Privacy policy

Last updated: 13 September 2026

This policy describes AI Business Karo (formerly Bharat Builders, unchanged package com.bharat.builders), operated by Gaurav Panwar. The name change does not create a different account or operator. For privacy questions or requests, contact nextlearning123@gmail.com.

Information used by the app

Account and sign-in: your mobile number, Firebase account identifier (UID), authentication/session information and the profile name you choose. Firebase/Google verifies the number by SMS. Google may store and use phone numbers for spam and abuse prevention across its services.
Learning progress: lesson identifiers, playback position, completion status and update times, to save and restore progress locally and, where synchronization is available, in your account.
AI Helper requests, where available: selected category/course, request details, status, messages, timestamps and reference identifiers. Authorized staff use successfully submitted information to review and manually fulfil requests. Local drafts are not automatically submitted.
Attachments — uploads disabled: the intended feature handles only PDF or image files you select through Android’s file picker, with display name, type and size. It does not require access to your entire photo library or device storage. This description does not mean uploads are currently accepted. If enabled later, do not upload files you lack permission to share or unnecessary sensitive information.
Access and subscriptions: entitlement status, expiry, source and reference information. Google Play purchase/subscription references and verification/status information are used to provide and manage paid access. Google Play handles checkout and payment details; the app does not ask you to send card details or payment PINs to us.
Support and security: information you send by email, relevant request references, limited operational/security logs and staff audit records. Infrastructure providers may process IP addresses, request times and device/network information needed to deliver and protect their services.

On-device and online storage

Local drafts and progress stay on the device until a connected feature submits or syncs them. The current app requires phone/OTP sign-in and a server-verified entitlement for learning and AI Helper access; there is no guest browsing. The app keeps account-specific caches and Firebase manages sign-in persistence. Clearing the local cache removes local copies and unsynced drafts, not online records or the original files you selected. Signing out is not account deletion.

Supabase supports signed-in profiles and, when the corresponding actions succeed, synchronized progress, submitted requests and messages. Private attachment storage is part of the intended Supabase flow, but uploads are currently disabled. Video access is checked by the backend and private course videos are delivered through Cloudflare Workers and private R2 storage. Authentication information is sent as part of protected requests, not in public video links.

Why we use this information

We use it to verify account ownership, operate accounts, save progress, check video access, respond to requests, provide support, manage subscriptions, prevent misuse and meet applicable legal obligations. AI Helper requests are reviewed and fulfilled manually by our internal team, not sent to an external AI service. It is not an automatic AI chat service. Do not submit medical records or sensitive patient information; the service provides business education and assistance, not medical advice, diagnosis or treatment.

Service providers and sharing

Google/Firebase: phone authentication, account/session handling and abuse prevention. See the Google Privacy Policy.
Supabase: the application backend and database, and private attachment storage when enabled. See the Supabase Privacy Policy.
Cloudflare: website hosting and protected course video delivery/storage. See the Cloudflare Privacy Policy.
Google Play: checkout and subscription administration, subject to Google’s policies and the checkout terms.
Email service providers: processing support messages sent to our support email.

Authorized staff can access relevant submitted requests and any stored attachments to provide the service. We do not sell personal data. Information may also be disclosed where required by law or necessary to protect accounts and address misuse. Providers may process data outside your country, subject to their applicable terms and safeguards.

Security

Connected production requests use HTTPS encryption in transit. Private videos require authenticated access and authorization checks; the intended private-attachment feature uses access checks too. These protections are not a claim of end-to-end encryption or a guarantee against every security risk. Never send passwords, one-time passwords (OTPs), recovery codes or payment PINs to support.

Retention and deletion

Account information is kept while needed to operate your account and the services you request, or for the limited purposes below. You can request deletion by email or use in-app deletion where available; see our account-deletion instructions. The deletion process covers your academy profile, progress, requests, messages, any stored private attachments and related access/subscription records, and then your Firebase sign-in account. An isolated live test on 13 September 2026 verified account deletion, private attachment cleanup, subsequent access denial and Firebase account deletion for a disposable test account. This does not guarantee completion in every version or during service failures. If a step fails, deletion may remain pending until cleanup or a retry succeeds.

Limited hashed account tombstones are retained to prevent a deleted identity from regaining access. Limited security/audit records, including hashed staff actors on other requests, may remain for abuse prevention and accountability. Temporary attachment-cleanup metadata remains until cleanup succeeds. Records required by law, or needed to resolve a legal dispute, may be retained for those purposes. These are limited exceptions, not continued use of deleted profiles for ordinary service delivery.

Provider-held records and backups follow their applicable retention and legal obligations. There is no promise here of immediate removal from every provider backup. Email us for information about retention relevant to your request. Deleting an account does not cancel a Google Play subscription or erase Google’s transaction records.

Your rights and choices

Phone/OTP sign-in is mandatory, followed by paid membership for learning and AI Helper access; existing verified entitlements, including separately approved reviewer access, are recognized by the service. There is no guest browsing. You can choose whether to use optional features, update your profile name where available, clear local caches and request account deletion. Privacy, terms, support, cancellation, sign-out and account deletion remain accessible without buying membership. Attachment uploads are currently disabled.

Contact nextlearning123@gmail.com to request access to your personal information, correction of inaccurate information, deletion, or withdrawal of consent for optional processing. Where applicable law provides them, you may also request a portable copy, restriction of processing, or object to processing. Withdrawing consent does not undo earlier lawful processing and may prevent use of features that need that information.

We verify ownership using proportionate information before providing account data or processing deletion; we never ask for your passwords or OTPs. We will explain any information needed, applicable limitation or lawful reason a request cannot be fully granted, and respond within any time limits required by applicable law. You can raise a grievance with Gaurav Panwar at the support address and, where available under applicable law, complain to the competent data-protection authority. These contact routes do not limit your statutory rights.

Analytics, advertising and this website

No analytics or advertising SDK is currently configured in the app. This static website includes no tracking scripts, forms or site-set cookies. Hosting providers still process the technical requests needed to serve and secure the site. Following an external link or emailing support is subject to the relevant provider’s privacy practices.

Policy updates

We will update this page when practices change and revise the date above. Material changes will be communicated where required. Questions can be sent to nextlearning123@gmail.com.