Privacy Policy
At a glance
- We collectYour name, email, and purchase records — no payment card details ever reach our servers.
- We share withSupabase (our database/hosting) and Razorpay (our payment processor) — never sold or shared for advertising.
- Notes are trackedEvery PDF you buy is watermarked with your name and email, to trace unauthorized sharing back to an account.
- Your controlEmail us anytime to see, correct, or delete your account data.
1 Scope
This policy explains what information Core Concepts of Engineering ("we," "us") collects through the Core Concepts of Engineering mobile app (the "App"), why we collect it, and the choices you have. It applies to anyone who creates an account, browses notes, or makes a purchase in the App — as a buyer or as an admin publishing content.
By using the App, you agree to the collection and use of information as described here. If you don't agree, please don't use the App.
2 Information we collect
We collect only what's needed to run your account, fulfil a purchase, and keep the App secure.
| Category | What it includes | When it's collected |
|---|---|---|
| Account details | Full name, email address, password (stored encrypted by our authentication provider — we never see it in plain text) | When you sign up |
| Purchase records | Which notes you bought, amount paid, order status, and payment references (Razorpay order/payment IDs) | When you complete a purchase |
| Content you publish | Note titles, descriptions, cover images, and PDF files | If your account has admin/publisher access |
| Device & session data | A secure login session token stored on your device | Automatically, to keep you signed in |
We never receive or store your card, UPI, or bank details. Those are entered directly into Razorpay's own secure payment screen and never pass through our servers.
3 How we use it
- To create and secure your account, and to know whether you're a buyer or an admin.
- To process purchases and unlock the specific notes you've paid for.
- To generate the personalized watermark shown on the notes you read (see Section 5).
- To respond when you contact us for support.
- To detect and prevent fraudulent purchases or abuse of the platform.
We do not use your data for advertising, and we do not build behavioural profiles to sell to third parties.
4 Third parties we work with
We keep our vendor list short on purpose. Two services process data on our behalf:
Supabase
Our backend provider — hosts our database, handles account login, and stores uploaded files (cover images and PDFs). Supabase processes this data under our instructions and does not use it for its own purposes.
Razorpay
Our payment processor — handles the actual transaction when you buy a note. Razorpay collects and processes your payment details directly, under its own privacy policy, which we encourage you to review at razorpay.com/privacy.
We do not integrate any advertising networks or third-party analytics trackers in the App.
5 Watermarking & content protection
Notes are licensed for your personal use only. To discourage unauthorized redistribution, every page you read is watermarked, in your account's name and email, directly into the page image.
On Android, the App also blocks screenshots and screen recording outright while a note is open. On iOS, Apple does not allow apps to block screenshots — instead, the App detects when one is taken and shows you an on-screen reminder. As of this policy's effective date, that detection happens entirely on your device and is not transmitted to or logged on our servers.
6 Data retention
We keep your account data for as long as your account is active. Purchase and transaction records are kept for longer, as required for accounting, tax, and fraud-prevention purposes, even after an account is deleted. If you delete your account, we remove your profile and uploaded content, and de-identify or delete purchase history except where we're required to retain it by law.
7 Security
- All data in transit between the App and our servers is encrypted (HTTPS/TLS).
- Database access is governed by row-level security rules, so an account can only ever read the data it's actually entitled to.
- Purchase records can only be marked "paid" by our server after independently verifying the payment with Razorpay — never by a request from the app itself.
- No system is perfectly secure, but we design deliberately around these boundaries rather than relying on obscurity.
8 Your rights
You can ask us, at any time, to:
- Access a copy of the personal data we hold about you.
- Correct inaccurate account details.
- Delete your account and associated personal data, subject to the retention needs described in Section 6.
Reach us at coreconceptsengineering@gmail.com to make any of these requests — we aim to respond within a reasonable time and, in any case, within the period required by applicable law.
9 Children's privacy
The App is intended for students studying at the higher-secondary and undergraduate level and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us and we'll delete it.
10 Changes to this policy
If we make material changes to this policy, we'll update the effective date at the top of this page and, where appropriate, notify you in the App. Continued use of the App after a change means you accept the updated policy.
11 Contact us
Questions about this policy or how your data is handled? Write to us at coreconceptsengineering@gmail.com.