Privacy Policy for BBD Papers (Android App)

Last Updated and
Effective Date:
July 22, 2026

This Privacy Policy describes how BBD Papers (Android App) ("We", "Us", "Our", or the "Company") collects, processes, uses, and protects your personal data when you use our mobile application and related services.

We are committed to protecting your privacy in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, the Information Technology Act, 2000, and Google Play Data Safety guidelines.

1. Roles Under the DPDP Act, 2023

Data Fiduciary: BBD Papers (Android App) acts as the Data Fiduciary determining the purpose and means of processing your personal data.
Data Principal: You (the student or user accessing our Application) act as the Data Principal under Section 2(j) of the DPDP Act.

2. Notice of Itemized Data Collection (Section 5, DPDP Act)

We collect and process the following specific categories of personal data with your explicit consent:

A. Identity & Authentication Data

What is collected: Google account email address, display name, profile photo URL, and unique user identifier.
Purpose: User authentication, cloud data storage, and syncing downloaded papers or saved preferences across sessions (via Supabase & Google OAuth).

B. Telemetry, Diagnostic & Performance Data

What is collected: Approximate geographic region, device model, operating system version, crash stack traces, and non-sensitive session interactions.
Purpose: App performance telemetry, crash reporting, session diagnostics, and UI responsiveness improvement (processed securely via Microsoft Clarity).

C. Advertising & Monetization Data

What is collected: Android Advertising ID (AAID) / iOS IDFA (only if consented), IP address, approximate location, and ad performance metrics.
Purpose: Delivery of non-personalized or personalized advertisements to keep the Application free for students (via Google AdMob / Google Mobile Ads).

D. Notification & Academic Alerts Data

What is collected: Push notification token, device OS version, and language preference.
Purpose: Delivering urgent academic updates, exam notifications, and question paper alerts via push notifications (processed via OneSignal).

3. Consent & Right to Withdraw Consent (Section 6, DPDP Act)

We process digital personal data only after providing explicit notice and obtaining clear, affirmative, and granular consent. You may opt into or out of specific processing activities (such as session analytics, personalized advertising, and push notifications) at any time through the in-app Privacy & Tracking Consent settings.

Right to Withdraw Consent (Section 6(4))

You have the absolute right to withdraw your consent at any time. You can withdraw consent by:

In-App Privacy Controls: Navigate to HomeScreen -> Privacy & Tracking Consent settings to opt into or out of specific processing activities.
Using the in-app Account & Data Management feature located inside Info Bottom Sheet OR About App / Info Page.
Contacting the Developer via email at echoonetango.help@gmail.com with Subject: DPDP / Privacy Inquiry.

You have the right to withdraw your consent at any time. Upon withdrawal, we immediately cease collecting or sharing data for the affected purposes without affecting the lawfulness of prior processing.

4. Right to Erasure / Account Deletion (Section 12(3), DPDP Act & Google Play)

You have the absolute right to request permanent deletion of your Account and any associated personal data at any time.

In-App Deletion: Open BBD Papers -> Navigate to Home -> Info Bottom Sheet OR About App / Info Page -> Tap on Account & Data Management (or Delete Data inside the Privacy Policy screen) -> Choose Delete Account & Erase All Data to immediately sign out of Google Auth, clear all local cached files and download history, withdraw tracking consent, and submit a permanent cloud erasure request.
Manual Deletion: If you no longer have the Application installed and wish to request complete erasure of your cloud records, authentication tokens, and telemetry data: Send an email from your registered email address to echoonetango.help@gmail.com with the Subject Line: Permanent Account & Data Erasure Request. Include your display name and email address registered with Google Login. The developer will process your request and permanently purge your records within 7 business days, confirming completion via email.

5. Third-Party Data Processors & Disclosure (Section 8 & Section 16)

We do not sell your personal data. We disclose your data only to the following vetted Data Processors who process data on our behalf under strict security obligations (Section 8(5)):

Data ProcessorService ProvidedData Shared
Microsoft ClarityApp performance telemetry, crash reporting, session diagnostics, UI responsiveness.Approximate geographic region, device model, operating system version, crash stack traces, non-sensitive session interactions.
Google AdMob (Google Mobile Ads)Delivery of non-personalized or personalized advertisements to keep the Application free for students.Android Advertising ID (AAID) / iOS IDFA (only if consented), IP address, approximate location, ad performance metrics.
OneSignalDelivering urgent academic updates, exam notifications, and question paper alerts via push notifications.Push notification token, device OS version, language preference.
Supabase & Google OAuthUser authentication, cloud data storage, and syncing downloaded papers or saved preferences.Google account email address, display name, profile photo URL, unique user identifier.

In the event of any data breach impacting your personal data, we will promptly notify both you and the Data Protection Board of India (DPBI) in compliance with Section 8(6) of the DPDP Act.

6. Independent Project (No Official Affiliation)

This application is an independent student initiative and is not officially affiliated with, endorsed by, or sponsored by BBD University or its administration. Any use of university names or hostel designations is purely for descriptive and navigational purposes.

7. User-Generated Content (Reviews)

If you post reviews or comments on the application, you are solely responsible for the content you submit. We do not endorse any user-generated content and reserve the right to remove or modify any content that we determine, in our sole discretion, to be abusive, defamatory, illegal, or in violation of these Terms.

8. Accuracy of Information

The mess menus displayed on this application are provided for convenience only. While we strive to keep the information accurate, we do not guarantee that the food served will match the menu shown. We are not liable for any sudden menu changes, food availability, or any health-related issues (including allergies) arising from reliance on this information.

9. Limitation of Liability

In no event shall the app developers, nor its directors, employees, partners, agents, suppliers, or affiliates, be liable for any indirect, incidental, special, consequential or punitive damages, including without limitation, loss of profits, data, use, goodwill, or other intangible losses, resulting from your access to or use of or inability to access or use the Service.

10. Contact Us

If you have any questions about these Terms, please contact us at veerpratap3007@gmail.com or tanayanandmishra@gmail.com.

11. Data Security & Storage (Section 8(5))

All data transmitted between the Application and our cloud servers is encrypted in transit using industry-standard TLS/HTTPS protocols and stored with enterprise-grade encryption at rest.

12. Children's Privacy

Our Application requires users to confirm that they are at least 18 years of age or that verifiable parental/legal guardian consent has been obtained prior to accessing features that collect personal data (DPDP Act Section 9).

13. Developer Contact & DPDP Act Compliance (Section 8(9) & Section 13)

In compliance with Section 8(9) and Section 13 of the Digital Personal Data Protection Act, 2023, the contact details of the Developer are published below:

Name: Tanay Anand Mishra
Role: Solo Developer
Address: Uttar Pradesh, India
Response Timeline: If you have any inquiries, complaints, or requests regarding your personal data under the DPDP Act 2023, contact the developer via email with the Subject: DPDP / Privacy Inquiry. Your request will be acknowledged and resolved directly by the developer within statutory timelines.

Right to Approach the Data Protection Board (Section 13(3))

If your inquiry or grievance is not resolved to your satisfaction by the Developer, you have the statutory right to file a formal complaint with the Data Protection Board of India (DPBI).

14. Changes to this Privacy Policy

We may update our Privacy Policy periodically to reflect changes in legal or technical requirements. We will notify you of any significant changes via an in-app banner or push notification prior to the changes taking effect.

15. European Union (GDPR) & California (CCPA) Privacy Rights

GDPR Legal Basis: We process telemetry and advertising data strictly on the basis of User Consent (Article 6(1)(a)), which is gathered via our initial launch consent gate before any SDK initializes.
CCPA "Do Not Sell or Share My Personal Information": We do not sell your personal data for monetary gain. You can disable personalized advertising and telemetry sharing at any time by toggling off Personalized Advertising and Analytics inside the app settings (HomeScreen -> Privacy & Tracking Consent).