Privacy Policy

1. Introduction & Ownership

This Privacy Policy applies to the digital educational platform CreditBuddy Learn, owned and operated by CREDITBUDDY PARTNERS PRIVATE LIMITED (“Company”, “We”, “Us”, “Our”). We are committed to protecting the privacy, security, and confidentiality of personal data provided by users who access our educational modules, loan math tools, and credit score literacy resources.

2. Information We Collect

We collect only the minimum required information necessary to deliver customized financial education:

• Account Credentials: Full name, email address, profile picture URL, and authentication metadata provided during Google OAuth or email sign-up.
• Educational Activity: Module completion status, lesson progress, interactive loan math calculations, and quiz responses.
• Technical Logs: IP address, browser type, device operating system, session time, and security event logs.

3. How We Use Your Data

Your personal data is used strictly for the following purpose parameters:

• To provide access to learning dashboards tailored to your account role (Student, Moderator, Admin).
• To save your financial calculator settings and track progress across sessions.
• To maintain audit trails for user role assignments and account security.
• To ensure compliance with applicable legal guidelines and digital privacy standards in India.

4. Data Protection & Security Protocols

We implement industry-standard encryption protocols (TLS 1.3 in transit and AES-256 at rest via Google Firebase Infrastructure). We enforce strict HTTP security response headers, Content Security Policy (CSP) directives, and cross-site scripting (XSS) protections to safeguard user communication.

5. Third-Party Services & Infrastructure

We store authentication credentials and application state securely in Google Firebase Services. We do not sell, trade, rent, or lease personal user data to third-party telemarketers or unauthorized commercial entities.

6. User Rights

Under Indian digital data privacy regulations, you possess the right to:

• Request a copy of the personal data associated with your account.
• Request correction or deletion of your registered email or profile records.
• Withdraw consent for optional analytics tracking.