Skip to content

Privacy notice

Last updated 11 November 2026

FlowPrep holds a student's first name, date of birth and everything they do while studying here. That history is the service: the tutor reads it to decide what to say next.

There are no ads in the app, and we do not sell your data. We run no third-party behavioural tracking on a child's account.

A student can download a copy of their data, or delete their account, from their own settings.

Questions and complaints go to privacy@flowprep.in. We confirm we have them within 48 hours.

Who we are

FlowPrep is a study service for students preparing for the JEE and NEET examinations in India.

It is operated by Streamforge LLP, a partnership registered in India with limited liability (LLPIN ADA-9879). Its registered office is at Aruviyil, Kudakkachira, Pala, Meenachil, Kottayam, Kerala 686635. You can write to us at support@flowprep.in.

This notice covers the website and the app, the emails we send, and the parent consent pages. It does not cover anything you reach by following a link away from us.

Who this is about

This notice covers three kinds of people. The rules differ for each.

The student
The person with the account, doing the studying. Almost everything below is about them.
The parent or guardian
If the student is under 18 and a parent or guardian has agreed to their account, the adult who agreed. A student can also invite a parent or guardian to the weekly progress email. Either way, they get it only if they ask for it. We hold their name, email address and how they are related to the student.
Someone on the beta list
Anyone who left an email on our website before the app opened, to hear when the beta starts. Only the section on the beta list is about them.

Indian law treats anyone under 18 as a child. The section on students under 18 sets out what that changes.

What we hold

How you sign in
An email address or an Indian mobile number. There is no password: you sign in with a code we send you, or through Google if you choose that. If you use Google, Google also shares the name and profile picture on your Google account with us.
Who you are
Your first name, your date of birth, the class you are in, the year you are sitting the exam, and whether you attend a coaching institute. We ask for a first name because the tutor uses it. We ask for a date of birth because some rules apply only to people under 18, and we need to know whether you are one.
Your guardian, if you are under 18
Their full name, email address and how they are related to you.
A parent you invite
If you invite a parent or guardian to your weekly progress email and give us their email address, we use it only to send them the invite. The invite link works for 7 days.
Your studying
Every question you attempt, the answer you gave, how long you took, which hints you opened, which learning units and sections you read, which competitions you entered, the picture of your strengths and gaps that we build from all of it, the study time you log with the timer or add yourself, your daily study list, the questions you save to your notebook, the mock test scores you enter, the doubts you ask from a photo, with your working and their worked solutions, and your syllabus checklist: which chapters your coaching has covered, how many times you have revised each, and how sure you feel about it.
What you write for yourself
Your chapter notes, and the notes you write on questions you save to your notebook: what kind of mistake it was, why it went wrong, and a rule for next time. They are not shown to your guardian or the tutor.
Your conversations with the tutor
The messages you send and the replies you get back, kept so the tutor can pick up where you left off.
Your settings
Theme, reading size, whether animations move, the time of day you asked to be reminded, whether you get the weekly review email, whether the tutor writes in simpler English, whether the exam countdown is on, an exam date if you set one, and your daily study goal.
Reminders, if you turn them on
If you switch on the daily reminder, we keep the address your browser gives us for sending a notification to that device, and the days a reminder was sent. We send at most one reminder a day, as a notification or an email, and only while it is switched on. A notification reaches you through the notification service your browser uses.
Payment records
Which plan you are on, whether it is active, the dates you have paid for, and the payment record our payment provider sends us. That record includes the email address, phone number and UPI ID used to pay. We never see your full card number, bank password or UPI PIN.
Technical records
Server logs of the requests your device makes to us, with its internet (IP) address and the kind of browser and device used, kept for security, for fixing faults and as the law requires. When you or a parent give or take back consent, we also keep that address with the consent record.

The app does not ask for your location or your contacts, and it carries no advertising identifiers.

Why we hold it, and what you agreed to

We ask for three separate permissions. Nothing is ticked in advance, and none of them is bundled with another. Each can be taken back on its own.

Learning data (required)
Practice attempts, hints, progress by topic, the study time you log and your daily study list, the questions you save to your notebook and your notes on them, your chapter notes, your syllabus checklist, your mock test scores, your doubts, and the tutoring conversations that go with them. This one is the service itself. Without it there is nothing to use, which is why it is the only one we insist on. Counted across all students without names, it also helps us improve how questions are chosen and decide which questions we write next.
Weekly progress emails (optional)
A short summary of effort and progress, sent once a week. It carries no question content and no part of any conversation. Saying no to this changes nothing else.
Product-improvement analytics (optional)
How you use the app, such as which screens you open, so we can see what to improve. We do not collect it on an account belonging to someone under 18, and if we cannot tell how old someone is, we treat them as under 18.

We keep a record of what you agreed to and when. You can withdraw in the same place in your settings, as easily as you agreed.

We also send emails about your account that you cannot turn off while it is open, such as sign-in codes, payment receipts and notices about changes to these pages.

When data no longer identifies anyone, such as counts across many students, we may keep it and use it for any purpose, for example research and making FlowPrep better.

The AI tutor, and what leaves us

The tutor runs on AI models from companies outside India.

What we send: the question you are working on, the parts of your progress that are relevant to it, and the conversation so far. Your first name goes with it, because the tutor speaks to you by name. We do not send the AI your date of birth, email address, mobile number, guardian's details or payment records.

If you speak to the tutor instead of typing, your voice leaves us too, and a voice is personal, so it only happens when you press the microphone. The recording goes to the AI service that turns speech into text. We keep only the text, which becomes your message like anything you type. We do not keep the recording.

If you add a photo of a question or of your working, the photo goes to one of our AI providers. The photo is turned into text and, for a question, used to work out its answer. We keep the text, which becomes your doubt or part of your rough work, like anything you type. We do not keep the photo.

Our agreements with our AI providers do not allow them to use what we send to train their models.

The tutor can be wrong, and there is a report control on every reply. If you report a reply, our team can see that conversation.

The safety check on your messages

Every chat message you send the tutor is checked by a program for words and phrases that suggest you may be in danger or in serious distress. The check happens before the tutor answers. It runs on every account, adult or child, and you cannot turn it off.

If a message matches, the tutor does not reply to it. You get a fixed reply instead, with the helplines below.

We keep a record of it: your account, the words that matched and the time. Our team may look at these records, for example to check that the safety check works. This check does not send an alert to your parent or guardian, and the record appears in no report. We share it where the law requires us to, for example to report the sexual abuse of a child to the police.

These services are free and open at any hour. You do not have to be in a crisis to call the mental health helpline. Call the emergency number when someone is in danger right now.

Tele-MANAS
Call 14416 or 1800 891 4416. Open 24x7, run by the Ministry of Health and Family Welfare, Government of India.
Emergency Response Support System
Call 112. Open 24x7, run by the Ministry of Home Affairs, Government of India.

Who else handles your data

Other companies do some jobs for us. Our agreements with them limit what they can do with your data. Below is each job and where your data goes for it.

  • Database

    Mumbai, India

    Stores your account and everything you do while studying

  • App server

    Mumbai, India

    Runs the app and our website, and keeps their request logs

  • AI services

    United States and other countries

    Run the tutor and every other AI feature, and turn spoken questions and photos into text

  • Usage counters

    Mumbai, India

    Short-lived counters that stop the service being overused

  • Background jobs

    Region not yet chosen

    Runs scheduled work such as weekly reports and deletions

  • Payments

    India

    Takes payments. We never see your full card number or UPI PIN

  • Email delivery

    United States

    Sends the emails we send you

  • Error monitoring

    United States

    Tells us when the product breaks. We remove personal details from these reports as far as we can

  • Product analytics

    United States

    Only for adults who agreed to it. Not for accounts under 18

  • Network and backups

    Region not yet chosen

    Runs our domain and carries visitors to our website. Also holds our backups, which are encrypted before they leave us

  • Email inbox

    Worldwide

    Receives mail sent to our contact addresses

  • Beta list server

    Mumbai, India

    Keeps the beta list before the app opens

2 of these have no region yet, because we have not chosen where to run them. We will add each region here before the app opens to the public.

To find out which companies have handled your data, write to privacy@flowprep.in and we will tell you.

We give data to the police, a court or a government body when the law requires it. We may also share it when we need to protect our legal rights, stop fraud, or protect someone's life or health in an emergency.

If the business that runs FlowPrep is merged with or sold to another company, your data passes to that company, and this notice still applies to it.

We do not sell your data, and nothing from the app goes to advertisers.

Where your data is kept

Your account and your study history are stored in Mumbai, and so are the short-lived counters that keep the service from being overused.

Some of the services in the list above are outside India. The AI services run in the United States and other countries. Email delivery, error monitoring and product analytics are in the United States. Mail sent to our contact addresses can be kept anywhere in the world.

Keeping your data safe

We protect your data with reasonable security practices, such as encryption and access only for the people who need it. No system is completely secure, so we cannot promise that nobody will ever get into your data without permission. If a breach affects your data, we will tell you as the law requires.

How long we keep it

We keep your data only for as long as we need it for the reasons in this notice. Some of it we delete while your account is still open, once we no longer need it. When you close your account, we delete the rest, or change it so it no longer identifies you. We keep some records for longer where the law requires it, such as payment records for tax, or where we need them to settle a dispute, stop fraud or keep the service safe.

The free-trial check
To stop one email address or phone number getting a second free trial, we keep a scrambled code made from it. The code cannot show the address or number. We keep it for as long as we offer a free trial, and it can stay after the account is deleted.

We keep encrypted backups so your work is safe if something fails. After a deletion, your data can stay in those backups until they are replaced in the normal way.

Your rights, and how to use them

You can use these rights at any time. Most of them are buttons in your settings. If you write to us instead, we may ask you to show that the account is yours before we act.

Get a copy of your data
Settings, then Download my data. We email a copy of your data to an address you have proved is yours. If your account has no email address yet, add one in your settings first.
Correct something wrong
Your name, class year and exam year are editable in settings. For anything else, write to us and we will correct it if it is wrong.
Delete your account
Settings, then Delete my account. You have seven days to change your mind, and then it goes. We delete your name, date of birth, guardian's details, conversations, notes, doubts and reports. A few things stay. Your practice answers stay, with your identity replaced by a random number, because they show how hard each question is. Your consent record and our audit log stay, as proof that we acted lawfully. Payment records stay, because tax and accounting law requires us to keep them. A scrambled code made from your email address or phone number stays, so the same address or number cannot get a second free trial. We also keep anything else the law requires us to keep.
Withdraw consent
Each of the three permissions can be taken back on its own. Withdrawing the required one stops the account and starts the same seven-day deletion clock, and we say so on the screen before you do it.
Nominate someone
Write to us to name a person who can use your rights for you if you cannot.
Complain
The section on complaints explains how, and what we promise about answering.

Students under 18

Many students preparing for JEE and NEET are under 18, and FlowPrep is built with them in mind.

  • If you are under 18, we will ask a parent or guardian to agree before you use FlowPrep once the law requires it, which is from 13 May 2027. Until then, use FlowPrep with your parent's or guardian's permission. Every protection in this section applies to your account either way. When we ask, we check that the person agreeing is an adult, as the law requires, and we keep a record of what they agreed to.
  • A parent or guardian can withdraw at any time, using the link in the consent email we send them. Withdrawing stops the account.
  • There are no ads in the app, for anyone of any age.
  • We run no third-party behavioural tracking on a child's account at all. Where we cannot tell how old an account holder is, we treat them as a child.
  • We do not profile a child for anything except the teaching itself. The picture we build of your strengths and gaps is used to choose your next question, to shape the tutor's help, to show your progress to you and in the weekly report (to your parent or guardian), to decide when you are ready to take part in practice competitions, and to place you with students whose strengths are like yours in them. Counted across all students without names, it also helps us improve how questions are chosen and decide which questions we write next.
  • Our team reads a student's conversations with the tutor only when needed, for example for the safety check described above, a problem the student reported, or a support request they sent us.
  • We do not show a student's name on a public leaderboard or in our marketing without their agreement. If they are under 18, we also need their parent's or guardian's agreement.

Complaints, and our grievance officer

Our grievance officer is Chris Thomas Saji, Co-founder, FlowPrep, at privacy@flowprep.in.

We confirm we have your complaint within 48 hours, and we send you our answer within one month.

It helps to tell us which account it is about and roughly when it happened.

If you are not happy with our answer, or we do not answer in time, you can then complain to the Data Protection Board of India.

Cookies

Our website, not the app, uses cookies and similar tools, including Google Analytics, to count visits, see how people use our pages and measure our ads.

Information collected through them also goes to Meta, Google and Microsoft. Meta may use it for measuring and targeting ads. Microsoft may use it for Microsoft Advertising, under its privacy statement at privacy.microsoft.com/en-us/privacystatement. Google explains its use at google.com/policies/privacy/partners.

You can block cookies in your browser settings. To opt out of ads based on them, use aboutads.info/choices.

The beta list

Before the app opens, anyone can ask us to tell them when the beta starts. If you do, we keep the email address you give us, the date you joined, which of our links brought you if it carried our tag (for example, one of our Instagram ads) and, if you choose them, the exam and the class you pick. We do not ask for your name.

We use it to email you when the beta opens, and to see which of our posts and ads bring people to us. We do not sell it, and we do not give it to other companies for their own use.

The list is kept on a server in Mumbai, apart from student accounts.

We delete the list no later than 12 May 2027. To be removed sooner, write to privacy@flowprep.in and we will remove you.

If this notice changes

The date at the top is the last time anything here changed. If we change something that affects what we do with your data, we will tell you in the app or by email, and we will ask for your agreement again where the law requires it.