Privacy Policy

Information we handle

When you create an account, we collect your name, email address, course (CA or CS) and study level, along with a protected password hash. For new registrations, we also record your 18+ self-declaration, the time it was made and the declaration-policy version; we do not ask for a date of birth or identity document for this declaration. To provide the service, we store information you add or generate, such as your study plan, syllabus progress, study logs, flashcards, bookmarks, practice and mock-exam attempts, readiness information, and AI conversations you choose to save. We also keep account sessions and subscription status and transaction references needed to provide membership. For direct subscription purchases, billing details include your invoice name, address, Indian state or union territory and optional customer GSTIN. These are used to determine the GST split and create tax invoices. Issued invoices preserve the seller and recipient details recorded at checkout; they are retained where required for accounting and legal obligations, including after account deletion.

If you use Snap Solve, the image and question details you submit are processed to produce an answer. The app does not retain the uploaded image after processing. Do not include another person’s personal or confidential information in an upload.

How we use information

We use information to create and secure accounts, sync study records, provide study plans and learning features, calculate progress and readiness, operate leaderboards when you opt in, manage subscriptions, send account and service emails, answer support requests, prevent abuse and maintain the service.

Owner reporting is designed to show aggregate product and study activity. It is not a student-facing directory of private notes or AI conversation text.

Optional preparation-check measurement

The free preparation check processes answers in your page without sending or storing them on our server unless you request the separate optional plan email. If you explicitly opt in, we count the event type, UTC day and a standard campaign-source label. These aggregate counters contain no name, email, account ID, answers or tracking cookies and are removed after 90 days on subsequent event writes. Counts can include repeat visits and are not unique people. Ordinary security and hosting request handling still applies. Opting in does not subscribe you to marketing email.

Optional preparation-check emails

You can see and save your free check result without giving an email. If you request it, we send a one-time plan email through Resend using your email address and the six answers submitted for that request. Raw answers are used to generate the email, not saved to our mailing list; your requested email contains the resulting steps. Resend processes the email and delivery records under its own retention practices.

Launch and product updates have a separate, unchecked opt-in. We require email confirmation before adding you to the confirmed list. Pending requests expire after seven days and are removed on subsequent email-service activity. Confirmed records contain your address, request and confirmation dates and consent version until you unsubscribe. The stop-updates link removes that address and consent record without affecting your app account. You can also contact help@charterprep.ai for access, correction or deletion of an email preference. We do not send campaigns automatically when you opt in.

For abuse prevention we keep a keyed hash of the recipient for cooldowns, plus aggregate daily sending counts, without raw answers. Expired cooldown records are removed after a further 30 days, and aggregate counters after 30 days, on subsequent requests. Email requests are rate-limited. Choosing anonymous check analytics does not opt you in to either email option.

Support and grievance records

When you submit a complaint in Account & data, we store its ticket number, your account email, subject, complaint, receipt time, acknowledgement records and closure status. The operator can also enter complaints received by email, using the original receipt time. These records are accessible to the operator and are used to handle your request. We send acknowledgement emails through Resend; provider acceptance does not prove inbox delivery.

Open requests are retained while they are being handled. Closed tickets are removed after 180 days on subsequent ticket-worker activity. Account deletion removes tickets linked to that account, and its export includes those retained tickets. For separately logged email complaints or copies held in the support mailbox, contact help@charterprep.ai for access or erasure; legal retention obligations may apply. Do not include passwords, OTPs, payment credentials or other people’s private data in complaints.

AI features

When you use CharterBot, AI tutoring, answer evaluation or Snap Solve, the relevant prompt, answer, selected course or subject context, and (for Snap Solve) the image are sent to OpenAI for processing through its API. CharterBot requests include your question, recent conversation and a summary of relevant course and study progress. We request that Responses API results are not stored for later retrieval (store: false); this does not mean zero provider retention or override OpenAI’s own data-handling terms. The app does not include your account email, password or payment credentials in this context. Your question and image are not needed for unrelated features. Do not submit information you do not want processed by an AI service. AI responses are study guidance and should be checked against current official ICAI or ICSI material.

Service providers and sharing

We use service providers to run the app: Render for hosting, OpenAI for AI processing, Resend for service email delivery, and Razorpay for payment processing when payments are enabled. These providers receive information needed to perform their services and handle it under their own terms and privacy practices. CharterPrep.AI does not store card number or CVV details.

We do not sell student personal information or use it for third-party advertising. If you knowingly join a leaderboard, the app displays your generated alias and weekly score to participants on the same course and level. Your name and email are not displayed on that board. You can leave the leaderboard in the app.

Storage, security and retention

Account and study records are stored on the service host. Some study records and your session are also kept in browser storage on your device to support your workspace. Use sign out on shared devices. We use password hashing, server-side account checks, encrypted connections (HTTPS) and access controls. No internet service can guarantee absolute security.

We keep account information while your account is active and as needed to operate the service. When you delete your account, the account and associated study records, conversations and sessions are deleted from the app database. A pseudonymous trial-use marker may be retained to prevent repeated introductory trials. For Google Play purchases, encrypted purchase tokens are removed on account deletion; an anonymous token hash is retained to prevent the same purchase being reassigned to another account. Deleting your app account does not cancel a Google Play subscription: cancel renewal in Play Store before deleting. Payment providers may retain transaction information under their own retention obligations, and limited records may be kept where required for accounting, security or legal purposes.

Your choices and account deletion

You can review and update information in the app and leave the leaderboard. Contact help@charterprep.ai to request a copy of your personal records. To delete your account, use Account & data in the app or follow the instructions at charterprep.ai/account-deletion. If you cannot sign in, email us from the address registered to your account and ask for deletion; we may verify account ownership before processing the request.

Your privacy rights and consent choices

Contact help@charterprep.ai to request access to information about your personal data and its processing, correction, completion, updating or erasure. You may also request nomination of another individual to exercise your applicable data rights in the event of death or incapacity. We will explain the verification and information needed; do not send identity documents, nominee details or passwords unless requested through an agreed secure process.

You can withdraw optional launch-email consent using the unsubscribe link. Optional anonymous measurement can be turned off at its checkbox. To withdraw consent for account-related processing, contact support or use account deletion. Withdrawal does not undo lawful prior processing. We will explain any essential service that can no longer be supplied, and any records we must retain under applicable law. Account deletion is available in Account & data; contact help@charterprep.ai for a copy of your records. Mailing-list preferences are separate.

We acknowledge privacy requests under our published 24-hour response commitment. Completing a request can take longer where identity verification, legal retention or payment-provider records are involved; we will explain the next steps and applicable timeframe. A response commitment is not a guarantee of immediate deletion from independent providers.

Privacy grievances and escalation

First raise a privacy concern at help@charterprep.ai, addressed to the operator shown below. If the response is unsatisfactory, reply with “Privacy escalation” and the earlier reference for further review. Where the relevant provisions apply, after using the grievance process you may approach the Data Protection Board of India through its officially prescribed route. See the official DPDP rules and commencement information. We do not claim that every provision or complaint channel is already operational; other statutory remedies remain available.

Processing locations

Our configured application hosting is in Render's Singapore region. OpenAI, Render and Resend may process or store the data needed for their services outside India, depending on their infrastructure, contractual terms and our configuration. This enables hosting, AI responses and email delivery. Payment providers, including Razorpay when enabled, process payment and compliance records under their own applicable localisation requirements and provider terms; not all providers use the same locations. We do not promise India-only processing or a fixed country for every subprocessor. Do not upload sensitive or third-party personal data into AI tools.

Age and intended audience

You must be at least 18 years old to create an account or use CharterPrep.AI. The service is intended only for adults aged 18 and over. We do not offer accounts for users under 18, including with parental permission. At sign-up, you must affirm that you are at least 18 years old. This is a self-declaration, not independent identity or age verification. Any stricter requirement imposed by applicable law or an app store still applies. These requirements also appear in our Terms of Service.

CharterPrep.AI is intended for students preparing for CA and CS examinations after secondary school. If you believe a user under 18 has provided personal information or is using the service, contact help@charterprep.ai so we can investigate and take appropriate action, including account restriction and deletion where required.

Changes and contact

We may update this policy as the service changes. We will publish the current version on this page and revise the date below. For questions or privacy requests, contact help@charterprep.ai.

Last updated: 1 November 2026