Privacy Policy
Last updated: 19 May 2026
RankPG ("we", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website at rankpg.com.
1. Information We Collect
a) Information You Provide
| Data | When | Purpose |
|---|---|---|
| Name, email | Registration | Account creation, communication |
| Phone number | Registration (optional) | Account recovery, support |
| Password | Registration | Authentication (stored as bcrypt hash) |
| Exam selection | Onboarding | Content personalization |
| Study progress | Using the app | Revision scheduling, analytics |
| GT scores & mistakes | Logging GTs | Performance tracking |
| Notes | Using the app | Personal study notes |
b) Automatically Collected
- Device info: Browser type, OS, screen size (for responsive design).
- IP address: For security (rate limiting, fraud detection). Not used for tracking.
- Session data: Login timestamps, last active time (for streak calculation).
c) Payment Information
We do NOT collect or store any payment card details. All payments are processed through Razorpay, which is PCI DSS Level 1 certified. We only receive transaction confirmation (payment ID, amount, status).
2. How We Use Your Data
- Provide the Service: Track syllabus progress, schedule revisions, generate analytics.
- Improve the Service: Aggregate, anonymized usage patterns help us improve features.
- Communication: Account alerts, password resets, subscription reminders. No marketing spam.
- Security: Detect unauthorized access, prevent abuse.
3. What We Do NOT Do
- ❌ We do not sell your personal data to third parties.
- ❌ We do not share your study progress, notes, or scores with anyone.
- ❌ We do not display ads or use ad-tracking pixels.
- ❌ We do not send marketing emails unless you opt in.
- ❌ We do not use your data for AI training or model building.
4. Data Storage & Security
- Data is stored on secure servers hosted in India.
- Passwords are hashed using bcrypt (industry standard).
- All connections use HTTPS/TLS encryption.
- Database access is restricted and regularly audited.
- CSRF protection on all forms. Rate limiting on APIs.
5. Cookies
We use the following cookies:
- Session cookie (PHPSESSID): Keeps you logged in. Expires when you close the browser or after inactivity.
- Remember-me cookie: If you choose "Remember me" at login. Expires in 30 days.
- Cookie consent (cookie_consent): Records that you accepted our cookie notice. Expires in 1 year.
- Referral code (rankpg_ref): Only set if you arrive through a friend's invite link. Remembers their referral code so your bonus days are applied when you create your account. Expires in 30 days, or as soon as the account is created.
- Google Analytics (_ga, _ga_*): Used on public marketing pages only (not inside the app) to understand traffic sources. Set by Google. You can opt out via browser settings.
We do not use tracking pixels or third-party advertising cookies.
5b. Product Analytics & Improvement
To improve RankPG, we log your interactions with the app (page visits, feature usage, payment events) linked to your account ID. Specifically:
- IP address: Stored as an irreversible cryptographic hash — we cannot recover your actual IP address from this hash. Used only for abuse detection.
- Device type: Whether you're on mobile, tablet, or desktop, and your browser family (e.g. Chrome, Safari). We do not store your full user-agent string.
- Page URLs: Which pages you visit within RankPG (excluding query-string data except marketing UTM tags).
- Feature usage events: Which features you use (syllabus, GT tracker, analytics, etc.) and conversion events (pricing page views, checkout actions).
This data is used exclusively to improve the product. We never sell, share, or provide this data to any third party.
To request deletion of all your analytics data, email us at [email protected].
We also use Google Analytics 4 (GA4) for traffic-source measurement on public marketing pages — not inside the authenticated app.
6. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Razorpay | Payment processing | Name, email, amount (for invoices) |
| Google OAuth | Social login (optional) | Name, email (from Google) |
| SMTP (email) | Transactional emails | Email address, email content |
| Google Analytics 4 | Traffic-source analysis (public pages only) | Anonymous page views, device type, referrer. User ID linked when logged in. |
| Sentry | Error monitoring | Error details, user ID (no PII). Used to fix bugs quickly. |
All third-party services are bound by their own privacy policies. We share only the minimum data required.
7. Data Retention
- Active accounts: Data is retained as long as your account is active.
- Deleted accounts: Personal data is deleted within 30 days of account deletion. Anonymized aggregate data may be retained for analytics.
- Inactive accounts: Accounts inactive for 12+ months may receive a re-activation email. Data is not deleted without notice.
8. Your Rights
You have the right to:
- Access your personal data (visible in Settings and on-platform).
- Correct your personal information.
- Export your data (coming soon).
- Delete your account and all associated data.
- Withdraw consent by deleting your account.
9. Children's Privacy
This Service is intended for users aged 18+. We do not knowingly collect data from children under 18 without parental consent. If you believe a minor has created an account, please contact us.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. For significant changes, we will notify you via email or in-app notification.
11. Contact Us
For privacy-related questions or data requests, reach us via our Help & Support page or email:
📧 [email protected]
🌐 rankpg.com