What we collect, why, who we share it with, how long we keep it, and what you can do about it. Last updated 23 Oct 2026 · JupiteX Private Limited.
JupiteX (the website at jupitex.ai and the JupiteX apps for iOS and Android) is operated by JupiteX Private Limited, 3-51/1, Plot No. 63, Anjali Gardens Colony, Manikonda, Hyderabad, Rangareddy District, Telangana 500089, India. In this policy "we", "us" and "our" mean JupiteX Private Limited; "you" means anyone who uses JupiteX.
This policy explains what personal data we collect, why, who we share it with, how long we keep it, and what you can do about it. It applies to the website and the apps.
The law that governs this today is India's Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. The Digital Personal Data Protection Act, 2023 and its Rules are being brought into force in phases; the obligations on notice, consent, children's data and your rights as a Data Principal commence on 13 May 2027, and we will update this policy and our product before then.
Personal data we collect
Category
What it includes
Where it comes from
Account
Username, email address, password (stored only as a one-way hash), display name, avatar, bio. If you sign in with Google or Apple, the account identifier they give us.
You, or Google/Apple when you use their sign-in
Optional profile details
Phone number, age and gender, if you choose to provide them.
You
Country
The country your account is set to, at country level only: never a city, an address or coordinates. The JupiteX app fills it in once from your device's region setting if your account has none.
Your device settings
Study profile
Target exam, exam date, preparation level, interests, daily goals, the Pulse topics, regions and news sources you follow or hide, and which view Pulse opens on.
Learning activity
Questions and answers you open, drills and practice tests you take and your answers, review decks, progress, streaks, bookmarks, likes and follows.
Your use of JupiteX
Content you post
Comments and reports you submit.
Notifications
Push notification device tokens, device platform (iOS or Android), time zone, notification preferences, and a record of notifications sent.
Your device and settings
Payments and invoices
For web purchases: name and email on the invoice, GSTIN and place of supply if you give them, order and payment status. For app purchases: the store receipt and subscription status. For JupiteX billing in the Android app: your state or union territory (for GST and Google's reporting), your mobile number (required for a recurring payment mandate), and payment and mandate status. We never receive or store your full card or bank details.
You, our payment provider, Apple or Google
Which emails we sent you, and your unsubscribe choice.
Our email records
Security and sign-in logs
IP address, browser or app user agent, sign-in times and counts, and records of blocked or rate-limited requests.
Your device when it connects to us
Server logs
The web server records IP address, requested address, time and browser details for most requests.
Support
Messages you send us and our replies.
We do not access your contacts, microphone, precise location or biometric data. The iOS app lets you pick a photo from your library or take one with the camera when you set an avatar; it uses them only for that.
Purposes of processing
Purpose
Data used
Create and run your account, sign you in, keep you signed in
Account, security logs
Show your study plan, progress, practice test results and recommendations
Study profile, learning activity
Show Pulse the way you set it: stories from what you follow, and none from what you hide
Kept for a future option to put Pulse news from your country first; nothing in JupiteX uses it today
Process purchases, activate your plan, issue GST invoices
Payments and invoices, account
Report each JupiteX billing purchase, renewal and refund to Google, as Google Play's alternative billing terms require
Send push notifications you have enabled, within your quiet hours
Notifications, study profile
Send service and product emails (see below)
Account, email records
Moderate comments and handle reports and appeals
Content you post, account
Protect JupiteX against abuse, fraud and attacks
Security and server logs
Answer support, privacy and grievance requests
Support, account
Meet legal, tax and accounting obligations and respond to lawful requests
We do not use your personal data for advertising, we do not build cross-site profiles, and we do not make decisions about you that have legal or similarly significant effects by automated means.
Service emails (verification, password reset, receipts and invoices, account deletion, important changes to the service) are sent whenever they are needed and cannot be switched off while you have an account.
Product and marketing emails (new features, exams and content) may be sent to account holders without a separate opt-in. Every one of them carries a one-click unsubscribe link, and once you unsubscribe we keep your address on a suppression list so we do not email you again. When the consent requirements of the DPDP Act commence on 13 May 2027, we will ask for consent where the law requires it.
Push notifications are sent only if you allow them on your device. You can turn categories on or off in the app's notification settings, and we hold notifications during your quiet hours.
We share personal data only with service providers who process it on our behalf to run JupiteX, and only what each one needs:
Service providers
Provider
What they do
Where
Amazon Web Services
Hosts our servers, database and backups
Mumbai, India
Resend and Brevo
Deliver our emails (sign-in codes, receipts, reminders and the emails you choose)
Japan (Tokyo region) and the European Union
Cloudflare
Protects and speeds up jupitex.ai (security filtering and content delivery) and runs the bot check on the sign-in and sign-up pages. It sees the IP address and request details of everyone who visits.
A global network: your request is handled in a data centre near you
Cashfree Payments
Processes web payments, JupiteX billing payments in the Android app, and payment mandates
India
Apple
Sign in with Apple, App Store purchases, iOS push notifications
United States and other countries
Google Sign-In, Google Play purchases, Android push notifications (Firebase Cloud Messaging). Google Play alternative billing reporting: for JupiteX billing purchases we report the amount, tax, date, your state and a transaction reference; never your name, email or phone.
AI-generated content. The explanations and study material in JupiteX are written in advance by third-party AI model providers and published after checks. We do not send your account details or your activity to AI model providers.
We may disclose data when required by law, a court order or a lawful request from a government authority, to enforce our Terms, or to protect the safety of users. If JupiteX is sold or merged, personal data may transfer to the new owner under this policy. We do not sell personal data.
Our main systems are in India. Email delivery (Japan and the European Union), Cloudflare's global network and Apple and Google's services process some data outside India. These transfers are subject to any restrictions the Government of India notifies under the DPDP Act, and we choose providers that apply security safeguards comparable to our own.
Retention
Data
How long
Account, profile, learning activity, posts, notifications
While your account exists. Deleted when you delete your account.
Tax invoices
For the period Indian GST and accounting law requires, even after your account is deleted. The link to your account is removed on deletion.
Records of JupiteX billing purchases reported to Google (amount, tax, date, state and a transaction reference)
For as long as Google's alternative billing terms and tax law require, even after your account is deleted. The link to your account is removed on deletion.
Account deletion record (email, reason, date)
Three years, then deleted automatically
Two years, then deleted automatically
Web server logs
Rotated automatically and overwritten once they reach a fixed size limit
Email suppression list
Kept after you unsubscribe, so that we keep honouring it.
Backups
Until the backup that contains it is overwritten in our regular backup cycle
From 13 May 2027 we will keep the logs the DPDP Rules require (at least one year) and no longer than we need them.
You can:
There is no self-service download of your data yet. To see or receive a copy of your data, or for any other request, email [email protected] from the address on your account (so we can confirm it is you). How quickly we respond: within 30 days. Requests about personal data will in any case be answered within the time the law allows, which under the DPDP Rules is at most 90 days.
You must be at least 13 to use JupiteX. Many people preparing for NEET, JEE and other exams are under 18. If you are under 18, a parent or legal guardian must agree to our Terms and this policy, and must make any purchase on your behalf.
We do not show advertising to anyone and we do not track users across other websites or apps. A process for verifiable parental consent, as the DPDP Act requires, is not yet in place; we will introduce it before those obligations commence on 13 May 2027.
If you are a parent or guardian and believe a child under 13 has an account, or you want your child's data deleted, email [email protected] and we will delete it.
The website uses two cookies to keep you signed in and protect your session, and stores preferences and progress in your browser's local storage. We use no analytics or advertising cookies. The sign-in pages also load Google's sign-in script and Cloudflare's bot check, which can set their own technical cookies or storage. Every item is listed in our Cookie policy.
Data travels to and from JupiteX over encrypted connections (HTTPS). Passwords are stored only as one-way hashes. Database access is restricted by role, and each account's records are isolated at the database level. Only a small number of people can access production systems, and only when needed.
No system is perfectly secure. If a personal data breach affects you, we will tell you without undue delay and report it to CERT-In and, when the DPDP Act's breach obligations apply, to the Data Protection Board, as the law requires. To report a vulnerability, email [email protected].
European Union and United Kingdom. Where the GDPR or UK GDPR applies, we rely on the performance of our contract with you (running your account and purchases), our legitimate interests (security, abuse prevention, improving the service), your consent (optional emails and notifications), and legal obligations (tax records). You have the rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your data protection supervisory authority. Your data is processed in India and the other countries listed above.
United States. We do not sell or share personal data for cross-context behavioural advertising. JupiteX is not directed to children under 13. You can make a request about your data by emailing [email protected].
Privacy questions and requests: [email protected]. This mailbox is answered by the person at JupiteX responsible for how we process personal data.
Our Grievance Officer is reachable at [email protected]. How complaints are handled and how to escalate them is set out on our Grievance Redressal page.
Company details
Detail
Value
Legal name
JupiteX Private Limited
Corporate Identification Number (CIN)
U63120TS2026PTC220371
Registered office
3-51/1, Plot No. 63, Anjali Gardens Colony, Manikonda, Hyderabad, Rangareddy District, Telangana 500089, India
Office address
Secondary address
T-Hub, Knowledge City, Hyderabad, Telangana 500081, India
GSTIN
36AAHCJ5383M1ZY
DPIIT recognition
DIPP277640
Customer care
[email protected] (email only)
Grievance Officer
We publish every new version here with the date it takes effect. If a change materially affects how we use your personal data, we will tell you by email or in the app before it takes effect.