Privacy policy

• Your Google account basics, when you sign in with Google: your name, email address and profile picture. We ask Google for nothing else, and we never see your Google password.
• Your study activity: which notes you have read, your answers to practice questions, your scores and the written answers you choose to save.
• Payment records, if you buy Pro: what you bought, when and the amount. Card and UPI details are handled by our payment provider and never reach us.
• Messages you send us, such as problem reports and emails.
• Technical and usage data: pages visited, device and browser type, approximate location from your IP address, and error logs. We use this to keep the site working, fix problems and understand which features help.

• To sign you in and keep your progress, scores and plan in sync across your devices.
• To provide Pro features you have paid for.
• To reply to your messages and fix reported mistakes.
• To improve notes and questions, using aggregate patterns such as which questions most students get wrong.
• To protect the service: preventing abuse, account sharing, scraping and fraud.
• To send essential service emails, such as payment receipts. We will not send marketing email without your consent.

Our legal basis is your consent, given when you sign in, and our legitimate need to provide and secure the service you asked for.

We share personal data only with the service providers that run mblnotes for us, and only what each one needs:

• Google, for sign-in.
• Supabase, which hosts our database and accounts.
• Vercel, which hosts the website.
• PostHog, for product analytics.
• Dodo Payments, for payments, once Pro is on sale.
• Zoho, for our email.

Some of these providers store data outside India. We will also disclose data where the law requires it. We do not sell personal data or share it with advertisers, and we do not share it with NLSIU.

We use cookies and similar storage to keep you signed in, remember your progress and preferences, and measure how the site is used. We do not use advertising cookies. Blocking cookies may stop sign-in and progress tracking from working.

We keep your account and study data while your account is active. If you ask us to delete your account, we delete your personal data within 30 days, except payment records we must keep for tax and accounting law, and backups that expire on their own cycle. Aggregate statistics that no longer identify you may be kept.

You can ask us to:

• tell you what personal data we hold about you;
• correct or update it;
• delete your account and data;
• withdraw your consent, which will mean closing your account.

Email hello@mblnotes.com from the address on your account. We reply within 30 days. You may also nominate someone to exercise these rights for you if you are unable to.

Data is encrypted in transit, access to the database is restricted to what each feature needs, and we review who has access. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

mblnotes is for postgraduate students and is not intended for anyone under 18.

If we change this policy, we will update the date above, and for significant changes we will tell you on the site or by email before they take effect.

For any complaint about how we handle your data, write to our grievance contact at hello@mblnotes.com. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. See also our terms of use.