Privacy Policy

At BIONUL, we collect only the information necessary to provide you with high-quality educational services, administer course enrollments, and ensure account security. When you interact with our platform, we collect the following categories of data:

• Personal Identification Data: Full name, registered email address, 10-digit mobile phone number, academic grade/class (e.g., Class 9th, 10th, 11th, 12th, NEET, JEE), and your auto-generated Student ID.
• Payment & Transaction Information: UPI transaction reference IDs (UTR numbers), payment screenshots uploaded for manual verification, payment dates, and enrolled course tier details. Note: Bionul never collects or stores your bank passwords, debit/credit card numbers, or UPI PINs.
• Technical & Device Data: Device model, operating system version, browser type, IP address, screen dimensions, network provider details, and session timestamps.
• Learning & Platform Usage Data: Course progress, video lecture watch time, live class attendance logs, Daily Practice Problem (DPP) submissions, online test responses, scores, and rank percentiles.

We do not collect sensitive personal data such as biometric records, religious beliefs, or government identification numbers unless required under applicable Indian statutory laws.

Your information is utilized solely to deliver, enhance, and personalize your educational journey. Specific purposes include:

• Account Management & Authentication: Creating, maintaining, and authenticating your student account, generating your Student ID, and handling password recovery.
• Course & Content Delivery: Providing access to enrolled video lectures, live stream classrooms, downloadable PDF study material, chapter notes, and mock tests.
• Academic Progress Tracking & Analytics: Evaluating quiz answers, grading test submissions, calculating ranks, and displaying progress reports on your profile dashboard.
• Communication & Reminders: Sending live class timetable alerts, batch announcements, revision reminders, payment verification updates, and urgent system notices via WhatsApp, SMS, and email.
• Payment Processing & Verification: Validating UPI transaction receipts and granting batch permissions upon successful fee verification.
• Security & Abuse Prevention: Detecting fraudulent enrollments, preventing illegal credential sharing or concurrent unauthorized logins, and safeguarding intellectual property.

We do not use student personal data or learning metrics for automated commercial profiling or behavioral advertisements.

We implement robust technical and organizational security measures to protect your personal information against unauthorized access, loss, destruction, or alteration:

• Supabase Cloud Infrastructure: Platform data, student records, and digital assets are stored in cloud databases hosted through Supabase (PostgreSQL), with enterprise-grade SOC 2 Type II certifications and daily automated encrypted backups.
• Row-Level Security (RLS): Database tables enforce PostgreSQL Row-Level Security policies ensuring students can strictly access only their personal profile data, assigned batch materials, and submitted tests.
• Encryption in Transit & at Rest: All web traffic is encrypted using modern 256-bit TLS (Transport Layer Security) encryption. Database disks and storage buckets utilize AES-256 encryption at rest.
• Role-Based Access Controls: Strict role-based permission gates ensure that only authorized faculty and administrative staff can review payment receipts and manage student rosters.

While we apply rigorous industry-standard safeguards, please keep your login credentials confidential and notify us immediately if you suspect unauthorized access to your account.

To operate our educational platform effectively, we integrate with trusted third-party service providers who process data strictly under confidentiality agreements:

• Supabase Inc.: Provides user authentication, real-time database synchronisation, and file storage for downloadable PDF notes and lecture resources.
• Payment Service Providers & UPI: Bank networks and UPI rails (Google Pay, PhonePe, Paytm, BHIM) process payments securely in compliance with Reserve Bank of India (RBI) guidelines.
• WhatsApp & SMS Messaging: Official WhatsApp Business API and certified Indian telecommunication gateways facilitate immediate batch notifications, OTPs, and direct student support.
• Cloud Video & CDN Infrastructure: Content delivery networks (CDNs) cache video lectures and educational assets to ensure low latency and high playback quality across India.

We never sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing affiliates under any circumstances.

Under Indian digital data protection standards and platform policy, you retain the following rights regarding your personal information:

• Right to Access: You may request confirmation of whether we process your data and obtain a summary of the personal details and academic history we store.
• Right to Rectification: You can update or correct inaccuracies in your name, contact phone number, or target exam grade directly in your profile settings or by reaching out to support.
• Right to Erasure (Account Deletion): You may request the deletion of your account and associated personal data, provided there are no pending legal, regulatory, or billing disputes.
• Right to Data Portability: You may request an export of your academic test results, certificate logs, and learning transcripts.
• Right to Withdraw Consent: You can opt out of promotional communications and non-essential messaging at any time while retaining access to core course delivery alerts.

To exercise any of these rights, please email us at supportbionul@gmail.com. We will process your verified request within 30 days.

Bionul uses minimal, strictly essential browser storage mechanisms to maintain session stability and remember student preferences:

• Authentication Tokens & LocalStorage: We store encrypted session tokens in browser LocalStorage to keep you securely signed in as you navigate between lectures, tests, and notes.
• Preferences & Player State: Local storage saves your video playback speed, audio volume settings, and UI preferences.
• No Third-Party Ad Tracking: We do not deploy advertising pixels (such as Facebook Pixel or Google Ads remarketing) or cross-site tracking scripts. Your learning behavior remains entirely private.

You can clear browser cookies and LocalStorage via your browser settings at any time; however, doing so will require you to log in again upon your next visit.

Because Bionul provides academic preparation for school students (Classes 9th through 12th) and competitive exam aspirants, many of our students are minors under the age of 18:

• Parental Guidance & Consent: We encourage parents and legal guardians to participate in their child's educational setup. Accounts for students under 18 must be created with parental knowledge and authorization.
• Strict Data Safeguards for Minors: We collect only academic and communication details strictly necessary for learning. We do not permit public user profiles, behavioral ad targeting, or unauthorized public chat rooms for minor students.
• Parental Inquiries: Parents may request to review, modify, or permanently delete the personal data of their minor child by contacting us with appropriate guardianship verification.

We may update this Privacy Policy periodically to reflect enhancements to our EdTech platform, changes in our operational procedures, or updates to Indian legal and regulatory requirements (including the Digital Personal Data Protection Act).

When significant changes are made, we will update the "Last Updated" date at the top of this page and post a prominent notice on the platform dashboard or send notification via email and WhatsApp. We encourage you to review this policy periodically to stay informed about how we protect student information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our support and grievance team:

All inquiries and grievance reports are typically addressed within 24 to 48 business hours.