Data Usage & Safety Policy
1. Overview & Google Play Data Safety Compliance
This Data Usage & Safety Policy details how Limitless Math collects, processes, and protects your data in strict compliance with Google Play Developer Policies, GDPR principles, and Indian Digital Personal Data Protection (DPDP) standards.
2. Data Collection Breakdown
| Data Type | Purpose | Mandatory / Optional | Shared with 3rd Parties |
|---|---|---|---|
| Personal Info (Name, Email ID) | Account creation, course enrollment binding, communication, and invoice generation | Mandatory for enrollment | Payment gateways for receipt billing |
| Device Identifiers (Hardware Device ID) | Account fraud prevention, single-device anti-sharing lock, and session security | Mandatory | Never sold or shared for advertising |
| Financial Info (Transaction ID, Order ID) | Payment verification, coupon redemption, and course fulfillment | Mandatory on purchase | Razorpay (PCI-DSS Level 1 compliant) |
| Learning Analytics (Playback progress, Test scores) | Personalized study recommendations, doubt resolution, and progress tracking | Platform operation | Internal faculty and instructors only |
3. Device Permissions & Usage Justification
- Internet Access (
android.permission.INTERNET): Required to stream HLS video lectures from Cloudflare R2 Edge, synchronize course catalogs, and submit test answers. - Push Notifications (
android.permission.POST_NOTIFICATIONS): Used exclusively to deliver live class reminders (15 min before class and when live), announcements, and doubt responses. Students can toggle notification preferences in app settings. - Network State (
android.permission.ACCESS_NETWORK_STATE): Used to detect connection drops and switch video player bitrates gracefully between 720p, 480p, and 360p.
4. Data Encryption & Security Standards
- Encryption in Transit: All communications between the app, backend servers, and Cloudflare R2 video storage use modern TLS 1.3 / HTTPS encryption.
- HMAC Video Security: Video streaming URLs are signed with short-lived, cryptographic HMAC-SHA256 tokens tied to the authenticated user ID and device. Direct unauthenticated access to video files is blocked.
- Payment Security: Limitless Math never stores credit card numbers, CVVs, or net banking passwords. All financial transactions are processed by certified, PCI-DSS compliant payment gateways.
5. Data Retention & Account Deletion (Google Play Compliance)
In full compliance with Google Play Developer User Data policies, students have the right to permanently delete their account and associated personal data at any time.
- In-App Self-Service Deletion: You can permanently delete your account directly inside the Android application by navigating to Profile Screen > Delete Account. Upon confirmation, your credentials, device binding, learning analytics, and course progress are permanently wiped.
- Email Request: Alternatively, you may submit an account deletion request by emailing limitlessmathyoutube@gmail.com with the subject line "Account Deletion Request". Requests are verified and processed within 48 to 72 business hours.
- Non-Refundable Disclaimer: In accordance with our Non-Refundable Policy, account deletion does not qualify the user for any full or partial refund of course subscription fees.