1. Who This Policy Applies To
This policy applies to all users of NishLab products under the nishlab.in domain. By using our services, you consent to the data practices described here.
Data practices are not identical across our apps, and this policy no longer treats them as if they were. The signed-in study apps are permanently ad-free by product decision; the open, ad-supported sites carry third-party advertising. Which one you are using determines what sections 3, 6 and 9 mean for you.
| App | Access | Advertising |
|---|---|---|
| Nish-Learn | Sign-in required | Ad-free. No advertising, no third-party tracking |
| NishLab Exam (exam.nishlab.in) | Sign-in required | Ad-free. No advertising, no third-party tracking |
| NishLab News (news.nishlab.in) | Open, no account | Ad-supported |
| NishLab (nishlab.in) | Open, no account | Ad-supported |
| NishLab Builder | Open, no account | Ad-supported |
| Any other NishLab app not listed as ad-free above | — | Treat as ad-supported |
As of the effective date above, no NishLab site is actually serving ads. The ad-supported rows describe what applies when advertising is switched on. Until then those sites set no advertising cookies either — this policy is written to be accurate both before and after that change.
2. Data We Collect
| Data | Source | Why |
|---|---|---|
| Name, email, profile photo | Google OAuth or email registration | Account creation and identification |
| Authentication tokens | Firebase Auth | Keeping you logged in securely |
| Study progress, chapter status | Your in-app activity | Personalised learning experience |
| Subscription status | System generated | Access control for paid content |
| Referral code, referral history | Referral programme | Reward eligible referrals |
| Feedback messages | In-app feedback form | Product improvement and support |
| Payment records | Razorpay (order ID, status) | Subscription verification |
| Device ID (hashed) | Browser | Prevent referral fraud |
| Terms acceptance timestamp | Onboarding | Legal compliance record |
3. Data We Do NOT Collect
- Payment card numbers or bank details — handled entirely by Razorpay
- Location data beyond what your IP address indicates
- Contacts, camera, microphone, or other device permissions
- Browsing history outside our apps — NishLab itself never collects this, on any app. On ad-supported sites, Google’s advertising cookies may use your prior visits to other websites to choose which ad to show. That data is held by Google under its own policy, not by us; section 9 explains how to switch it off
4. How We Use Your Data
- To provide, maintain, and improve NishLab services
- To manage your subscription and verify payment status
- To send app notifications (feedback replies, admin announcements)
- To detect and prevent fraud or abuse
- To comply with legal obligations under Indian law
5. Data Storage
Your data is stored in Google Firebase Firestore, hosted on Google Cloud infrastructure. Study progress is also stored locally on your device using localStorage and sessionStorage — this data never leaves your device unless you choose to back it up to Google Drive.
Google Drive backups are stored in your own Google Drive account. NishLab has no access to your Drive — the backup is purely between your device and your Google account.
6. Data Sharing
We share your data only with:
- Google Firebase — authentication and database infrastructure
- Razorpay — payment processing (only order-level data, never card details)
- Cloudflare — hosting and content delivery
On the ad-free apps in section 1 that is the complete list: nothing is shared with marketing companies, data brokers, advertisers, or third-party analytics platforms.
On the ad-supported sites, one further recipient applies once advertising is enabled — Google, as our advertising vendor. An ad request carries your IP address, browser and device information, the page being viewed, and cookie identifiers; Google uses these to select and measure ads under its own advertising policy. We never pass Google your name, email, account, payment or study data.
We do not sell your personal data. That applies to every NishLab app, ad-supported or not.
7. Your Rights (DPDP Act 2023)
Under the Digital Personal Data Protection Act 2023, you have the right to:
- Access — request a copy of data we hold about you
- Correction — request correction of inaccurate data
- Erasure — request deletion of your account and associated data
- Grievance redressal — raise a complaint about how your data is handled
To exercise any of these rights, email nish.lab.eco@gmail.com. We will respond within 30 days.
8. Data Retention
We retain your data for as long as your account is active. If you request account deletion, we will remove your data within 30 days, except where retention is required by law (e.g., payment records).
9. Cookies and Local Storage
Every NishLab app uses browser localStorage and sessionStorage to cache content and keep your progress on your own device. That storage never leaves your browser and is not an advertising technology.
Ad-free apps use nothing beyond that: no advertising cookies, no third-party tracking pixels.
Ad-supported sites, once advertising is enabled, will additionally carry Google’s advertising cookies and web beacons. Google is a third-party vendor and uses cookies to serve ads based on your prior visits to that site and to other websites; its use of advertising cookies enables it and its partners to serve ads to you based on those visits. You can:
- turn off personalised advertising at Google Ads Settings — you will still see ads, but they will not be based on your browsing;
- read exactly how Google uses data from sites that use its services at policies.google.com/technologies/ads;
- block or delete cookies in your browser settings — our sites keep working without them.
No advertising cookies are being set on any NishLab site as of the effective date above.
10. Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us immediately.
11. Changes to This Policy
We may update this policy as our services evolve. Significant changes will be communicated via the app. Continued use after changes constitutes acceptance.
The August 17, 2026 revision replaced a single domain-wide claim — that NishLab shares no data with advertisers and sets no advertising cookies — with the per-app split in section 1. The signed-in study apps remain permanently ad-free; the open sites are moving to Google advertising, and the old wording would have become untrue for them the moment that happened.