Privacy Policy — Your Data. Your Control.

Welcome to GrowthOS ("we," "our," or "us"). GrowthOS is an AI-powered learning, execution, productivity, and personal growth platform designed for ambitious learners across diverse fields — including JEE, NEET, UPSC, SSC, Banking, MBBS, Nursing, Pharmacy, Engineering, Computer Science, AI & ML, Data Science, Design, Law, Commerce, Entrepreneurship, and other academic or career growth paths.

This Privacy Policy describes how GrowthOS collects, uses, stores, and protects information when you visit our website, register for an account, interact with our AI agents, or use any of our tools and services.

GrowthOS is operated by [LEGAL ENTITY NAME] ("Company"), having its registered office at [REGISTERED ADDRESS].

Current Stage Notice: GrowthOS is currently under active development. At this stage:

• GrowthOS does not currently charge users or process credit card/payment transactions.
• We do not collect or store financial or credit card data.
• We do not claim SOC 2, ISO 27001, or GDPR official certifications at this development stage, though we design with industry-standard privacy principles.

We only collect data necessary to provide and improve your learning orchestration experience. Categories of data we may collect include:

A. Account Information

• Name: To personalize your workspace.
• Email Address: Used for account creation, login, verification, and essential security notifications.
• Authentication Data: Password hashes (salted and encrypted using bcrypt) or OAuth credentials (Google, Facebook, LinkedIn authentication tokens).
• Phone Number (Optional): If you opt for phone OTP login via providers such as MSG91.

B. Learning & Profile Information

• Target goals, competitive exam choices, or skill development paths.
• Daily task lists, learning roadmap preferences, practice session scores, and progress metrics.
• User-curated focus habits, streaks, and skill self-assessments.

C. AI Interaction Information

• Questions, prompts, notes, or concept queries submitted to GrowthOS AI features (e.g., Nova, Learning Agent).
• AI-generated outputs, structured execution plans, and study recommendations saved to your profile.

D. Technical & Usage Information

• Device type, browser configuration, operating system, and IP address for session security.
• Application logs, timestamps, and error diagnostic logs to maintain platform stability.

We process your information strictly for legitimate product purposes:

1. Personalized Orchestration: Generating daily action plans, adaptive roadmaps, and target milestones tailored to your target exam or field.
2. AI Feature Execution: Processing your prompts to deliver intelligent tutoring explanations, resource recommendations, and progress analysis.
3. Account Administration: Authenticating logins, sending verification OTP emails, and restoring account access.
4. System Reliability & Security: Monitoring for rate limits, bot abuse, spam, and security vulnerabilities.
5. Platform Improvement: Analyzing aggregated usage trends to optimize AI agent accuracy and feature performance.

When you use AI features in GrowthOS:

• Relevant context (your query, target goal, or learning topic) is processed by our AI backend orchestration service.
• Prompts sent to third-party AI model providers are used solely to fulfill your requested response.
• We do not sell your prompts or private study notes to third parties.
• We encourage you to avoid submitting sensitive personal identification (such as national ID numbers, financial keys, or private confidential records) into conversational AI prompts.

GrowthOS does not sell, rent, or trade your personal information to advertisers or data brokers. We share data only under the following limited circumstances:

• Infrastructure & Service Providers: Trusted third-party vendors who assist in cloud hosting, database management, email delivery, or authentication (e.g., Supabase, PostgreSQL host, Brevo for email, MSG91 for SMS OTP, Cloudflare Turnstile for CAPTCHA).
• AI Model Partners: API endpoint providers used strictly to execute AI inference for your requests.
• Legal Requirements: If required by applicable law, court order, or governmental authority under valid legal process.
• Business Transfers: In the event of a merger, acquisition, or asset transfer involving GrowthOS, subject to equal or higher privacy protections.

We employ reasonable administrative, technical, and organizational measures designed to protect your personal information from unauthorized access, loss, misuse, alteration, or disclosure.

• Passwords are stored using industry-standard bcrypt hashing.
• All HTTP communications are encrypted in transit via SSL/TLS (HTTPS).
• Session authentication uses signed JWT tokens with defined expiration windows.

We retain your personal data for as long as your account remains active or as needed to provide you with GrowthOS services. If you delete your account or request data removal, we will initiate deletion of your personal profile data within a reasonable timeframe (typically 30 days), except where longer retention is required to fulfill legal compliance or dispute resolution obligations.

Depending on your jurisdiction, you possess specific rights regarding your personal information:

• Right to Access: You can request a copy of the personal information stored in your account.
• Right to Correction: You can edit or update your name, email, and learning profile directly in your settings page.
• Right to Deletion: You can submit a data deletion request by contacting us at [PRIVACY EMAIL].
• Consent Withdrawal: You may stop using AI features or request account termination at any time.

GrowthOS is an educational productivity tool that attracts learners of various ages, including students preparing for high school, entrance, or university examinations.

We do not knowingly collect personal data from children under the age required by local law (such as under 13 in certain regions) without proper authorization or parental involvement where applicable. If you believe a child has provided us with personal information without required oversight, please contact [PRIVACY EMAIL] so we may review and delete the account.

Compliance Note: Final age verification processes and student data safeguards are being finalized prior to formal commercial launch under the applicable Indian Digital Personal Data Protection (DPDP) Act and international guidelines.

Below is the structured list of potential service categories and providers utilized by GrowthOS:

We may update this Privacy Policy periodically to reflect product advancements or legal compliance requirements. Changes will be posted on this page with an updated "Last Updated" date.

For any questions, privacy inquiries, or data access requests, please reach out to our team: