Application: UPSC AudioBook |
Effective Date: April 4, 2025 |
Last Updated: April 4, 2025
Section 01
Overview
Welcome to UPSC AudioBook ("we", "our", or "us"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Android application. We are committed to handling your data responsibly in accordance with applicable data protection laws.
By installing or using our application, you agree to the terms described in this Privacy Policy. If you do not agree, please discontinue use of the application immediately.
Quick Summary: We collect only the data necessary to provide you with UPSC study content — including NCERT audiobooks and important UPSC reference materials. PDF reading is always free. An active subscription is required only to access audio content. Your payment details are handled entirely by Razorpay and never stored on our servers.
Section 02
Information We Collect
We collect the following categories of information when you use our application:
👤
Account Information
Name, email address, and profile picture obtained through Firebase Authentication or Google Sign-In.
📱
Device Information
Device model, OS version, unique device identifiers, and app version for analytics and support.
💳
Payment Records
Subscription status, transaction IDs, and purchase timestamps verified via our backend. No card details are stored by us.
📊
Usage Analytics
Books accessed, audio playback history, session duration, and feature interactions to improve our content.
🔔
Notification Tokens
Firebase Cloud Messaging (FCM) token for sending you study reminders and content update notifications.
🌐
Log Data
IP address, crash reports, error logs, and access timestamps collected for debugging and security purposes.
Section 03
Authentication & Account Security
We offer two methods of authentication, both integrated with Firebase Authentication and verified against our own backend server:
Login Method
Data Accessed
Stored By Us
Verification
Email & Password
Email address, hashed password
Email, UID (Firebase)
Firebase + our backend
Google Sign-In
Name, email, profile photo, Google ID token
Email, display name, photo URL, UID
Google OAuth + Firebase + our backend
Passwords are never stored in plain text — Firebase handles all password hashing and security.
Google Sign-In tokens are validated server-side against Google's OAuth2 endpoints.
Our backend issues session tokens to verify subscription status and access control independently.
You can delete your account at any time from Settings, which will erase all associated data within 30 days.
Section 04
Payments & Subscription
Audio content in the app requires an active subscription. Payments are processed exclusively through Razorpay, a PCI-DSS compliant payment gateway. We do not store, process, or have access to your credit/debit card details, UPI VPA, or net banking credentials.
Free Access: Browsing and reading PDF versions of all UPSC content — NCERT books and important reference materials — is completely free and does not require a subscription or login.
Feature
Free
Subscription Required
PDF Reading (NCERT & UPSC Books)
✅ Always Free
—
Audio Playback (All Books)
❌
✅ Active Subscription
Download for Offline Audio
❌
✅ Active Subscription
Bookmarks & Progress Sync
✅ (PDF only)
✅ (Audio + PDF)
Data we receive from Razorpay and store on our backend includes:
Razorpay Order ID and Payment ID (for verification only)
Subscription plan, start date, and expiry date
Payment status (success/failed/refunded)
Amount and currency — no card/banking details
Razorpay's privacy policy is available at razorpay.com/privacy
Section 05
Content & Library
Our app provides the following UPSC-specific content, all hosted on our servers:
NCERT Books (PDF + Audio): Standard NCERT textbooks relevant to UPSC CSE preparation (Classes 6–12 across History, Geography, Polity, Economy, Science, etc.).
Important UPSC Reference Books (PDF + Audio): Curated list of standard references like Laxmikanth (Polity), Bipin Chandra (History), Ramesh Singh (Economy), and others.
Content access logs (which books you opened and how long you listened) are stored to support progress tracking and improve recommendations.
We do not share your reading or listening history with third parties for advertising.
Section 06
How We Use Your Information
Purpose
Data Used
Legal Basis
Account creation & authentication
Email, name, UID
Contract performance
Subscription verification
Payment ID, user UID, expiry
Contract performance
Progress tracking (bookmarks, position)
Usage data, device ID
Legitimate interest
Push notifications (study reminders)
FCM token
Consent (opt-in)
Bug fixing & crash reporting
Device info, crash logs
Legitimate interest
App analytics & improvements
Aggregated usage patterns
Legitimate interest
Customer support
Email, issue description
Legitimate interest
Legal compliance & fraud prevention
Transaction data, logs
Legal obligation
We do not sell, rent, or trade your personal data to any third party.
Section 07
Third-Party Services
Our application integrates with the following third-party services. Each operates under its own privacy policy:
🔥
Firebase (Google)
Authentication, Cloud Messaging (FCM), Crashlytics, and Firestore for real-time data sync.
🔐
Google Sign-In
OAuth 2.0 based social login. Only profile name, email, and photo are accessed with your consent.
💰
Razorpay
PCI-DSS compliant payment processor for subscription billing. We never receive your card details.
☁️
Our Backend Server
Custom REST API hosted on secure cloud infrastructure. Handles subscription validation, user accounts, and content access control.
Google Privacy Policy: policies.google.com/privacy
Razorpay Privacy Policy: razorpay.com/privacy
Section 08
Data Storage & Security
We take the security of your data seriously and implement the following measures:
All data transmitted between the app and our servers is encrypted using TLS 1.2+.
User credentials are managed exclusively by Firebase Authentication — we do not store raw passwords.
Our backend APIs require valid authentication tokens for all protected endpoints.
Payment data is stored only in Razorpay's PCI-DSS compliant infrastructure.
We perform regular security reviews of our backend systems.
Access to user data within our team is restricted on a need-to-know basis.
Data Retention: Account data is retained as long as your account is active. Upon account deletion, personal data is purged within 30 days. Transaction records may be retained for up to 7 years for legal and financial compliance.
Section 09
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
👁️
Right to Access
Request a copy of the personal data we hold about you.
✏️
Right to Rectification
Correct inaccurate or incomplete personal information from within the app or by contacting us.
🗑️
Right to Erasure
Request deletion of your account and associated personal data from our systems.
🚫
Right to Object
Opt out of non-essential data processing such as analytics or push notifications.
📦
Right to Portability
Receive your personal data in a structured, machine-readable format upon request.
⏸️
Right to Restrict
Request that we limit how we process your data in certain circumstances.
To exercise any of these rights, please contact us at the email address in the Contact section. We will respond within 30 days.
Section 10
Children's Privacy
UPSC AudioBook is designed for individuals preparing for UPSC Civil Services Examinations and is intended for users aged 18 years and above. We do not knowingly collect personal information from anyone under the age of 18.
If we discover that we have inadvertently collected data from a minor, we will promptly delete that information. Parents or guardians who believe their child has provided us with personal data should contact us immediately.
Section 11
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will:
Update the "Last Updated" date at the top of this page.
Notify you through the app or via email for material changes.
Obtain fresh consent where required by law.
Continued use of the application after the revised policy becomes effective constitutes your acceptance of the updated terms.
Section 12
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:
We aim to respond to all privacy-related queries within 5–7 business days. For account deletion requests, please include your registered email address in the subject line.