Privacy Policy
Nursing Vidyarthi · nursingvidyarthi.com
1. Who we are
Meenakshi Sharma ("Nursing Vidyarthi", "we") operates nursingvidyarthi.com and study.nursingvidyarthi.com. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described here. Contact for privacy matters: Chander Sharma, grievance@nursingvidyarthi.com, 1, Govindpura, Gokul Nagar, Kalwar Road, Jhotwara, Jaipur, Rajasthan 302012.
2. The short version
- We collect what we need to run your account and personalise your preparation: mainly your mobile number, your profile details and how you answer questions.
- We use your answers and timing to choose your practice — that is the product.
- We do not sell your personal data.
- We send promotional messages only if you agree, and you can withdraw that agreement any time.
- Your data is stored in India. A few service providers may process limited data outside India (section 7).
- You can access, correct and delete your data, and complain to us or to the Data Protection Board of India.
3. What we collect and why
| Data | Examples | Why we use it | Basis |
|---|---|---|---|
| Account | Mobile number, name, email (optional), target exam, exam year | Create and secure your account; sign-in by OTP; contact you about your account | Your consent when you sign up; providing the Service you asked for |
| Profile (optional) | Date of birth, gender | Confirm you're 18+; understand our students in aggregate (we never show other students this) | Consent |
| Learning activity | Answers, correct/incorrect, time per question, skips, flags, tests taken, scores | Score your tests; build your skill profile; choose questions and recommendations for you; improve question quality | Consent; providing the Service |
| Device and security | Device identifier stored in a cookie, browser type, IP address, approximate city/region from your IP, sign-in times | Keep your account secure; detect misuse; manage signed-in devices; rate-limit OTPs | Consent; legitimate uses permitted by law, including preventing fraud |
| Payments | Plan, amount, date, transaction reference and status from our payment partner, invoice details | Activate your plan; issue invoices; handle refunds; meet tax law | Providing the Service; legal obligation |
| Community (if you use it) | Posts, answers, images, votes, reports, moderation decisions | Run a moderated community; keep it safe | Consent; legal obligation |
| Communications | Messages to support, contact-form enquiries | Answer you; improve support | Consent |
| Marketing preferences | Whether you agreed to promotional messages, and when | Send promotions only if you agreed | Consent (separate, optional) |
| Website analytics | Pages viewed, buttons clicked, the link that brought you | Understand and improve the website | Consent via cookie banner |
We do not collect card numbers, UPI PINs or banking passwords — those go directly to our payment partner.
4. How we use your data — and how we don't
4.1 We use personal data only for the purposes above, and for purposes reasonably connected to them that you would expect.
4.2 Automated personalisation. Our software estimates your strength in each topic and difficulty from your activity and uses that to select questions and recommendations. It does not make decisions with legal or similarly significant effects on you.
4.3 Staff access. Our staff see personal data only as their role needs. Sensitive details are masked by default, and access is logged.
4.4 Aggregated insights. We may use de-identified, aggregated statistics (for example, "average accuracy in Pharmacology this month") to improve the Service or describe our student community. These cannot identify you.
4.5 We do not sell personal data or share it with others for their own marketing.
5. Promotional messages
If you tick the optional box at sign-up, we may send you study tips, exam updates and offers by SMS, WhatsApp, email or calls. We follow TRAI's commercial-communication rules and DND preferences. You can withdraw this consent at any time — use the unsubscribe link or STOP option where offered, change it in your account, or write to grievance@nursingvidyarthi.com. Withdrawing does not affect messages needed to run your account (such as OTPs and payment confirmations).
6. Who we share data with
We share personal data only with:
(a) Service providers who process it for us under contract and our instructions —
| Provider (category) | What they do | Data involved | Location |
|---|---|---|---|
| Google Cloud | Hosting, database, storage, logs | All Service data | India (Mumbai region) |
| Sending OTPs | Mobile number, OTP | India | |
| Cashfree Payments India Private Limited | Payments, refunds | Payment and contact details you enter at checkout | India |
| PostHog (only with consent on the website; in-app product analytics) | Usage analytics | Pseudonymous usage events | |
| Sentry | Error monitoring | Technical error data; we configure it to avoid personal data | |
| Redis provider (Upstash) | Short-lived security counters | Rate-limit counters | |
| Anthropic / Google Cloud Vision (only if switched on) | Help prioritise community moderation by labelling posts/images | Community post text and images | outside India |
| (if used) | Sending email | Email address, message |
(b) Authorities, where required by law or a lawful order, or to protect rights, safety or the integrity of examinations.
(c) A successor, if our business is merged, acquired or restructured, subject to this Policy.
7. Where your data is stored
Your data is stored on servers in India. Some service providers listed above may process limited data outside India. We transfer data abroad only as the DPDP Act permits, and never to a country the Government of India has restricted.
8. How long we keep it
| Data | Kept for |
|---|---|
| Account, profile, learning activity | While your account is active. If you don't sign in for 3 years, we will notify you and, if you don't respond within 48 hours of that notice, delete or anonymise your account. |
| Payment and invoice records | As long as tax and accounting law requires (currently up to 8 years) |
| Security logs | Up to 90 days, longer only when investigating an incident |
| OTP records | Minutes for the code itself (stored only in hashed form); request metadata up to 90 days |
| Community content | Until you or we remove it; content involved in a legal complaint may be preserved as the law requires |
| Contact-form enquiries | 24 months after resolution, then anonymised |
| Marketing-consent records | For as long as needed to prove consent, and for a period after withdrawal |
9. Your rights
Under the DPDP Act you have the right to:
(a) access a summary of your personal data and how we process it, and the identities of those we have shared it with;
(b) correct, complete or update inaccurate or incomplete data — many details can be edited in your account;
(c) erase your personal data that is no longer needed — we will erase it unless we must keep it for the purpose you gave it for or to comply with law (for example, invoices). Where records must be kept, we anonymise what we can;
(d) withdraw consent at any time, as easily as you gave it — this stops future processing based on that consent but does not affect processing already done; it may mean we can no longer provide the Service;
(e) grievance redressal — to have your complaint handled by us (section 12);
(f) nominate a person to exercise these rights in the event of your death or incapacity.
How to make a request: use the contact form (topic: Privacy / data request) or email grievance@nursingvidyarthi.com from the email or phone on your account. We will verify your identity (usually by OTP to your registered number), and respond within 30 days. There is no fee.
10. Security
We protect data with encryption in transit (HTTPS), access controls and logging, hashed one-time passwords and session tokens, two-factor sign-in for staff, rate limiting and regular backups. No system is perfectly secure; if a personal-data breach occurs, we will inform affected users and the Data Protection Board of India as the law requires.
11. Age
The Service is only for people aged 18 and over. We do not knowingly process the personal data of children. If you believe a child has an account, contact grievance@nursingvidyarthi.com and we will delete it.
12. Complaints
Please contact us first: Chander Sharma, grievance@nursingvidyarthi.com. See Grievance Redressal for timelines. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
13. Cookies
See our Cookie Policy.
14. Changes
We will post updates here with a new date. For material changes we will notify you in the app or by SMS/email, and seek fresh consent where the law requires.