How UPSC Genie AI handles your personal data
This policy explains what Wreck Ventures Pvt Ltd collects through UPSC Genie AI, why it is processed, who may receive it, how long it is kept and the choices available to you.
1. Who controls your data
Wreck Ventures Pvt Ltd, Bandra Kurla Complex (BKC), Mumbai, Maharashtra, India, operates UPSC Genie AI and is responsible for the processing described in this policy.
Privacy questions and requests may be sent to admin@upscgenie.com. Formal grievances may be addressed to Savio, Chief Technology Officer and Grievance Officer, at the same email or +91 98768 98769.
2. Personal data we collect
| Category | Examples | How it is obtained |
|---|---|---|
| Google account identity | Verified email address, display name, Google subject identifier and verification time. | From Google when you choose Sign in with Google. |
| Learning profile | Attempt year, preparation stage, available study hours, language, subject focus and preferred name. | From choices you make during onboarding and later use. |
| Learning activity | Lessons opened, checkpoints, PYQ and mock attempts, scores, progress, streaks, revisions, check-ins and plan changes. | Generated as you use the service. |
| AI and answer content | Questions sent to GENIE AI, typed Mains answers, extracted text from uploaded answers, evaluations and related metadata. | Content you submit and outputs created for you. |
| Payments and entitlements | Order ID, product, amount, currency, payment status, payment reference, credited AI usage, plan dates and an optional phone number. | From you, our records and Cashfree. We do not store your full card number, CVV, UPI PIN or banking password. |
| Communications | Support emails, correction requests, feedback and email-subscription status. | When you contact us or receive permitted communications. |
| Technical and measurement data | IP-derived location, browser, device, pages viewed, referral source, event IDs, cookie identifiers, error and security logs. | Automatically from your browser, server and measurement tools. |
Some drafts and preferences may be stored only in your browser through local storage. Clearing browser data may remove those device-only items.
3. Why we use personal data
- create and secure your account, verify sign-in and preserve progress across devices;
- build and update your study plan, deliver lessons and practice, score attempts and show progress;
- answer questions, transcribe uploaded answers and generate formative AI feedback;
- process orders, prevent duplicate credits, maintain wallet and plan entitlements, issue approved refunds and resolve payment disputes;
- send essential service messages and, where permitted, learning or product emails that you can unsubscribe from;
- understand feature use, attribute registrations and purchases, improve performance and measure marketing;
- detect abuse, fraud, security incidents and violations of our terms;
- meet legal, accounting, tax, consumer-protection and regulatory obligations.
Depending on the activity and applicable law, processing is based on your consent, performance of the service you requested, compliance with law, or legitimate uses recognised under Indian data-protection law. You may withdraw consent for optional processing, but this does not affect processing already lawfully completed.
5. AI questions and uploaded answers
Text you send to GENIE AI and answers you submit are processed to generate the requested response or evaluation. A PNG or PDF answer is transmitted securely to the AI processor for transcription. UPSC Genie AI does not intentionally retain the original uploaded file after that request completes; the extracted text, evaluation, score and submission metadata may be retained in your learning history.
Do not upload identity documents, medical information, financial credentials, another person's private data or content unrelated to answer evaluation. AI outputs can be incomplete or wrong and should be checked against official sources.
6. Analytics, advertising and email
Google Analytics measures page views, feature use, device/browser information and conversion events. We configure product events to avoid sending names, email addresses, questions or answer text. A pseudonymous account identifier may be used for verified users to reduce duplicate measurement.
Meta Pixel and Conversions API measure actions such as registration, checkout and confirmed purchase. Meta may receive browser identifiers, IP and user-agent information, event details and cryptographically hashed matching values such as verified email or phone. Hashing reduces direct exposure but does not make the information anonymous.
Verified learner names and email addresses may be synchronised to Resend so permitted messages and unsubscribe status can be managed. Every marketing email should provide an unsubscribe route. Essential account, payment, security and policy messages may still be sent when necessary.
See the Cookie Policy for browser storage and measurement choices.
7. How long we retain data
We keep personal data only for as long as reasonably needed for the purposes described above, including providing an active account, preserving learning history, resolving disputes, securing the service and meeting legal obligations.
- Account, learning and AI-interaction records are generally kept while the account remains active or until a valid deletion request is completed.
- Original answer-upload files are not intentionally retained after transcription; extracted text and evaluations may remain in the account history.
- Payment, refund, fraud-prevention, tax and accounting records may be retained for the period required by applicable law even after account deletion.
- Security logs and backups are retained on limited operational cycles and may take additional time to age out after deletion from active systems.
- Aggregated or irreversibly anonymised information may be retained because it no longer identifies you.
8. Security
We use HTTPS, access controls, server-side payment verification, restricted secret storage, hashed advertising match values and operational monitoring. No internet service can promise absolute security. Protect access to your Google account and notify us promptly if you suspect unauthorised use.
9. Your choices and rights
Subject to applicable law, you may ask for a summary of personal data being processed, correction of inaccurate or incomplete information, erasure of data no longer required, withdrawal of consent for optional processing, or grievance redressal. You may also unsubscribe from marketing emails and control cookies through your browser.
Send requests from the email linked to your account to admin@upscgenie.com. We may ask for limited verification before acting. Read the detailed data-deletion procedure and grievance process.
10. Children
UPSC Genie AI is designed for people aged 18 and above. We do not knowingly invite children to create accounts or purchase services. If you believe a person under 18 has supplied personal data, contact us so we can investigate and take appropriate action.
11. Policy changes and contact
We may update this policy when features, providers or law change. Material changes will be identified by a new effective or reviewed date and, where appropriate, communicated in the app or by email.
Wreck Ventures Pvt Ltd
Bandra Kurla Complex (BKC), Mumbai, Maharashtra, India
Email: admin@upscgenie.com
Grievance Officer: Savio, CTO · +91 98768 98769