Skip to content

Privacy Policy

Last updated 5 July 2026. This notice explains what KnowMBA collects, why, where it lives, and your rights. We follow data minimisation — we collect only what the product needs to work.

Who this is for

KnowMBA is intended only for users aged 18 or over. You confirm you are 18+ when you create an account. We do not knowingly collect data from anyone under 18.

What we collect

  • Account: your name and email address, received from Google when you sign in. We never see or store your Google password.
  • Learning activity: the questions you attempt, your answers and scores, mock-test results, section-wise mastery, and any bookmarks or question reports you create.
  • Payments: a mirror of your purchases (order ID, amount, status). Card and UPI details are handled entirely by Razorpay — we never receive or store them.
  • Analytics (optional, off unless you turn it on): aggregate, directional usage events (for example: signed up, answered a free question, reached a paywall, started checkout, completed a purchase, completed a mock, reported a question) via Google Analytics. This is the one item on this list we ask separate consent for — see “Analytics is optional” below.

Where your data lives

This list is meant to be complete. If we add a processor, it appears here before it starts processing anything.

  • Supabase — our database and authentication (account, learning activity, purchase mirror). Hosted in Mumbai, India (ap-south-1).
  • Razorpay — payment processing (India).
  • Google — sign-in (Google OAuth) and, only with your separate optional consent, Google Analytics for directional usage measurement.
  • Cloudflare — hosting and delivery of this website. Every page you load is served through Cloudflare’s global network, so it necessarily processes your IP address and request metadata.

Transfers outside India

Your account and learning data are stored in India. Two of the processors above are global services and may process data outside India in the course of delivering it: Cloudflare serves this site from whichever of its data centres is nearest to you, and Google operates sign-in and analytics on its worldwide infrastructure. We do not transfer your data to any country that the Government of India has restricted under the DPDP Act.

Why we collect it

To run your account and save progress, to process payments and unlock what you have bought, and to understand — in aggregate — how the product is used so we can improve it.

Analytics is optional, and you can change your mind

Analytics is the one thing here that runs on consent rather than on necessity, so it is asked for separately at signup, it defaults to off, and nothing about the product changes if you decline. You can turn it on or off at any time in Account → Consent record → Usage analytics. Turning it off takes effect immediately; we do not ask why, and it never affects your access, your progress or your purchases.

Everything else we collect is what the product needs in order to work — your account so you can sign in, your attempts so your progress is saved, your order mirror so your purchase unlocks — and it stops when you delete your account.

Retention and deletion — how long we keep it

Your account and learning data are kept for as long as your account exists. You can delete your account at any time from inside the app (Account → Delete my account); deletion removes your profile, attempts, mastery, mock-test data, bookmarks and reports, and revokes your entitlements. A refund revokes access but does not by itself delete your learning history.

There is one deliberate exception, and it is the only data that outlives your account: billing records — orders and payment webhook logs. Indian tax and accounting law requires a seller to keep books of account, so these are retained for up to eight years from the end of the financial year of the transaction, and they are de-linked from your identity when you delete your account, leaving a financial record with no person attached to it.

Your rights

You can access, correct or delete your data, withdraw a consent you have given, and nominate someone to exercise these rights on your behalf. Account deletion is self-service in the app and analytics consent is a toggle in Account; for anything else, contact us.

If we do not resolve it

If you have raised a grievance with us and are not satisfied with how we handled it, you may complain to the Data Protection Board of India, the authority established under the Digital Personal Data Protection Act 2023. Please give us the chance first — our commitments are below and on our Contact page.

Grievance contact

Email helloknowmba@gmail.com. We acknowledge every message within 48 hours and aim to resolve it within 30 days. Our business details and full grievance-redressal process are on our Contact page.

See also our Terms, Refund Policy and Contact page.