Privacy Policy

Purpose

MBS Guru ("MBS Guru", "we", "us" or "our") respects the privacy of students, educators, parents/guardians, visitors and other users of our platform. This Privacy Policy explains how we collect, use, store, process, share and protect personal information when you access or use the MBS Guru website, applications, courses, services and related facilities.

Who we are

The MBS Guru website (mbsguru.com) and the MBS Guru apps, including the MBSGuru app on the Apple App Store, are operated by Digital Hub Solution Private Limited (CIN: U74999DL2018PTC336239; registered office: Office No. 201, Plot No. 20, Third Floor, Parmesh Business Tower, Karkardooma Community Centre, Delhi 110092, India). In this Privacy Policy, "MBS Guru", "we", "us" and "our" mean Digital Hub Solution Private Limited.

Educators, coaches and institutes ("academies") use MBS Guru to run their own courses. When you join an academy, that academy decides which of your personal information it uses for its courses and why, and it is responsible for that use; MBS Guru processes that information on the academy's behalf to provide the service. Each academy's own privacy policy and terms are shown in the app under Settings › Legal. This Privacy Policy explains what MBS Guru itself does.

Information We May Collect

Depending upon your use of the platform, we may collect: name, email address, mobile number and contact details; student/educator profile and registration information; educational, academic and course-related information; course enrolment, attendance, assessment and learning-related information; information and materials uploaded by educators; communications, queries, feedback and support requests; transaction, invoice, subscription and payment-related information; device, browser, IP address, login and technical information; cookies and similar technologies; and other information voluntarily provided by you or required to provide the requested service.

What our apps and website collect in practice

• Account: your name, e-mail address and password (stored only as a one-way hash) and, if you add them, your phone number, age, gender, profile photo, job title, bio and social-media links. If you turn on two-step sign-in, we store the secret it uses.
• Learning activity: the courses and batches you enrol in, the lessons you complete, your quiz answers and results, the certificates issued to you and the live classes you join.
• What you post: course reviews, lesson questions and replies, reports you make about content, and the people you block.
• Support: what you send us through the Help & support form, including any name, e-mail address or phone number you enter, and account-deletion requests.
• Purchases: your orders, invoices, cart and wishlist. In the iPhone app, purchases are made with Apple In-App Purchase: we receive Apple's signed transaction record and an anonymous account token generated from your account number, never your card or bank details.
• Device and technical information: your device model and operating-system version; a push-notification registration token (see "Push notifications and device identifiers"); and the IP address and app or browser identifier recorded when you accept our terms, when you take an action that we log for security, and when you sign in or join a live class on our website.
• If you run an academy (owners and staff): the course material you upload or link (images, video, audio, documents, quizzes and links); the names and e-mail addresses of the students and staff you add; the announcements and direct messages you send; your payout details (account holder name, bank account number and IFSC, UPI ID or PayPal e-mail address) and your withdrawal requests; and your live-class schedules, attendance records and recording links. If the coach application form on our website asks for them, also the certificate and identity document you upload with your application.

Our apps do not collect your location, your contacts or health data, and they do not use advertising identifiers. Searches you make in the app are used to show results and are not saved to your account.

Purpose of Processing

We may process information for creating and managing accounts; providing courses and educational services; connecting educators and students; managing enrolments and access; processing fees, payments, refunds and settlements; providing support; communicating service information; improving platform performance; preventing fraud and misuse; and complying with applicable laws and legal obligations.

How we use it in practice

• Running your account and courses: signing you in, showing your courses and progress, issuing certificates, delivering in-app and push notifications from your academy and about your account, and handling your support and deletion requests.
• Recommendations: the "Recommended for you" list on the app's home screen shows courses from the same academy in the categories of the courses you are enrolled in.
• Security and records: keeping activity and consent records, including IP addresses, to protect accounts, investigate misuse and show that you accepted our terms.
• E-mails to academy owners about MBS Guru: if you run an academy or hold an MBS Guru plan, we e-mail you about that plan (for example trial welcome and trial-ending reminders, plan expiry and renewal reminders, add-on activations and referral rewards), and we may e-mail you news and offers about MBS Guru plans and features. You can turn off some of these e-mails in your notification preferences on our website, or write to info@mbsguru.com to stop all MBS Guru promotional e-mails. We do not use the contact details of an academy's students to market MBS Guru's own plans.

Consent and Data Rights

Where consent is required under applicable law, MBS Guru will seek consent through appropriate mechanisms. Users may have rights available under applicable data-protection laws, including rights relating to access to information, correction, withdrawal of consent and grievance redressal, subject to applicable law and legitimate exceptions.

Using your rights and withdrawing consent

• You can see and correct most of your account information in the app (Profile) or on our website.
• You can stop notifications at any time in your device settings (on iPhone: Settings › Notifications), and turn off some notification e-mails in your notification preferences on our website.
• You can delete your account at any time, as described under "Deleting your data" at the end of this page.
• For any other request (access to your data, correction, withdrawal of consent or a complaint), write to the Privacy Contact below. We respond within 30 days.
• If you joined an academy, you can also contact that academy about the information it holds; its contact details are in its own privacy policy (Settings › Legal in the app).

Withdrawing consent does not affect processing that took place before you withdrew it.

Sharing

MBS Guru may share information with authorized employees, educators, technology providers, hosting providers, payment service providers, communication providers, professional advisers, regulators, government authorities or law-enforcement agencies where necessary, permitted or required by law. MBS Guru does not sell personal information unlawfully.

Who receives your information

• The academy you join. It sees your name, e-mail address, phone number, profile photo, enrolments, progress, quiz results, purchases, live-class attendance and what you post in its courses, and it can send you announcements and messages.
• Apple: In-App Purchase in the iPhone app, and delivery of push notifications to Apple devices.
• Google Firebase Cloud Messaging: delivery of push notifications. It receives your device's push registration and the title and text of each notification.
• Hosting: our hosting provider, whose servers are in the United States, for our servers, file storage and backups.
• E-mail: our e-mail service providers, for account, course and notification e-mails. If your academy has set up its own e-mail sending, the academy's e-mails to you go through the academy's own e-mail provider.
• Video and live-class services that an academy chooses. When a lesson uses YouTube, Vimeo, Google Drive or another external link, the content plays from that service, which receives your IP address and device information and may set its own cookies, under its own privacy policy. Live classes run on the academy's own Zoom account and open in the Zoom app or your browser.
• Payment providers on our website and Android app: Razorpay and the other payment gateways shown at checkout, or the academy's own payment gateway where the academy uses one. The iPhone app uses Apple In-App Purchase only.
• Authorities and advisers, where the law requires it or as described above.

Before we share personal information with a service provider, we make sure it is bound to protect that information to the same or an equal standard as this Privacy Policy. Services that an academy chooses to use (such as YouTube, Vimeo, Google Drive and Zoom) process information under their own privacy policies.

Push notifications and device identifiers

After you sign in, the app asks whether you want notifications. It then sends us your device's push registration token, issued by Google Firebase Cloud Messaging, together with your device model and system version. To issue that token, the Firebase software in the app also shares an app-installation identifier and your device's Apple push token with Google. The app does this even if you decline notifications, so that switching them on later in your device settings works without signing in again; notifications are shown only if you allow them.

The token is linked to your account and to the academy you signed in to. We use it only to deliver notifications from your academy and about your account, never for advertising or tracking. The title and text of each notification (for example a class reminder, an announcement or the first words of a reply to your question) pass through Google and Apple on the way to your device.

We delete the token when you sign out, switch academy or delete your account, or when the push service tells us it is no longer valid. Turning notifications off in your device settings stops them being shown, but does not delete the token.

Where your information is processed

Some of the providers above process information outside India: Apple, Google (Firebase Cloud Messaging, YouTube and Google Drive), Vimeo and Zoom are based in the United States. Our own servers are located in the United States. We transfer personal information outside India only for the purposes in this Privacy Policy and as permitted by applicable law.

Payment Information

Payments may be processed through authorized third-party payment gateways or service providers. MBS Guru should not store sensitive card credentials such as CVV or full card details on its own systems unless specifically permitted by applicable law and regulatory requirements.

In the iPhone app, all purchases are made through Apple In-App Purchase. Apple processes the payment; we receive Apple's signed transaction record and never your card or bank details, and refunds for these purchases are handled by Apple. If you run an academy, the payout details you enter (account holder name, bank account number and IFSC, UPI ID or PayPal e-mail address) are stored on our servers so that your earnings can be paid out.

Security

MBS Guru maintains reasonable technical and organizational safeguards appropriate to the nature of information processed. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Retention

Personal information will be retained only for as long as reasonably necessary for the purposes for which it was collected, contractual requirements, legitimate business purposes, dispute resolution, security, regulatory requirements and applicable legal obligations.

The specific periods we apply, and exactly what happens when you delete your account, are listed under "Data retention" and "Deleting your data" at the end of this page. In short:

• Students who delete their account in the app: personal details are erased immediately.
• Academy owners and staff who delete their account in the app: the request is recorded, and the account and its personal data are deleted within 7 days, with confirmation by e-mail.
• Requests made through the form on our website or by e-mail are completed within 30 days.
• Some records stay after deletion, for example purchase and invoice records required by tax law, issued certificates and anonymised learning records, as listed at the end of this page.

Children's Data

Where the platform is used by children, MBS Guru will implement applicable requirements relating to children's personal data and parental/guardian consent as required by applicable law.

Cookies

MBS Guru may use cookies and similar technologies for authentication, security, analytics, preferences and platform functionality. Users may manage cookie settings through their browser or applicable platform controls.

Cookies, analytics and tracking

• Our apps contain no advertising, analytics or crash-reporting tools and do not track you across other companies' apps or websites. When a lesson plays a YouTube video, the YouTube player may store its own cookies on your device.
• Our website uses essential cookies to keep you signed in and secure. If you accept analytics cookies in the cookie banner, it also uses Google Tag Manager and the measurement tools it loads (today: Google Analytics 4) to measure visits and the performance of our own advertising. Until you accept, these tools are set not to use analytics or advertising cookies. The website also loads fonts from Google Fonts, and Google reCAPTCHA on its sign-in, registration and coach application forms.
• An academy's own website may use its own analytics tools; that academy's privacy policy applies.

Privacy Contact

Privacy and grievance contact: Digital Hub Solution Private Limited. Email: info@mbsguru.com. Address: Office No. 201, Plot No. 20, Third Floor, Parmesh Business Tower, Karkardooma Community Centre, Delhi 110092, India. MBS Guru may amend this Privacy Policy from time to time.

General contact: info@mbsguru.com

Effective date: 18 October 2026. When we make material changes, we will update this page.

Data retention

We keep personal data only for as long as we need it for the purposes in this policy or the law requires us to. These are the periods our systems apply today:

• Account data — name, e-mail address, phone number, postal address, age, gender, bio, social links and profile photo — kept while your account is open, and erased from your account when it is deleted (see "Deleting your data" below). Image files you uploaded as a profile or cover photo are no longer shown after deletion. The files themselves are not yet removed from storage automatically; we remove them when you ask us to.
• Learning records — course enrolments, lesson progress, quiz results and your place on your academy's student list — kept while your account is open. After deletion they stay on the anonymised account, without your name, e-mail address or phone number, so that your academy's records stay consistent.
• Purchase and invoice records — kept for at least 8 years after the transaction, because Indian tax and company law requires us to keep accounting records. They are not deleted automatically after that period; we review and delete them manually. After your account is deleted, these records are linked only to the anonymised account.
• Issued certificates — kept indefinitely, with the name printed on the certificate, so that anyone you shared a certificate with can still verify it.
• Security, activity and consent records — records of actions on your account and of your acceptance of our terms, including IP address and device or browser details, kept as evidence of security events and of your consent. There is no automatic deletion period for these records today; we keep them for as long as they may be needed as evidence.
• Application error logs — written to daily files that are deleted automatically after 7 days. One older general log file is not rotated automatically and is cleared manually.
• Support messages and deletion requests — kept for as long as we need them to answer you and to keep a record of what was asked. There is no automatic deletion period today; you can ask us to delete them.
• Records of failed background tasks — which can include an e-mail address, deleted after 30 days.
• Push-notification registrations — kept until you sign out, switch academy or delete your account, or until the push service tells us the registration is no longer valid. Turning notifications off in your device settings stops notifications being shown but does not remove the registration.
• Backups — we make backup copies of our database and files, for example before every update of our systems, so that we can restore the service after a failure. Data you delete remains in existing backup copies until those copies are deleted. Backups are used only to restore the service, never to bring a deleted account back.

We do not sell your personal data. Our apps contain no advertising or analytics tools and do not track you across other companies' apps or websites. How our website uses cookies, and how we e-mail academy owners about MBS Guru plans, is explained above.

Deleting your data

You can delete your account and the personal data attached to it at any time. There are three ways to do it:

• In the mobile app: Profile → Settings → Delete account, then confirm with your password.
• On the web: use our account deletion page, which works even if you have already uninstalled the app.
• By e-mail: write to info@mbsguru.com with the subject "Account deletion request".

Students: a deletion in the app takes effect immediately. We erase your name, e-mail address, phone number, postal address, age, gender, bio, social links and profile photo from your account, and delete your sign-in sessions, two-step sign-in secret, notifications, push-notification registrations, cart, wishlist, course reviews, lesson questions (with their replies), your own replies and your block list.

Academy owners and staff: a deletion in the app records your request. We delete the account and your personal data within 7 days and confirm by e-mail; you stay signed in until then. Your academy's courses, enrolments and sales records stay, without your name.

Requests made through the web form or by e-mail are completed within 30 days, and we e-mail you when the account has been deleted.

What stays after deletion: purchase and invoice records; your enrolments, progress and quiz results on the anonymised account; issued certificates with the name printed on them; security, activity and consent records; and copies in backups until they expire, all as described under Data retention above. Also kept, linked only to the anonymised account: messages exchanged with your academy, your support messages, reports you made about content, and (for academy owners) payout and withdrawal records.

Deletion is permanent and cannot be reversed. You will lose access to any courses you purchased, along with your progress.