Privacy policy
Last updated: 2 November 2026 (accounts added)
Who we are
Right now this site sends nothing to any server: ratings, feedback and progress stay in your browser, and Ask a doubt and accounts are not switched on yet. The sections below describe what will apply when we switch those features on; we will update the date at the top when we do.
CA Foundation Course (cafoundationcourse.com) is run by Gyan Prem Tutorials and is currently in a free preview. In this policy, "we" means CA Foundation Course and Gyan Prem Tutorials. We will publish our postal address on this page before we start taking payments.
For any privacy question or request, write to our grievance contact at hello@cafoundationcourse.com. We reply within 7 days and resolve requests within 30 days.
Your account
You sign in with your email: we send a one-time code, so there is no password to remember or leak.
| What we keep | Why |
|---|---|
| Email address | To sign you in and to reach you about your account |
| First name (last name optional) | To greet you in the app |
| Birth month and year (not the day) | To know whether you are under 18, which decides whether we need a parent's approval and whether we may send you offers |
| Class or stage, target CA Foundation year and state | To set up your study plan and reminders, and to plan language and regional support |
| Mobile number (optional) | Only for the messages you tick: account and study updates (new chapters, changes to the app, doubt answers), and, only if you are 18 or over, offers and new features. Each choice is separate and you can switch it off any time in My progress → your account. |
| For students under 18: parent or guardian's email, their name and year of birth, and when they agreed | To ask for and record the parent's consent, as Indian law requires |
| Sign-in records: one-time codes (scrambled), when you signed in | To keep your account secure |
We don't ask for your full date of birth, address, school or anything else we don't need. Your answers in Practice and mock tests are still sent only as anonymous records, not linked to your account.
What stays on your device
Your answer history, confidence ratings, time per question, flashcard schedule, lesson progress, mock test results, your daily question count and settings are saved in your browser's local storage on your device. We cannot see this history. When you answer a question, only a short anonymous record of that one answer is sent to us (see the next section). You can download your history (My progress → Download my data) or delete them (Reset progress, or clear your browser's site data).
We do not use cookies, advertising trackers or third-party analytics.
What we receive, and why
| When | What we receive | Why |
|---|---|---|
| You rate a question (Clear, Confusing, Answer looks wrong, Too hard, Too easy) | The question, your rating, any comment you type, whether you answered it correctly, the app version, and a random device code | To find and fix wrong or unclear questions |
| You send a message on the Feedback page | Your usefulness rating, the features you ticked, any comment you type, the app version, and the random device code | To decide what to build next |
| You answer a question in Practice or a mock test | The question, the option you chose, whether it was right, how sure you said you were, the reason you picked in the follow-up check, whether your first choice was right and how many times you changed your answer, the seconds spent and the app version. No device code or other identifier is sent with these records. | To find where students commonly go wrong, and improve the questions, lessons and notes |
| You ask a doubt | Your question, the chapter and question it is about (if any), the app version, and the random device code. A teacher's answer is stored with it. | So a teacher can answer you, and so the answer is shown only on the device that asked. Teachers see the question but not the device code. We also use common doubts to improve our explanations. |
| Any of the above | A scrambled (hashed) form of your IP address that changes every day; we never store the IP address itself | To stop spam, by limiting how much one connection can send in an hour |
The random device code is made in your browser the first time you use the app. It is not linked to your name, phone, email or any account, and we do not try to identify you. Please don't type personal details such as your name or phone number into comments; if you do, we delete them when we see them.
We process this information to run and improve the service, which you ask for when you choose to send a rating or message. We do not sell it, share it for advertising, or use it to make decisions about you.
How long we keep it
- The scrambled IP address is deleted after 2 days.
- Your account is kept until you delete it. If nobody signs in to it for 3 years, we delete it. If a parent does not approve an under-18 account within 7 days, or declines, the account details are deleted.
- One-time sign-in codes expire after 10 minutes and are deleted within a day.
- Ratings, feedback messages and doubts (with their answers) are deleted after 2 years, or sooner if you ask.
- Anonymous answer records are deleted after 2 years. Because they carry no device code, they cannot be matched back to you, so they are not affected by "Delete what I've sent".
Who else handles it
The site and our services are hosted by Cloudflare, Inc., which stores and processes the data on our behalf under its data processing terms. Cloudflare may process data outside India. We plan to move account data to a database hosted in India. Sign-in and parent-consent emails are sent through Resend, Inc., which receives only the email address and the message. Message updates to your mobile, when we start sending them, will go through a messaging provider that receives only your number and the message. We do not give the data to anyone else unless the law requires us to.
Your choices and rights
- Change or delete your account: in My progress, open your account to change your message choices, sign out, or delete your account and the details we hold.
- Delete what you've sent: go to My progress and press "Delete my feedback and doubts from the server". This removes every rating, message and doubt sent from your browser.
- Ask a question, see or correct what we hold, or complain: write to hello@cafoundationcourse.com. Because we don't know who you are, include your device code (in the file from "Download my data", shown as
cid) so we can find your data. - If you're not satisfied with our answer, you can complain to the Data Protection Board of India.
Students under 18
Many CA Foundation students are under 18. If you are under 18, we email your parent or guardian a link before your account becomes active. They confirm they are your parent or guardian and an adult, and agree or decline. Until they agree, your account stays inactive. We never track children for advertising, show them targeted ads, or send them offers. A parent can ask us at any time to see or delete their child's account by writing to hello@cafoundationcourse.com.
Teachers who review content
Teachers invited to review our content use a separate review page. What we record about their reviews, and why, is set out in the reviewer agreement each teacher signs.
Security
All traffic uses HTTPS. Access to stored feedback is limited to our team with a private admin key. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
Changes
If we change this policy, we will update the date at the top. If a change affects what we collect, we will say so clearly on the site before it takes effect.