NavPath Academy Private Limited · Rev 00 · Effective 10 September 2026

1. WHO WE ARE

This policy explains how NavPath Academy Private Limited (CIN U85490KL2025PTC099317), Building No. 29/1296/L & 29/1296/M, Varathra Pallathu, TB Road, Erayilkadavu, Kottayam, Kerala 686001 ("NavPath", "we") handles personal data when you use the NavPath Academy Android app and our course website, course.navpathacademy.com. We decide why and how your data is used and are responsible for it under the Digital Personal Data Protection Act, 2023. Students enrolled at our Kottayam campus are also covered by the Data Protection Notice issued with the Admission Form.

2. WHAT WE COLLECT

Account details: name, mobile number, email address, login credentials. Learning data: courses joined, lessons watched, test answers, scores, progress, and anything you post in discussions. Live class data: your name, and your voice or video if you switch them on, in live sessions and their recordings. Payment records: what you bought, amount, date and payment status. Card, UPI and bank details are handled by our payment provider; we do not store them. Device and usage data: device model, operating system, app version, IP address, crash reports and notification tokens. We do not collect Aadhaar numbers, health data, contacts, location or photos through the app.

3. WHY WE USE IT

To create your account and deliver the courses and tests you buy. To show your results and progress, and to help faculty guide you. To send class schedules, course updates and answers to your questions. To keep the app secure, prevent account sharing and content piracy, and fix faults. To keep financial and tax records required by law. With your consent we may also tell you about new courses and batches. You can stop these at any time.

4. AGE

Our courses are bought and used by students preparing for entrance examinations. If you are under 18, register and buy only with the knowledge and agreement of your parent or guardian. We do not use a learner's data for targeted advertising or behavioural tracking.

5. WHO WE SHARE IT WITH

We do not sell personal data. We share it only with: Learnyst Insight Private Limited, which runs our learning platform and app; Google (Firebase, Google Play) for app delivery, notifications and crash reporting; Razorpay for payments; Zoom for live classes; our faculty and staff, only as needed to teach and support you; and government authorities, where the law requires it. These providers may store data on servers outside India, as permitted by law.

6. HOW LONG WE KEEP IT

Account and learning data: while your account is active, and up to 1 year after it is closed. Payment and tax records: for the period Indian tax law requires. Live class recordings: for the validity of the course.

7. HOW WE PROTECT IT

Access is limited to authorised people with individual logins. Data is encrypted in transit. No system is fully secure, so keep your password private and do not share your account.

8. YOUR RIGHTS

You may ask to see your data, correct it, withdraw consent, or delete it, and you may nominate someone to act for you. Email admin@navpathacademy.com with the subject "DPDP Request". We acknowledge within 3 working days and respond within 30 days. You may also complain to the Data Protection Board of India.

9. DELETE YOUR ACCOUNT

To delete your NavPath Academy account and its data, email admin@navpathacademy.com from your registered email address with the subject "Delete my account". We confirm your identity and complete deletion within 30 days. Records that tax law requires us to keep are retained for that period only. Deleting your account ends access to every course you hold, and no refund arises on deletion.

10. GRIEVANCE OFFICER

Course-in-Charge, NavPath Academy Private Limited, address as in Section 1. Email: admin@navpathacademy.com. Phone: +91 77365 22210

11. CHANGES

Any change to this policy is posted on this page with a new effective date. Significant changes are also notified in the app.