Privacy Policy

This Privacy Policy explains how Oncourselearning Technologies Pvt. Ltd. ("Oncourse," "we," "our," or "us") collects, uses, shares, and protects information about you when you use our website at https://getoncourse.ai/, our mobile applications, and related products and services (collectively, the "Services").

By using the Services, you agree to the practices described in this Privacy Policy. Your use of the Services is also subject to our Terms of Service. If you do not agree with this Policy, please do not use the Services.

If you are located in India, please see Section 12 for your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act). If you are located in the European Economic Area, United Kingdom, or Switzerland, please see Section 13 for your rights under the GDPR.

1. Definitions

Capitalized terms not defined here have the meanings given in our Terms of Service.

Personal Data means any information relating to an identified or identifiable individual.
Processing means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
Service Provider means any third party we engage to process Personal Data on our behalf.
AI Output means content generated by our AI Features in response to your prompts.
User Prompt means any text, voice, or other input you submit to an AI Feature.

2. Information We Collect

2.1 Information You Provide Directly

When you create an Account or use the Services, we may collect:

Identifiers: first and last name, email address, phone number, profile photo
Account information: password (stored in hashed form), examination track (USMLE, NEET PG, etc.), year of study, institution
Communications: messages you send to our support team, feedback, survey responses
Billing information: name, billing address, and partial payment-method information. We do not store full card numbers; payments are processed by third-party payment gateways.

2.2 Information from Third-Party Sign-In

If you sign in with Google or Apple, we receive information from those services as you authorize, typically including your name, email address, and profile photo. We do not receive your social-media password.

2.3 Usage Data

We automatically collect information when you use the Services, including:

Device information: IP address, device identifier, operating system, browser type and version, device model, mobile network information
Activity data: pages or screens viewed, features used, time spent, click-stream data, referring URL, app crashes, performance data
Learning data: quiz attempts, answers, time per question, flashcard reviews, lesson progress, Clinical Rounds gameplay, study points, badges, streaks

2.4 AI Conversation Data

When you interact with Rezzy or other AI Features, we collect User Prompts (text and voice), AI Output, voice recordings (where you use voice input or VIVA features), and conversation metadata (timestamps, session duration, message counts, model versions used).

Important: if you include personal information, identifiable patient details, or confidential third-party information in your User Prompts, we will collect and may retain that information. Please avoid sharing sensitive information in User Prompts.

2.5 Camera, Photos, and Files

With your permission, we may access your device camera and photo library so you can upload a profile picture or attach images for AI analysis. We use this only to provide the feature you requested.

2.6 Cookies and Tracking Technologies

We use cookies, SDKs, pixels, and similar technologies to authenticate you, remember preferences, measure performance, and improve the Services. You can control cookies through your browser settings; some features may not work without them.

3. Sources of Information

We collect information from you directly, your device automatically, third-party sign-in providers (Google, Apple), payment processors and app stores, and analytics and attribution providers (e.g., Mixpanel, AppsFlyer).

4. Cookies and Similar Technologies

Strictly necessary: required to authenticate you, secure your session, and deliver core features.
Functionality: remember your preferences (language, theme, examination track).
Analytics and performance: measure usage and improve the Services.
Marketing and attribution: measure the effectiveness of campaigns and personalize promotional content.

5. How We Use Your Information

Provide and operate the Services, including creating and managing your Account
Deliver AI Features, including generating responses to your prompts
Personalize your learning experience (adaptive quizzes, recommended lessons, streaks)
Process payments, manage Subscriptions, and prevent fraud
Communicate with you, including service announcements, security alerts, and support responses
Improve the Services, including debugging, performance monitoring, and product research
Train, evaluate, and improve our AI models (see Section 6)
Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms
Comply with legal obligations and enforce our agreements

6. AI Training and Development

We may use User Prompts, AI Output, voice recordings, and related conversation data to train and improve our AI models and develop new AI Features.

Opt-out: You can opt out of having your User Prompts and AI Output used to train our AI models by emailing connect@getoncourse.ai or by using the in-app setting where available. Opt-out applies prospectively only.

We do not sell your Personal Data. Material you upload as source input for AI Features (photographs of textbook pages, scanned notes, etc.) is NOT used to train our AI models, regardless of your opt-out preference.

7.1 Service Providers

We share information with Service Providers who process data on our behalf, including cloud infrastructure (Supabase, AWS), AI model providers, analytics (Mixpanel, PostHog), attribution (AppsFlyer), payment processing (Razorpay, Apple, Google), and subscription management (Superwall, RevenueCat).

7.2 Affiliates

We may share information with our parent, subsidiaries, and other affiliates bound by terms consistent with this Policy.

7.3 Legal and Safety

We may disclose information when necessary to comply with applicable law, protect rights or safety, detect fraud, or enforce our Terms.

7.4 Business Transfers

Your information may be transferred in connection with a merger, acquisition, or sale of assets. We will notify you of any material change.

7.5 What We Do Not Do

We do not sell your Personal Data. We do not share your Personal Data with third parties for their independent marketing purposes without your consent.

8. Data Retention

Account data: up to 24 months after deletion or last activity
Subscription and payment records: up to 8 years after the transaction
Rezzy conversation data and User Prompts: up to 24 months in identifiable form
Uploaded source material: deleted within 30 days of upload
Voice recordings: up to 90 days
Usage and analytics data: up to 24 months, then aggregated or anonymized

9. International Data Transfers

Oncourse is based in India. To deliver the Services, we may transfer and process Personal Data in countries including the United States, European Union, and United Kingdom. Where required, we put in place appropriate safeguards for cross-border transfers.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards including encryption in transit, access controls, audit logging, and least-privilege engineering practices. You are responsible for keeping your Account credentials confidential. Notify us immediately at connect@getoncourse.ai if you suspect unauthorized access.

11. Data Breach Notification

In the event of a Personal Data breach likely to result in risk to your rights, we will notify you and the appropriate supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach.

12. Your Rights in India (DPDP Act, 2023)

Right to access: obtain a summary of Personal Data we process about you.
Right to correction and erasure: request correction, completion, or erasure of your Personal Data.
Right to grievance redressal: raise a complaint with our Grievance Officer (Section 17).
Right to nominate: nominate an individual to exercise your rights in the event of death or incapacity.
Right to withdraw consent: where processing is based on consent, withdraw at any time.

To exercise these rights, contact connect@getoncourse.ai.

13.1 Legal Bases

We process Personal Data only when we have a valid legal basis: consent, contractual necessity, legitimate interests, legal obligation, or vital interests.

13.2 Your Rights

Right of access to your Personal Data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten") in certain circumstances
Right to restrict processing in certain circumstances
Right to object to processing, including for direct marketing
Right to data portability
Right to withdraw consent at any time
Right to lodge a complaint with your local supervisory authority

Contact connect@getoncourse.ai. We will respond within one month.

14. Children's Privacy

The Services are intended for users aged 18 and above, and for users aged 13–17 only with parental consent. We do not knowingly collect Personal Data from children under 13. Under the DPDP Act, 2023, processing Personal Data of any Indian resident under 18 requires verifiable parental consent.

15. Third-Party Links and Services

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in-app notification. Your continued use of the Services after an update constitutes acceptance.

17. Grievance Officer / Data Protection Contact

Oncourselearning Technologies Pvt. Ltd.
Q98, Chaithanya Smaran, Kadugodi-Hoskote Road, Kannamangala, Bangalore, Karnataka 560067, India
Email: connect@getoncourse.ai

18. Contact Us

Oncourselearning Technologies Pvt. Ltd.
Q98, Chaithanya Smaran, Hosakote Road, Kannamangala, Kadugodi, Bangalore Rural, Karnataka 560067, India
General inquiries: connect@getoncourse.ai
Copyright complaints: copyright@getoncourse.ai
WhatsApp: +91 9740773310