Back to Home

Xaptiq policies

Privacy Policy

Last updated: 27 September 2026

1. Introduction

Welcome to Xaptiq. We are committed to protecting your privacy and being transparent about how we collect, use, and store your information. This policy explains our practices in simple, clear language.

2. Information We Collect

When you sign up:

  • Full name
  • Mobile number when you provide it for account support or onboarding
  • Email address
  • Password (securely hashed, never stored in plain text)

When you use our platform:

  • Test responses and scores
  • Study time and progress data
  • Package purchases and exam attempts

Before you sign up:

  • Public page visits and package/course pages viewed
  • Browser and device information for compatibility and security

3. How We Use Your Information

We use your data to:

  • Provide personalized learning recommendations based on your performance
  • Track your progress and generate insights to help you improve
  • Suggest relevant study packages and exam papers
  • Send you important updates about your account (you can opt out)
  • Improve our platform and develop new features
  • Analyze aggregate trends (never sell your data to third parties)

4. Public Visitors

You can browse public course and package information without creating an account:

  • Attempting tests and viewing results requires sign-in.
  • Public analytics are aggregated and not used to grant package or test access.
  • You can manage browser storage through your browser settings.

5. Data Security

We take security seriously and implement industry-standard practices:

  • All data transmitted over encrypted HTTPS connections
  • Passwords are hashed using bcrypt (never stored in plain text)
  • Row-level security ensures you can only access your own data
  • Regular security audits and updates
  • Restricted access to your data (only authorized personnel for support)

6. Your Rights

You have the following rights regarding your data:

  • Access: View all your data anytime through your dashboard
  • Correction: Update or correct your information at any time
  • Deletion: Request deletion of your account and all associated data
  • Export: Request a copy of your data (contact support)
  • Opt-out: Unsubscribe from non-essential emails

To exercise these rights, contact us at support@medhayukti.com

7. Data Retention

  • Your account data: Kept as long as your account is active
  • After account deletion: All data permanently deleted within 90 days
  • Analytics data: Anonymized aggregate data may be retained for platform improvement

8. Smith — AI Learning Assistant

This section explains how Smith handles your data. For capabilities, getting started and credits, see Smith — your AI learning assistant.

  • Information sent to OpenAI: Question chats send the question, explanation, selected answer, messages, relevant history and anything you ask Smith to remember. A Results review sends the full attempt: questions, published answers and explanations, your answers, topic and difficulty groups, and reliable Focus mode timing where available. A Progress review sends scores, readiness, subject weightage, topic results, recent tests, exam time and plan status. These generate and check replies. Account names and contact details are not included. Avoid typing personal or sensitive information—anything you type is part of the message sent to OpenAI.
  • Saved chats: Expire after 12 months without using Smith for that exam. Export or delete them through Chat options. Deleting a chat also removes remembered messages from that chat, but not your test results or credit records. Deleted or expired chats cannot be reviewed. Insights and Progress explanations are one-off, not saved chats; leaving the page clears them. They use package AI credits, with content-free usage records retained separately.
  • Things Smith remembers: Optional and off by default. Only messages you choose are remembered for the same exam and topic, for up to 90 days. Select “Forget this” to remove one, or turn off “Let Smith remember” to remove all remembered messages for that exam. Your saved chats stay unchanged.
  • Reporting a reply: Only reported chats are visible to our admins and teachers. A report includes your message, Smith’s reply and the test question. “Include full chat in reports” is on by default. Turn it off in Settings & usage to share just that message and reply, not the rest of the chat. Your choice applies to all chats here. Each review is recorded; changing this setting does not remove earlier review records.

9. AI Usage Records

Usage records retain token counts, model, dates and credits used—not prompts, replies or question text. Administrators see package-level totals, not unreported chats. These usage records are separate from chats and are not removed when you delete a conversation.

For included credits and how replies use them, see Smith usage and credits.

10. Cookies & Local Storage

We use minimal tracking technologies:

  • Session cookies: For keeping you logged in securely
  • Local storage: For your selected learning workspace and interface preferences
  • Analytics: Aggregate usage data to understand how visitors use the platform

We do not use tracking cookies for advertising or sell your data to third parties.

11. Third-Party Services

We use the following trusted services:

  • Supabase: For secure authentication and database hosting
  • Cloudflare: For content delivery and DDoS protection
  • Google Cloud Platform (GCP): For deploying and running backend services
  • OpenAI GPT: For AI learning replies, with OpenAI moderation for safety checks. The information shared is described in the AI Learning Assistant section above.

These providers process information under their own privacy policies.

12. Legal Compliance

We comply with India's Digital Personal Data Protection Act (DPDPA) 2023 and follow international best practices for data protection and privacy. We are committed to handling your data responsibly and transparently.

13. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. We'll notify you of significant changes via email or a notice on the platform. Continued use of the platform after changes means you accept the updated policy.

14. Contact Us

Questions, concerns, or requests about your privacy? Contact us at support@medhayukti.com.