1. Introduction
NEXTSTEP Academy ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use the NEXTSTEP Academy mobile application ("App") listed on Google Play.
By using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.
2. Data Controller
The data controller responsible for your personal information is NEXTSTEP Academy. Contact details are provided in Section 14 of this policy.
3. Information We Collect
We may collect the following categories of information:
- Identity & contact data: name, email address, phone number, and student profile details you provide during registration or login.
- Authentication data: OTP session identifiers and verification status (we do not store your OTP codes in plain text in the App).
- Usage & learning data: course progress, video watch activity, notes access, and interaction with App features.
- Device & technical data: device type, operating system version, app version, language, and push notification tokens (FCM) when you allow notifications.
- Security-related data: logs needed to detect unauthorized access, account abuse, or content misuse.
- Communications: messages you send to our support team (phone, WhatsApp, or email).
4. How We Use Your Information
- Create and manage your student account and verify your identity.
- Provide access to courses, videos, notes, live classes, and projects.
- Track learning progress and personalize your dashboard.
- Send service notifications (class reminders, new content, important updates).
- Maintain App security and prevent unauthorized sharing of educational content.
- Respond to support requests and improve our services.
- Comply with legal obligations and enforce our Terms & Conditions.
5. Legal Basis for Processing
We process personal information based on: (a) your consent (e.g., notifications, registration); (b) performance of our educational service contract with you; and (c) our legitimate interests in securing the platform and preventing misuse, where permitted by law.
6. Permissions We May Request
- Internet access — required to stream content and sync your account.
- Notifications (Android POST_NOTIFICATIONS) — optional; used to send class and content alerts.
- Vibration — optional; may be used with notifications on supported devices.
You can revoke optional permissions anytime in your device settings. Some App features may not work without required permissions.
7. Data Sharing & Third-Party Services
We do not sell your personal information. We may share limited data with trusted service providers only as needed to operate the App, including:
- Google Firebase / Google Cloud — authentication, database, cloud functions, analytics, and push notifications (FCM).
- Video and file hosting providers — secure delivery of lectures and notes.
- Live class providers (e.g., Zoom, Google Meet) — when you join scheduled sessions.
- Communication tools — for OTP delivery or support as configured by us.
These providers process data under their own privacy policies and our instructions where applicable. We require them to use data only for providing services to us.
8. Data Retention
We retain personal information for as long as your account is active or as needed to provide services, comply with law, resolve disputes, and enforce agreements.
When your account is deleted or deactivated, we delete or anonymize personal data within a reasonable period, except where retention is required by law or for legitimate security purposes.
9. Data Security
We implement administrative, technical, and organizational measures to protect your information, including access controls, secure authentication, and restricted content delivery.
No method of transmission or storage is 100% secure. Please use a secure device and do not share your login credentials.
10. Your Rights & Choices
We will respond to valid requests within a reasonable time frame as required by applicable law.
- Access or update your profile information through the App where available.
- Withdraw notification permission from device settings.
- Request correction or deletion of your personal data by contacting us (see Section 12).
- Object to or restrict certain processing where applicable under local law.
11. Children's Privacy
The App is intended for students generally aged 13 and above. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child under 13 has provided us data, contact us and we will take appropriate steps to delete it.
12. International Users
Our services are primarily operated from India. If you access the App from other countries, your information may be processed in India or in countries where our service providers operate, subject to applicable safeguards.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will indicate the latest version. We encourage you to review this page periodically. Continued use of the App after changes means you accept the updated policy.
14. Contact Us
For privacy-related questions, data access requests, or account deletion requests, contact: