — no marketing SMS)
• To respond to support requests

3. Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Razorpay — Payment processing (razorpay.com/privacy)
• Bunny.net — Video content delivery (bunny.net/privacy)
• Supabase — Database and file storage (supabase.com/privacy)
• MSG91 — OTP SMS delivery (msg91.com/privacy-policy)

We do not sell, rent, or share your personal data with any third party for marketing purposes.

4. Data Storage and Security

• Your data is stored on Supabase (PostgreSQL) hosted in secure cloud infrastructure.
• All communication between the app and our servers is encrypted via HTTPS/TLS.
• Sensitive data (tokens, device IDs) is stored in encrypted storage on your device.
• We use FLAG_SECURE on the app to prevent screenshots and screen recording of protected content.

5. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law.

6. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request erasure of your personal data
• Withdraw consent at any time (this may result in inability to use the app)
• Nominate a person to exercise your rights in case of death or incapacity

To exercise any of these rights, contact us at support@carishabdaga.com.

7. Children's Privacy

CA Rishab Daga is intended for CA Final students who are typically adults (18+ years). We do not knowingly collect data from children under 18.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app. Continued use after changes constitutes acceptance of the updated policy.

9. Contact Us