Privacy Policy

Last updated: 30 August 2026

This Privacy Policy explains how Chek Research and Development Pvt Ltd ("ChekLearn", "we", "us") collects, uses, retains, and shares personal data when you use the ChekLearn online learning platform. ChekLearn is operated from India and complies with the Digital Personal Data Protection Act, 2023 (DPDP Act). Our registered office is at Visakhapatnam, Andhra Pradesh, India.

What we collect

We collect the following categories of personal data:

• Account identifiers: email address, full name, optional phone number.
• Persona fields (collected at registration to personalize tutoring): job role, industry, experience level, and learning goal.
• Learning activity: quiz attempts (questions answered, correct/incorrect, hints used), lesson progress (videos watched, seconds played, completion timestamps).
• Chat history: messages you exchange with the AI tutor, with email addresses and phone numbers automatically redacted before any third-party AI processing.
• Payment metadata: Razorpay order ID, status, amount, and timestamp. We do not store card numbers or UPI credentials — those remain with Razorpay.
• Technical logs: IP address, browser type, and timestamps captured for security and abuse prevention.

Why we collect it

We process your personal data for the following purposes:

• To create and maintain your account, deliver courses you have purchased, and verify enrolment.
• To personalize AI tutor responses using your persona fields and recent learning context.
• To process payments and issue receipts.
• To respond to support requests sent to contact@chekresearch.com.
• To detect and prevent fraud, abuse, and unauthorized access.
• To comply with applicable Indian tax and accounting laws.

Lawful basis

We process your personal data under the following lawful bases recognised by the DPDP Act:

• Consent — for cookie placement, marketing communications, and optional persona data.
• Performance of a contract — for delivering courses and providing technical support.
• Compliance with a legal obligation — for tax records and lawful requests from authorities.

Retention

We retain personal data only as long as needed:

• Account data: for the lifetime of your account. If you delete your account, we erase identifying fields within 30 days (subject to legal retention obligations).
• Payment records: retained for 7 years from the date of the transaction to comply with the Income Tax Act and the Companies Act.
• Chat history and quiz attempts: retained while your account is active, deleted with the account.
• Server logs: retained for up to 90 days for security audit purposes.

Third parties

We share limited personal data with the following sub-processors, all operating from India or providing India-region endpoints where possible:

• Razorpay Software Pvt Ltd (India) — payment processing. Razorpay handles card and bank details directly; we receive only metadata.
• Zoho Corporation / ZeptoMail (India region, api.zeptomail.in) — transactional email (verification, password reset, receipts).
• VdoCipher Media Solutions Pvt Ltd (India) — encrypted video delivery for course lessons.
• Google LLC / Gemini API — AI inference for the in-app tutor. Chat content is sent without raw account identifiers; emails and phone numbers within messages are redacted before transmission.

We do not sell your personal data, and we do not share it for third-party advertising.

Your DPDP rights

Under the DPDP Act, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data (subject to legal retention obligations).
• Withdraw consent at any time (this will not affect lawful processing performed before withdrawal).
• Nominate another individual to exercise rights on your behalf in the event of incapacity or death.
• Lodge a grievance with our designated grievance officer.

To exercise any of these rights, email contact@chekresearch.com from the email address associated with your account. We will respond within 30 days. [OWNER TO FINALIZE: name + email of designated grievance officer].

Children

ChekLearn is not intended for children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact contact@chekresearch.com and we will delete it.

Security

We protect your data with industry-standard safeguards including TLS encryption in transit, password hashing using bcrypt, JWT session tokens with strict same-site cookies, CSRF protection on state-changing requests, and rate limiting on authentication endpoints. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. Material changes will be notified by email to the address on file and posted at the top of this page with a revised effective date.

Contact

For any privacy-related question, write to contact@chekresearch.com or visit our contact page.