Privacy Policy

Effective: May 2026

Your data is yours. We only use it to help you learn.

1What We Collect

Account data

•Name, email address, role (student / teacher / admin)
•School or institution affiliation
•Profile and subscription details

Exam & learning data

•Answers submitted, time spent per question, score
•Tab switch events, focus loss count (integrity logs)
•Automatically-scored subjective answer text

Content uploaded by teachers

•Question text, images, audio files
•Model answers used for auto-grading

Usage data

•Browser type, device type (for compatibility)
•Pages visited within the platform (no third-party ad tracking)

Platform activity data

•In-app notifications (event type, timestamp, read/unread status)
•Question reports submitted by students (question ID, reason, optional notes)
•Teacher question submissions (question text, subject, chapter, review status)

2How We Use Your Data

✓To run exams, grade answers, and display results
✓To generate performance analytics visible to the student and their teacher
✓To detect and flag academic integrity violations
✓To send account-related emails (verification, password reset, policy updates)
✓To deliver in-app notifications (badge awards, new test assignments, platform events)
✓To send a weekly learning digest to parents who have explicitly consented (via their child's teacher)
✗We do not sell your data to third parties
✗We do not use your data for advertising

3Data Security

Encrypted in transit

All data is transmitted over HTTPS / TLS

Row-level security

Database access is isolated per user session

Secure cloud infrastructure

Hosted on Supabase — ISO-compliant cloud

Access control

Only authorised staff can access production data

No system is 100% secure. If you spot a vulnerability, please contact us immediately.

4Third-Party Services

SupabaseDatabase, authentication, and file storage. Data is stored on their secure cloud.

RazorpayPayment processing for subscriptions. Card and UPI details are handled entirely by Razorpay — we never store payment credentials.

ResendTransactional email delivery (account confirmations, parent consent links, weekly digest). Emails are sent via their API; no student data is retained by them beyond delivery logs.

Google FontsFonts loaded via Google's CDN. No personal data is shared.

5Data Retention

•Exam results and answers are retained for the duration of your account.
•Integrity logs (tab switches, focus events) are retained for 12 months after each exam.
•Uploaded question images and audio are retained until the question or account is deleted.
•Accounts suspended for policy violations may have data retained for up to 3 years for legal purposes.

6Your Rights

Access

Request a copy of the data we hold about you

Correct

Ask us to fix inaccurate information

Delete

Request deletion of your account and personal data

To exercise these rights, email support@thecrisp.in. We will respond within 30 days.

7Account & Data Deletion

To delete your account, email support@thecrisp.in with subject line: Delete my Crisp account.

Account deactivatedWithin 24 hours of request

Personal data deletedWithin 30 days

Uploaded images & audioDeleted within 7 days

Exam results (anonymised)May be retained for school records

Note: If you are a student, your school may request that exam records be retained for institutional purposes even after account deletion.

8Cookies & Local Storage

Crisp uses browser local storage for session preferences (e.g. dismissed hints, UI state). We do not use advertising cookies or cross-site trackers. Supabase authentication uses secure, HTTP-only cookies for session management.

Protecting your privacy is part of our commitment to you.

Contact: support@thecrisp.in