Privacy policy

• —Your account details — name, email, and phone number if you give one. Needed to have an account at all.
• —What you do here — questions attempted, answers given, tests taken, chapters read, time spent, how you rate your revision cards and which current-affairs cards you save, and your XP and streak. This is what drives the adaptive engine, your topic heatmap and your revision schedule; without it the product does not work.
• —What you write — descriptive answers and any handwritten sheets you upload, so an evaluator can mark them.
• —Payment records — what you bought, when, and how much. We never see your card details. Those go straight to Razorpay and never touch our servers.
• —Technical logs — errors, and basic request information, used to find and fix faults.

To run the platform, adapt the difficulty to how you answer, show you where you are weak, mark your written answers, take payment, and email you things you asked for. We do not sell your data. The only advertising technology on the site is the Meta Pixel, and it loads only if you accept analytics cookies — see below.

We use a small number of trusted service providers to run the platform. Each sees only what it needs to do its job, and may use it only to provide that service to us — not for its own purposes:

• —Cloud hosting and database providers — run the site and store your account and study data.
• —File and video delivery providers — serve course PDFs and videos, and store the answer sheets you upload.
• —An email delivery provider — sends receipts, password resets and the emails you choose to get.
• —An error-monitoring provider — records technical faults so we can fix them.
• —A bot-protection service — the check on the sign-up and log-in forms that keeps automated scripts out.
• —Razorpay — payments. They handle your card and bank details; we do not.
• —Google — only if you choose “Continue with Google”: Google tells us your name and email address so you do not need a password.

Some of these providers may process data outside India. Wherever that happens, this policy still applies to it.

Descriptive answers are read by the evaluator marking them, and by us for quality checks. Evaluators see your name, because feedback on written work is coaching and it is better when the person giving it knows who they are talking to. They do not see your payment details or anything about other students.

Some emails are part of the service and you cannot switch them off: password resets, payment receipts, and “your answer has been marked”. Study reminders and the daily digest are optional and you can turn them off in your profile at any time.

While your account exists, and afterwards only where we have to — payment records, for instance, have to be kept for accounting. Everything else goes when you ask us to delete your account.

• —Ask for a copy of what we hold about you.
• —Ask us to correct anything wrong.
• —Ask us to delete your account and your data.
• —Withdraw consent for optional emails whenever you like.

Write to hello@regulatoryacademy.in from your account address and we will act on it within 30 days, usually much sooner. How to delete your account.

Some cookies are not optional: they keep you signed in and remember basic preferences. Without them you could not stay logged in, so there is nothing to consent to and we do not pretend otherwise.

Beyond that we ask. On your first visit you are offered analytics cookies, and nothing loads until you answer — not disabled, not silent, simply not on the page. If you decline, no request is ever made to either company below, and the site works exactly the same.

If you accept, two things load:

• Google Analytics — which pages are read, how people arrive, roughly where they are. We use it to see which material helps and which is ignored.
• Meta (Facebook) Pixel — this one is advertising technology. It tells Meta that this browser visited, which is how advertising on their platforms can be measured and targeted. It follows you across other sites that also use it. We would rather state that plainly than describe it as “marketing cookies”.

With your consent, both are also told when you sign up, start the free trial, begin a checkout or buy a plan (with the amount paid) — so we can tell which advertising actually brings students. Never what you studied, how you scored or anything you wrote.

Declining costs you nothing and unlocks nothing. You can change your answer at any time, below.

Separately, when something on the site breaks, a technical error report is sent to our error-monitoring provider: which page, which browser, and what went wrong in the code. It contains no recording of your screen, no IP address and nothing you typed, and it sets no cookies — it exists so we find out about a broken page before you have to tell us.

We also keep a few small things in your own browser, never sent to us: where you stopped in the day’s current-affairs cards, your cookie choice, and whether you hid the “Start here” list. Clearing your browser data removes them.

The Android app opens this same website inside the app, so everything on this page applies to it unchanged: the same account, the same data, the same choices. It adds no trackers or advertising of its own, does not read your contacts, photos, location or other apps, and asks for no device permissions beyond internet access. Signing in through the app is signing in to this website.

Only two things, both to signed-in students: the weekly XP leaderboard, which shows your first name and last initial; and anything you post in a test’s discussion, which shows the name on your account. Your scores, your heatmap and your answers are never shown to anyone else.

Your data is stored with established cloud providers, behind access controls that stop one student’s account from reading another’s work. Course files and the answer sheets you upload are served through links that expire within minutes. Passwords are stored hashed, so not even we can read them.

No system is perfectly secure, and anyone who tells you otherwise is selling something. If we ever discover a breach affecting your data, we will tell you what happened and what we did about it.

This platform is built for adults preparing for graduate-level recruitment examinations. Under India’s Digital Personal Data Protection Act, anyone under 18 is a child: if you are under 18, you need a parent or guardian’s consent to use it, and they can write to us about your data at any time.

If you have a concern about how your data is handled, write to hello@regulatoryacademy.in with “Data grievance” in the subject. We acknowledge it within 2 working days and resolve it within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.

If we change how we use your data in any way that matters, we will email you rather than quietly editing this page.