Privacy Policy

BMR Education is built with privacy-first principles. We minimize data collection and prioritize protecting your information across our website, mobile applications, and AI learning tools like EdChat.

Our commitment includes:
• Data Minimization: We collect only the information strictly necessary for service provision.
• Local-First Storage: Whenever possible, learning progress and preferences are stored locally on your device.
• No Third-Party Tracking: We do not use third-party analytics or advertising SDKs to track your behavior for monetization.
• Optional first-party session metrics: If you accept analytics cookies, we send anonymous heartbeat counts (product surface, coarse page area, device type) to our own servers only. No account id, chat content, or raw IP is stored. You can decline via “Essential only” in cookie settings. See our GDPR policy.

Account Data: When you sign in (optional for many features), we collect your email address and display name to manage your profile and provide personalized AI features.

Usage Data: We process feature interactions, course progress, search activity, video activity, test/quiz attempts, mode usage frequency, and credit consumption to improve platform performance and security.

Technical Data: We log IP addresses solely for security and abuse prevention. Browser and device types are processed to ensure compatibility.

Data We DO NOT Collect: We do not collect your physical location, device identifiers (advertising IDs), or harvest data from other apps on your device.

For many aptitude games, quizzes, and interface settings, data is stored exclusively on your device. This includes:
• Quiz Progress: Scores and completion status.
• User Preferences: Theme settings (dark/light mode) and difficulty levels.
• Bookmarks: Topics or questions you've saved for review.

Clearing your app data or browser cache will remove this locally stored information permanently.

Your chat messages and learning queries are processed through AI models (e.g., Google, Anthropic) to generate educational responses.

• Non-Logged-in Users: Interactions are non-personalized and data is not linked to personal identifiers.
• Logged-in Users: Personalization is based on your explicit preferences and learning history to provide a tailored experience.
• Model Training: We do not use your personal information to train third-party general AI models.

Web (PhonePe): Paid EdChat plans on www.bmreducation.com are billed through PhonePe (UPI Autopay). We receive payment status, order IDs, and subscription state from PhonePe to activate your plan.

Android (Google Play): In-app subscriptions are billed by Google Play. Google shares purchase tokens and subscription state with us to grant access.

What we share with processors: Order amount, plan tier, billing cycle, and identifiers needed to reconcile payments (merchant order ID, mandate/subscription IDs). We do not store full UPI or card numbers on our servers.

Your choices: Manage web billing at Account → Subscription; manage Android billing in Google Play. See our Refund Policy and Terms for cancellation and refund timelines.

We do not sell your personal data. Data is shared only with trusted infrastructure providers (e.g., Vercel, Supabase) and AI partners as required to run the Service.

We implement robust security measures including:
• Encryption in Transit: Data is transmitted using TLS 1.2 or higher.
• Encryption at Rest: Databases are encrypted using industry standards (AES-256).
• Access Controls: Limited access for authorized personnel with full audit logging.

We process personal data in alignment with global laws, including the EU/UK GDPR and India's Digital Personal Data Protection Act 2023.

You have the following rights:
• Access & Correction: Request a copy of your data or update inaccuracies.
• Erasure: Request full account deletion from account settings or by contacting us.
• Data Portability: Download an export of your learning data in a machine-readable format from account settings.
• Object/Restrict: Opt-out of personalization or profiling at any time.

BMR Education is designed to be safe for learners of all ages. We do not knowingly collect personal information from children under 13 without parental consent. Our zero-data-collection approach for many features makes the platform inherently safe for young users.

You can download your account data, update your profile, or request verified account deletion from Account Settings. For privacy-related inquiries, contact our Data Protection Officer at:

Email: [email protected]
Response Time: Within 48-72 hours for general inquiries.