Effective date: 03-11-2026 · Version: 1.0

This Privacy Policy explains how StudyMedic Academy Private Limited (“Company”, “StudyMBBS”, “we”, “us”, “our”) collects, uses, shares, and protects your personal data when you use the StudyMBBS Platform. It forms part of the Terms and Conditions, and capitalised words not defined here have the meanings given there.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it (together, the “DPDP Act”), the Information Technology Act, 2000, and other applicable laws. For the purposes of the DPDP Act, the Company is the Data Fiduciary and you are the Data Principal.

1. Personal Data We Collect

1.1 Data you give us: Name, mobile number, email address, date of birth or age, college, year of study, city and state, examination preferences, parent or guardian details (for Minors), and any information you provide in doubts, forums, feedback, surveys, or support requests.
1.2 Payment data: Order details, amount, transaction reference, and payment status. Card, bank, and UPI details are collected and processed directly by our payment gateways and are not stored by us.
1.3 Usage and device data: Device identifiers, device model and operating system, app version, IP address, approximate location, login and session records, videos watched, questions attempted, test scores, and app performance and crash data.
1.4 Security and anti-piracy data: Watermark identifiers, concurrent-session and device-change records, screen-capture detection events, and records relating to suspected sharing or Piracy.

2. Why We Use Your Personal Data

We use personal data only for the following purposes, based on your consent or for legitimate uses permitted under the DPDP Act:

(a) To create and manage your Account, verify your identity, and provide the Subscriptions you purchase.
(b) To process payments, issue GST invoices and credit notes, and handle failed or duplicate payments.
(c) To personalise your learning, track progress, and improve our Content and Platform.
(d) To send OTPs and transactional, service, class, and security communications.
(e) To send promotional communications (only where you have consented).
(f) To enforce the Terms, detect and prevent fraud, account sharing, and Piracy, and establish, exercise, or defend legal claims.
(g) To comply with law, court orders, and requests of competent authorities.

3. Consent and Withdrawal

3.1 Where we rely on consent, we will ask for it through a clear notice at the time of collection. You may withdraw consent at any time through Account > Privacy settings or by writing to info@studymedicug.com. Withdrawal will be as easy as giving consent.
3.2 Withdrawal does not affect processing done before it. If you withdraw consent that is necessary to provide a Subscription, we may be unable to continue providing it, and the Refund Policy will apply.

4. Children

4.1 Where a User is below 18 years of age, we process personal data only after obtaining verifiable consent of the parent or lawful guardian in the manner required under the DPDP Act.
4.2 We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children, and do not process their personal data in any manner likely to cause a detrimental effect on their well-being.

5. Sharing of Personal Data

5.1 We do not sell your personal data. We share it only as follows:
- (a) With service providers acting as our Data Processors under contract (such as payment gateways, cloud hosting, video delivery, SMS, email and WhatsApp messaging, customer-support, and analytics providers), solely to provide services to us.
- (b) With EMI or financing partners, where you choose to pay through them.
- (c) With intermediaries, law-enforcement agencies, courts, and regulators, where required by law or for the detection, investigation, and prosecution of Piracy, fraud, or other unlawful acts.
- (d) With a successor entity in the event of a merger, acquisition, or transfer of business, subject to this Policy.
5.2 Personal data may be processed outside India through our service providers, except to any country restricted by the Central Government under the DPDP Act.

6. Retention

We retain personal data only for as long as necessary for the purposes outlined in Clause 2, or as required by law (including tax and accounting records), and for any longer period needed to establish or defend legal claims, including in respect of Piracy. Thereafter, it is erased or anonymised.

7. Security

We implement reasonable security safeguards—including encryption, access controls, and monitoring—to protect personal data against unauthorised access and breach. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Users as required under the DPDP Act.

8. Cookies and Analytics

Our website and app use cookies, SDKs, and similar technologies to keep you logged in, remember preferences, secure the Platform, and understand usage. You can manage non-essential cookies through your browser or device settings; essential cookies are required for the Platform to function.

9. Your Rights

Subject to the DPDP Act, you have the right to:

(a) Obtain a summary of the personal data we process and the processing activities.
(b) Correct, complete, update, or erase your personal data, subject to retention required by law.
(c) Withdraw consent.
(d) Have your grievances redressed.
(e) Nominate another person to exercise your rights in the event of your death or incapacity.

How to exercise your rights: Write toinfo@studymedicug.comfrom your registered email. We may verify your identity before acting on a request.

10. Grievance and Contact

10.1 For any question, request, or grievance about your personal data, please contact us at:
- Email: info@studymedicug.com
- Phone: +91 81380 01236 (Monday to Saturday, 10:00 to 18:00 IST)
- We will acknowledge your request within 48 hours and respond within the time prescribed under the DPDP Act.
10.2 If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India after exhausting the grievance process with us.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified on the Platform or by email before they take effect. The effective date at the top shows when it was last updated.

ANTI-PIRACY AND UNAUTHORISED DOWNLOAD POLICY

Effective date: 03-11-2026 · Version: 1.0

StudyMBBS follows a zero-tolerance policy on Piracy. Every account is individually watermarked and monitored. Any leak traced to your account will lead to permanent termination without refund, a claim for liquidated damages, and civil and criminal action. This Policy forms part of the Terms and Conditions; capitalised words have the meanings given there.

1. What Counts as Piracy

1.1 “Piracy” means any of the following acts, done by you, through your Account or with your assistance, in respect of any Content, in whole or in part, whether or not for payment and whether or not any person actually accesses the result:

(a) Download: Downloading, saving, storing offline, caching, exporting, or extracting any Content, in whole or in part, by any means whatsoever. No download of Content is permitted under any circumstances, and every download is unauthorised.
(b) Recording and capture: Screen-recording, screen-capture, screenshot, audio recording, filming or photographing a screen, or transcribing Content, by any software, device, second phone, or camera.
(c) Reproduction: Copying, printing, scanning, photocopying, retyping, or reproducing Content, including printed notes.
(d) Distribution: Uploading, posting, forwarding, sharing, emailing, selling, renting, lending, streaming, or otherwise making Content available on any website, app, cloud drive, social media, Telegram or WhatsApp channel or group, torrent, peer-to-peer network, pen drive, or other medium.
(e) Account sharing: Allowing any other person to use your Account, credentials, or OTP, or using another person’s Account, including within a family, hostel, study group, or batch.
(f) Circumvention: Bypassing, disabling, or tampering with encryption, DRM, device limits, screen-capture blocking, watermarks, or any other technological protection measure or rights management information.
(g) Derivative use: Preparing notes, question banks, summaries, flashcards, videos, or courses from Content for others, or using Content to train or prompt any AI model or tool.
(h) Receiving pirated Content: Knowingly obtaining, downloading, buying, or using Content from any source other than the Platform.
(i) Abetment: Attempting, abetting, facilitating, conspiring in, or advertising any of the above.

1.2 Personal study notes handwritten or typed by you, in your own words, for your own use only, are not Piracy, provided they do not reproduce questions, explanations, images, or text from the Content and are never shared.

2. Detection, Watermarking, and Evidence

2.1 Every stream and printed copy carries visible and/or invisible forensic watermarks that identify the Account, User, device, and time of access. We also use device fingerprinting, concurrent-session monitoring, IP and location analysis, screen-capture detection, automated web and channel monitoring, and reports from Users and third parties.
2.2 By using the Platform, you consent to these measures and to the processing of the resulting data for detecting, investigating, and proving Piracy and for legal proceedings.
2.3 Presumption: Where any Content found outside the Platform carries a watermark or other identifier traceable to your Account, it shall be presumed, unless you prove otherwise, that the Content was obtained through your Account and that you committed or permitted the Piracy. You are responsible for every act done through your Account, including by family members, friends, roommates, or any person to whom you disclosed your credentials.
2.4 Our system logs, watermark reports, and forensic records, duly certified as required under section 63 of the Bharatiya Sakshya Adhiniyam, 2023, shall be admissible as evidence in any proceedings.

3. Enforcement Ladder

Level	Trigger	Action We May Take (Cumulatively)
Level 1 — Warning	Suspected sharing: concurrent sessions, unusual device or location changes, first device-limit breach	Logout of all sessions, device reset, re-verification by OTP/ID, written warning.
Level 2 — Suspension	Repeat of Level 1, or confirmed sharing of credentials without distribution	Suspension for up to 30 days with no extension of Validity Period; restriction to one device; final warning.
Level 3 — Termination and Action	Any act under clause 1.1(a), (b), (c), (d), (f), (g) or (h); any sharing after a final warning; any act for commercial gain	Immediate permanent termination of all Accounts and Subscriptions without refund; blacklisting from future purchase by the User, device, and payment instrument; liquidated damages under clause 4; civil and criminal proceedings.

We may go directly to Level 3 where the facts justify it. Before acting at Level 3, we will (except where urgent action is needed to stop ongoing distribution) give you notice of the allegation and 7 days to respond in writing. Our decision after considering any response is final, subject to your rights under Clause 17 of the Terms.

4. Liquidated Damages

4.1 Piracy causes the Company loss that is real but difficult to quantify precisely, including lost subscription revenue from every person who obtains Content without paying, devaluation of the Content, and the cost of detection, investigation, takedown, and re-production of compromised Content.
4.2 The parties agree that the following is a genuine pre-estimate of that loss, and you agree to pay it on demand for each act of Piracy at Level 3:
- (a) For account sharing, or any download or recording without proven distribution: the higher of ₹10,00,000 or 200 times the list price of the Subscription concerned; and
- (b) For any distribution under clause 1.1(d), or any act for commercial gain: the higher of ₹50,00,000 or 500 times the list price of the Subscription concerned, for each distinct channel, group, website, or recipient to which Content was made available.
4.3 Liquidated damages are in addition to, and not in substitution for, the Company’s right to an injunction, delivery up and destruction of infringing copies, an account of profits, recovery of costs of investigation and legal proceedings, and any compensation or penalty under law. They are payable jointly and severally by every person who committed or abetted the Piracy and, in the case of a Minor, by the parent or guardian.

5. Legal Provision Binding on the User

Piracy may constitute infringement of copyright and an offence under the following laws, among others, and the Company will pursue all available remedies:

(a) Copyright Act, 1957: Civil remedies under section 55 (injunction, damages, accounts); the offence of infringement under section 63, punishable with imprisonment of six months to three years and a fine of ₹50,000 to ₹2,00,000, with enhanced punishment on a second conviction under section 63A; circumvention of technological protection measures under section 65A and removal of rights management information under section 65B, each punishable with imprisonment up to two years and fine.
(b) Information Technology Act, 2000: Compensation under section 43 for downloading, copying, or extracting data from a computer resource without permission, and the offence under section 66, punishable with imprisonment up to three years or fine up to ₹5,00,000 or both.
(c) The Bharatiya Nyaya Sanhita, 2023: Where the facts disclose cheating, cheating by personation, criminal breach of trust, or other offences.

6. Takedown and Third-Party Platforms

6.1 We will issue notices to intermediaries—including social media platforms, messaging services, hosting providers, search engines, and app stores—under section 79 of the Information Technology Act, 2000 and the IT Rules, 2021, and under the Copyright Act, 1957, for removal of pirated Content and disclosure of the identity of uploaders, and may seek injunctions, including against unknown persons, to block infringing channels and websites.
6.2 You consent to our sharing your Account details and evidence of Piracy with such intermediaries, law-enforcement agencies, and courts for these purposes.

7. Reporting Piracy

If you come across StudyMBBS Content anywhere outside the Platform, report it to antipiracy@studymedicug.com or through Account > Report Piracy, with the link, channel name, or screenshot.

Reports are kept confidential. Verified reports leading to takedown may, at our discretion, be rewarded with a Subscription extension or credit. Making a knowingly false report is a breach of the Terms.

8. No Refund and No Waiver

No refund, pro-rata or otherwise, is payable on suspension or termination under this Policy. Our forbearance in acting against any instance of Piracy is not a waiver of our rights against that or any other instance.