Privacy Policy

What we collect, and why

Your account: the email address and name your sign-in provider shares. We use it to sign you in and to send the transactional mail the service needs — receipts, security notices, and the Sunday report, which carries a one-tap off switch.

Your practice: which questions you drilled and when, the recall states the engine keeps for you, your focus sessions and their tags, your spoken or typed answers and their scorecards, and the notes and answers you write into your own Copy. This is what the product is: your personal knowledge state, kept for you and shown to no one else.

Your purchases: order and payment records from Razorpay, and the pass they grant. Card and UPI details never reach us.

Public pages carry no cookies and no personal data — page analytics there is cookieless.

Consent, recorded

Signing up accepts the Terms and covers service delivery only. Everything else is a separate, recorded, withdrawable opt-in, kept in a consent ledger with the date: nudges (the ping level you choose), product updates by email (off unless you switch it on), each Baithak you join, and each app you connect to your account. You can change any of them in settings.

Where your data lives

Your data is stored in India (Mumbai) by default. Cross-border processing is narrow and named in the register below. Raw audio from spoken answers is never stored — it is transcribed and discarded.

Your rights, and how to use them

You can ask what we hold about you, ask us to correct it, or ask us to delete your account. Write to privacy@getlaya.in from your sign-in address. Deletion is a request by email: we acknowledge within 72 hours; a 7-day grace period follows, during which any sign-in cancels the request; then your identity — email, name, sign-in identities, push tokens, device records, your written notes and spoken transcripts — is destroyed, and your remaining practice records are de-identified and kept only for aggregate analysis. Backups age out within 30 days. Any remaining pass is forfeited; the Terms say so too.

The grievance officer is reachable at privacy@getlaya.in: acknowledgment within 72 hours, resolution within 30 days.

Retention

Practice data lives for the life of the account. Payment records are kept as tax law requires, identity-minimised after deletion. Push tokens are pruned after 90 days of failure or inactivity. Spoken transcripts live for the life of the account and are deleted with it.

Who this is for

Laya is intended for adults preparing for the UPSC Civil Services Examination.

Changes

A processor change is a change to this page in the same release. Material changes are dated at the top.

Processors

Every third party that processes data on our behalf, with country and purpose: