Privacy Policy

1. Who this policy covers

Baba Dukhharan Nath Foundation (“BDN,” “we,” “us,” or “our”) operates BDN Academy, the Health Protector Android app, our websites, landing pages, courses, workshops, and learner-support channels. This policy explains how we handle personal information when you use those services.

This is an operational transparency notice. It does not replace any rights that apply to you under law or the terms of a third-party service you choose to use.

2. Information we collect

We collect information you provide directly, including:

• account details such as your name, email address, mobile number, and login information;
• optional learner-profile details, including WhatsApp number, date of birth, gender, address, education, employment, skills, languages, learning goals, preferences, and communication choices;
• learning records, including enrolments, video progress, quiz answers and attempts, achievements, certificates, and course-completion information;
• payment and billing information needed to process or verify a course purchase or subscription, such as payment status, amount, transaction or UTR reference, payer details, invoice information, and any manual-payment note or proof you send;
• messages, feedback, support requests, and information you include in AI Tutor conversations; and
• workshop or landing-page forms, including WhatsApp number, city, state, interests, campaign details, UTM parameters, referrer, and page URL.

Please do not send bank-card credentials, account passwords, or unnecessary medical information in support requests, WhatsApp messages, or AI Tutor conversations.

3. Website and Android app information

When you use the website or Android app, we process technical and service information needed to run it. This can include an app installation identifier, device-session information, device name, Android version, app version, route or page information, network status, and security or authentication events.

If you enable notifications, the Android app registers an Expo push token, the installation identifier, app version, and your notification preferences so that we can send learning reminders, announcements, payment updates, and certificate alerts. You can turn off notifications in the app or in Android settings.

The app keeps a refresh token and installation identifier in Android secure storage. It may keep limited non-sensitive cache data, your theme and language choices, quiz drafts, and a short offline queue of learning-progress updates on your device so that the app can work more reliably. Account-specific cached data and quiz drafts are cleared when you sign out or permanently delete your account.

4. How we use information

We use personal information to:

• create, authenticate, secure, and administer accounts;
• provide courses, learning progress, quizzes, certificates, and learner support;
• process payments, review manual payment requests, and issue invoices;
• send service messages, reminders, announcements, and, where appropriate, offers or workshop updates;
• prevent fraud, investigate misuse, maintain security, and meet legal or accounting obligations;
• answer AI Tutor questions using the message, recent conversation, and relevant course context; and
• understand campaign performance and improve our services.

Completing the extended learner profile is not required simply to sign in or access an enrolled course. Profile information is not automatically included in AI Tutor prompts.

5. Analytics and crash reporting

Our landing pages may use advertising or measurement tools such as Meta Pixel to measure page views, button clicks, form starts, lead submissions, and WhatsApp-group clicks. These events help us measure campaign performance and improve communication.

When enabled in a production Android release, PostHog may receive limited product-usage events and screen names, along with a pseudonymous account identifier and role. Mobile telemetry is enabled only for users who select the 18+ age band. The app uses a limited allow-list of event properties, does not enable session replay, and disables PostHog geo-IP lookup.

When enabled, Sentry may receive crash and error reports to help us diagnose app failures. The app is configured to remove request cookies, request bodies, headers, query strings, and sensitive fields before sending a report, and uses an account identifier rather than your name, email address, or phone number where a user reference is needed.

6. Service providers and sharing

We do not sell your personal information. We share information only as needed to operate our services, at your direction, to meet legal obligations, or to protect people and the platform. Depending on the feature you use, this can include:

• PhonePe and payment-related providers for payment processing and verification;
• OpenAI for AI Tutor and AI-assisted course functions;
• YouTube and other video providers for course playback;
• Expo for Android push-notification delivery;
• PostHog and Sentry when the corresponding analytics or crash-reporting feature is enabled;
• Google Sheets for configured workshop or lead follow-up workflows;
• Meta for configured campaign measurement, and WhatsApp when you choose to contact or join us there; and
• email, hosting, database, security, and support providers that help us operate BDN Academy.

These providers process information under their own terms and privacy notices. Some may process information outside India. We limit access to authorised BDN team members and service providers who need the information for the purposes described in this policy.

7. Security and retention

We use reasonable technical and organisational measures designed to protect information, including authenticated access, secure token storage on Android, access controls, and minimisation of analytics and error-reporting fields. No online service can guarantee absolute security.

We retain information only for as long as needed for the purposes above, to resolve disputes, and to meet legal, accounting, fraud-prevention, or security requirements. Retention periods can vary by record type and legal obligation.

9. Your choices and requests

Subject to applicable law, you may ask us to access, correct, update, or delete personal information we hold about you. You may withdraw optional permissions, such as Android notifications, in your device settings. You may opt out of promotional communications by telling us through the relevant channel; account, payment, security, and other service communications may still be sent when necessary.

To make a privacy request or complaint, contact us with your name, account email or mobile number, a description of the request, and any relevant details. We may need to verify your identity before acting on the request.

10. Children and teenagers

The platform is not intended for children under 13. Users aged 13 to 17 may use it only with parent or guardian consent and supervision. Mobile analytics and crash reporting are disabled for users who select the 13–17 age band. Parents or guardians may contact us about a minor's information or account.

11. Contact us

Baba Dukhharan Nath Foundation
Tedi Bazar, near Bharat Milap Chowraha, Gonda, Uttar Pradesh 271001
Email: bdnath1008@gmail.com
WhatsApp: +91 80052 66434

12. Changes to this policy

We may update this policy when our services, data practices, or legal requirements change. We will post the revised policy on this page and update the date above.