Last updated: May 7, 2026
We collect information you provide directly: name, email, phone number, college/university name, graduation year, profile picture, and learning activity (courses enrolled, questions asked, quiz scores, certificates earned). We also collect usage data: IP address, browser type, device identifiers, pages visited, time spent, and feature interactions. This helps us improve Crugex and personalize your experience.
We use your data to: provide and maintain Crugex services; track course progress and issue certificates; enable AI Nova study assistant; recommend courses and internships; send重要 updates (new courses, deadlines, streak reminders); process payments for Pro/Premium subscriptions; comply with legal obligations. We do NOT sell your personal data to third parties.
We share data with: service providers (Supabase for database, Razorpay for payments, Bunny.net for video delivery) under strict data processing agreements; college admins if you're part of a B2B white-label program; legal authorities when required by Indian law (DPDP Act 2023, IT Act 2000). Your publicly visible profile: name, college, and badge achievements are visible to other Crugex users. Your email and phone are never public.
We use essential cookies for authentication (JWT tokens) and preference storage. Analytics cookies (optional, consent-based) help us understand usage patterns. You can opt out of analytics cookies in Settings. Video playback uses Bunny.net CDN cookies for streaming optimization. Payment processing via Razorpay has its own cookie policy.
We retain your data as long as your account is active. You can request deletion at any time — we delete within 30 days. Account data is deleted within 90 days of account closure. Quiz responses, community posts, and certificates may be retained longer for legal compliance (under DPDP Act 2023).
As an Indian user under the Digital Personal Data Protection (DPDP) Act 2023, you have the right to: • Consent: Opt-in before any data collection • Access: Request a copy of all data we hold about you • Correction: Edit your profile data at any time • Erasure: Delete your account and all personal data ("right to be forgotten") • Portability: Export all your data as a JSON file • Grievance: File complaints with the Data Protection Board of India (DPBI) To exercise any of these rights, email privacy@crugex.in.
Crugex is for users aged 13 and above. Users under 18 require parental consent. We do not knowingly collect data from children under 13. If you're a parent/guardian and believe your child has created an account without consent, contact us at privacy@crugex.in and we will delete the account immediately.
We protect your data using: AES-256 encryption at rest; TLS 1.2+ in transit; role-based access controls; regular security audits; encrypted backups. In case of a data breach affecting your personal data, we will notify the DPBI within 72 hours and notify affected users within 7 days, as required by DPDP Act 2023.
Crugex is operated from India. Data may be processed by Supabase (US-based) and Bunny.net (EU-based) servers under standard contractual clauses approved by the Indian government. Your data will not be transferred to any country outside India without your explicit consent.
We may update this policy from time to time. Material changes will be notified via email and on Crugex app. Continued use after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
For privacy-related questions, data export/deletion requests, or breach notifications: 📧 privacy@crugex.in 📍 Mejona Technology LLP, Patna, Bihar, India ⏰ Mon–Sat, 9 AM – 7 PM IST For DPDP Act complaints: Data Protection Board of India (DPBI) https://dpi.gov.in