Privacy Policy

Trial eligibility and interrupted requests

To enforce one AI trial per email, we retain a keyed fingerprint of the email, the original account identifier and trial start date after account deletion for as long as this trial offer operates. This record is used only to prevent repeat trials; it does not retain your name, chat history or plain-text email. AI requests also retain usage and cost records without an account link after deletion to enforce service spending limits. During an answer, partial text and confirmed usage are checkpointed for recovery; those text checkpoints are deleted with the account.

1. Who we are

GugsLurn — Learn Beyond Limits. GugsLurn, the educational service (“we”, “our”, “us”) is an online exam-preparation platform currently offering NEET preparation. This policy covers our website and the GugsLurn Android app that accesses it. For privacy questions, contact support@lurnxsolution.com or use the feedback option in your account.

AI tutoring and microphone use

Text tutoring sends your recent conversation and selected lesson notes to Anthropic to generate an answer. Completed questions, answers and diagrams are saved to your account notebook so you can return on another device. The current conversation is held in the open page; refreshing starts a new conversation but does not delete your account notebook. Recorded practice weaknesses may be included to personalise explanations. Avoid including personal or sensitive information in your questions.

If you choose to attach a photo, the image is resized in your browser and sent with your question to our server and Anthropic for analysis. The tutor notebook stores the question text and answer, not the uploaded image. Images can remain in the open conversation while you use it. Avoid uploading faces, identity documents or other personal information. Provider processing and retention are governed by the applicable service terms and settings.

Live voice, when enabled, starts only after you choose to begin and allow microphone access. Browser speech recognition may send audio to your browser provider. Recognised text is sent to Anthropic for tutoring; replies use your browser's speech synthesis or Deepgram cloud speech on all plans while credits are available. Cloud speech sends the reply text to Deepgram and consumes AI credits. This application does not save raw audio. Ending the session stops microphone capture. AI providers process requests under their own service terms and retention settings.

The optional dictation button records a short question after you allow microphone access and sends that audio to Deepgram for transcription. Capture stops when you choose Send now, cancel, or reach the 15-second recording limit. When recording is unsupported, browser speech recognition may send audio to your browser provider instead. Read aloud may use device voices or eligible cloud speech; availability and accent vary. The tutor may speak a welcome message when you open it if voice is enabled. This does not activate your microphone. You can mute speech or type instead.

2. What we collect

• Account data — name, email address, and (if you signed up with email/password) a hashed password. We never store your plain-text password.
• Tutoring content — questions, answers, generated diagrams, optional uploaded question images and recognised speech text, as described above.
• Usage data — quiz scores, chapter progress, mock test results, and flashcard activity, so we can show you your own progress.
• Active study time — approximate active minutes, active days and last-active timestamps linked to your account. This counts visible study pages while you have interacted within 90 seconds, rather than recording keystrokes, screen contents or browsing outside GugsLurn. Administrators can view these aggregates alongside recorded practice accuracy and AI credit usage to understand engagement and support the service. Time tracking begins when this feature is deployed; daily totals are retained for up to 35 days and aggregate totals while the account exists.
• Payment data — order amount and Razorpay payment ID for the current website checkout. We do not store card numbers or UPI credentials; that checkout is processed by Razorpay.
• Feedback — optional ratings and comments you submit through the in-app survey.
• Support and account operations — administrators may record internal support notes and account changes to help resolve issues. We record email acceptance/delivery status, failures and retry attempts, not email opens, for account welcome messages. Administrator access and exports are restricted to authorised administrators; records are retained while needed to operate and support the service.
• Technical data — IP address, browser information, request diagnostics and error logs used to operate, secure and troubleshoot the service.

3. How we use your data

• To create and manage your account.
• To deliver and personalise the learning experience.
• To process payments and send receipts.
• To send transactional emails (verification, password reset).
• To detect and prevent fraud or abuse.
• To improve the platform based on aggregated, anonymised analytics.

We do not sell your personal data to third parties, and optional advertising measurement is enabled only with your separate consent.

4. Third-party services

• Anthropic — receives recent tutoring messages, selected lesson context and optional question images to generate answers. See Anthropic's Privacy Center.
• Deepgram — receives tutor reply text for cloud speech and microphone recordings for transcription when those features are used. See Deepgram's Privacy Policy.
• Your browser's speech provider — may process microphone audio for speech recognition, depending on your browser and device.
• Razorpay — payment processing. Subject to Razorpay’s Privacy Policy.
• Google OAuth — optional sign-in. Subject to Google’s Privacy Policy.
• Resend — transactional email delivery.
• Neon — hosted PostgreSQL database. Hosting location is determined by our service configuration, not by your account sign-up choices.
• Sentry — error monitoring when configured. Diagnostic events may include technical request information.

Our website and API hosting provider, Vercel, processes requests and technical logs. Service providers may process data in countries outside your country of residence. Their retention practices depend on their terms and our configuration; deleting your GugsLurn account does not guarantee immediate deletion of every provider log.

5. Cookies & sessions

We use httpOnly session cookies to keep you signed in, with an inactivity timeout and checks against your current account access. Signing out removes the session cookie. Short-lived security cookies are also used during sign-in. Your browser may store preferences such as tutor voice and visual-panel width.

If you accept advertising measurement, we load Meta Pixel to measure page visits and successful new account registrations for Facebook and Instagram advertising. Meta receives event names, page URLs and referrer information, cookie or advertising identifiers, IP address and browser/device information. We do not send names, email addresses, tutoring content, scores or other account details as event parameters, and automatic matching and automatic event configuration are not enabled by our code. Pages with unapproved query parameters or URL fragments are excluded to avoid sending verification emails or tokens. Meta processes measurement data under its Privacy Policy.

Advertising consent is separate from diagnostics and is off until accepted. You can accept, decline or withdraw advertising measurement using the controls at the top of this privacy page or on signup. Withdrawal stops subsequent events; it does not erase data already received by Meta. Your choice is remembered in this browser.

Optional browser diagnostics are sent to Sentry only if you accept them during signup. Your choice is remembered in this browser. Cookie choices are shown only on the signup page when no saved choice exists. Session recording is disabled. Server operational and security logs remain necessary to operate the service.

6. Data retention

Your account data is retained for as long as your account is active. Deleting your account in settings removes your account and associated learning records from the active database. If you request deletion by email, we aim to complete the request within 30 days after verifying ownership. Limited records may remain for legal or financial obligations, abuse prevention and the trial and spending controls described above. Trial fingerprints and original account identifiers are pseudonymous records, not a claim of complete anonymisation. Infrastructure backups and provider logs follow the applicable service retention settings.

7. Your rights

You may request access to, correction of, or deletion of your personal data through your profile and account settings, or by contacting support@lurnxsolution.com.

To request deletion without the app, email that address with the subject “GugsLurn account deletion” from your registered email. We may verify account ownership before acting. Do not send your password. The retention exceptions in section 6 also apply to email deletion requests.

8. Children

The current GugsLurn offering is intended for students aged 16 and above. Expansion to younger school students is planned but is not covered as an available child-directed service by this policy. If you believe a student under 16 has provided personal data, contact support@lurnxsolution.com so we can review and address it. Before launching services for younger students, we will review the required age, parental-consent and data protections and update this policy.

9. Security

We use industry-standard measures including bcrypt password hashing, HTTPS, signed JWT sessions, and rate limiting to protect your data. No system is perfectly secure; please use a strong, unique password.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will reflect any changes. Where required, we will provide notice or obtain consent before material changes to how we process personal data.