Privacy policy

KDV Tutors, a brand of Aska Traders, a sole proprietorship of Kapil Dev Vasudevan, at 3rd Floor, 1093, 16th main, 16th cross, BTM Layout Stage 2, Bengaluru, Bengaluru Urban, Karnataka, 560076, decides how and why your personal data is used. Under the Digital Personal Data Protection Act, 2023 that makes us the data fiduciary. Write to us at help@kdvtutors.org.

• Your account: email address, username, the code you signed up or renewed with, when your access starts and ends, and which version of our terms you accepted and when. Your password is held by Google's Firebase Authentication only as a secure hash. We never see it.
• Your work on our server: your saved query tabs, your last ten runs on the shared practice database (the SQL, whether it worked, and how long it took), and which exercises, drills and interview problems you have solved, and when. When you use a chapter lab, the SQL you give it runs on our server in a scratch area that is deleted as soon as the run ends.
• Not your private database: My database, the PostgreSQL database where you create your own tables and data, runs in your browser and stays on your device. We never receive what is in it, or the queries you run there, unless you choose to send a statement with Report this.
• Activity: when you last opened the playground or ran a query on our server, and how many queries you ran there (on the shared practice database or in a lab) each day and in total, and how many of them failed. Runs in My database are not counted.
• Purchases: the email address the code is for (for a group code, the school's email, which each student also gives when signing up), the number of seats, the amount, any promo code used, the Indian state you're in (to work out GST), the Razorpay order and payment IDs (or, for a payment made to us directly, how it was paid and its reference), the invoice, and which accounts used each seat. Your card, UPI or bank details and the phone number Razorpay asks for go to Razorpay, not to us.
• Error reports: when the playground fails on its side, or when you press Report this, the SQL you ran, the error, your note if you add one, the app version, and your browser's name and version.
• Messages: the name, email address, topic and message you send through the contact form or by email.
• Abuse protection: a one-way hash of your IP address, used to limit how often sign-ups, password resets, checkouts and messages can be tried. Server logs record events such as a sign-up or a failed run, with an account ID but not your query.

• to create and run your account, sign you in, confirm your email address and reset your password;
• to run your queries on the shared practice database and in the labs, check your answers, and keep your tabs, history and progress;
• to sell codes, work out GST, issue invoices and keep the records tax law requires;
• to answer your messages and complaints;
• to keep the service secure and fair, and to meet our legal obligations.

To run and support the playground, its administrator can see each account's username, email address, access dates, when it was last active, how many queries it ran on the server, its last ten queries on the shared practice database, and its error reports. Nobody but you can see My database.

We don't sell or rent your personal data, use it for advertising, or build profiles of you. We email you only about your account, your purchases and changes to these policies.

You consent to this use when you create an account, buy a code or send us a message. You can withdraw that consent at any time by deleting your account, as easily as you gave it. After that we stop using your data, except for what the law requires us to keep, such as invoices.

These providers process personal data for us, only to run the service, and under their own security and privacy terms:

We also disclose personal data when the law requires it, for example to a court or a government authority with the power to ask.

As the table shows, some of your data is stored in Singapore and the United States. Indian law allows this, except to countries the central government restricts. We will follow any such restriction.

We use no advertising or analytics cookies. Your browser keeps what the site needs to work:

• your sign-in session, which Firebase stores in the browser;
• My database, with its copy of the practice data, in the browser's own storage (IndexedDB), one for each account that uses it in that browser. Resetting it from the playground, or clearing this site's data in your browser, deletes it;
• two small flags saying whether you're signed in to the playground on this device and when you last used it, so these pages can show "Start" and the playground can sign you out after 14 days without use;
• your settings and drafts: light or dark theme, panel sizes, whether the editor runs on the shared database or My database, a Request Decoder draft, and the clock of an interview round, so reloading the page doesn't stop it.

When you pay, Razorpay's checkout window loads its own scripts and cookies to process and protect the payment. See Razorpay's privacy policy.

• Your account, tabs, history and progress: while your account exists, including after your access ends, so you can renew and pick up where you left off. When you delete your account, they are deleted at once. Copies in backups and logs are gone within 30 days.
• My database: in your browser until you reset it, clear this site's data, or delete your account in that browser. If you used the playground in other browsers or on other devices, the copies there stay until you reset them or clear the site's data there. We can't reach them, so we can't delete them for you.
• Your username: kept after you delete your account, on its own, so that nobody else can take it and pass as you.
• Purchase records and invoices: for as long as tax law requires, even after you delete your account. Under GST law that is 72 months from the due date of the annual return for the year of the purchase.
• Messages: until your question or complaint is resolved, and then for up to one year.
• Error reports: 90 days, or until you delete your account, whichever comes first.
• Abuse-protection records: a few days. Server logs: 30 days.

Under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, you can ask us to:

• tell you what personal data we hold about you, and who we have shared it with;
• correct or complete it;
• erase it. You can delete your account yourself, from the account menu in the playground, or ask us to do it;
• deal with a grievance about how we handle it;
• let someone you nominate exercise these rights for you if you die or become unable to.

Email help@kdvtutors.org from the address on your account, or use the contact page. We may ask you to confirm who you are. We reply within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Codes are sold only to people 18 or older. Readers of the SQL book are not asked their age when they sign up. If you are under 18, please use the service only with your parent's or guardian's permission. We don't track, profile or advertise to anyone. If a parent or guardian tells us that their child has an account without their permission, we will delete it.

Everything travels over HTTPS. Passwords are handled by Firebase Authentication. My database stays in your browser, so it is only as safe as the device and browser you use: on a shared computer, reset it or delete your account there when you finish. Queries on the shared practice database run read-only, and no run can see another person's query. Keys and passwords our servers use are kept in Google Secret Manager, and only the proprietor can reach the systems that hold your data. These are reasonable security practices under the Information Technology Act, 2000, but no system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

If we change this policy, we update the date at the top of this page. If a change matters to people with accounts, we email them before it takes effect.

Questions, requests and complaints go to our grievance officer, Kapil Dev Vasudevan, at help@kdvtutors.org. We acknowledge complaints within 48 hours and resolve them within one month. Full details are on the contact page.