Privacy Policy
Student Data Commitment
Plain-Language Summary: You need an account to use lockin. We store only your email, name, branch, and academic progress so your syllabus status and flashcards synchronize across your devices. We never sell your data, run ads, or share student analytics with third parties.
1. Data Fiduciary & Identity
lockin. is operated by Lockin (“we”, “our”). Under the Digital Personal Data Protection Act, 2023 (DPDP Act, India), we act as the Data Fiduciary for personal data processed on this platform.
Official contact for data inquiries: win.lockin@gmail.com. Grievance officer contact: win.lockin@gmail.com.
2. Categories of Data Collected
| Data Category | Specific Attributes | Operational Purpose |
|---|---|---|
| Identity & Account | Email address, full name, hashed credentials | User authentication, password recovery, and profile personalization. |
| Academic Profile | University branch, year, semester, target SGPA, daily XP goal, timezone | Customizing your subject syllabus, calculating daily streaks accurately in your local timezone, and structuring study plans. |
| Learning Analytics | Quiz scores, mock exam answers, 3D lab observations, spaced repetition queues | Powers adaptive question difficulty, revision schedules, and personalized doubt resolution. |
| AI Tutor Queries | Maths & engineering question text / photos submitted to Lochi | Processed via Google Gemini API to generate instant step-by-step solutions. Question texts are not retained for model training. |
3. Technical & Sub-Processor Infrastructure
- Database & Auth (Supabase PostgreSQL): User credentials and progress tables stored with Row-Level Security (RLS) enforcement.
- Hosting & Edge Runtime (Vercel): Global CDN and serverless computing with HTTPS TLS 1.3 encryption in transit.
- AI Acceleration (Google Gemini API): Powers step-by-step explanations and math step parsing under strict enterprise API terms.
- Video Caching (YouTube Privacy-Enhanced): Embeds run in
youtube-nocookie.commode.
4. Data Retention & Student Rights
Under Indian DPDP Act & international standards, students hold absolute rights over their personal data:
- Right to Access & Portability: Download your complete study history, question attempts, and lab logs at any time from your Profile settings.
- Right to Correction: Update your name, branch, semester, or password instantly.
- Right to Erasure (Right to be Forgotten): Delete your account in one click. All profile rows, study streaks, and activity logs are permanently deleted from database tables.
- Grievance Redressal: Direct access to our designated Grievance Officer (win.lockin@gmail.com) with response timelines mandated by law.
5. Security Assurance
All communication is secured using TLS 1.3 encryption. Database access is strictly sandboxed: students can only access their own private rows. For detailed technical architecture, read our Security Whitepaper.