NotesHub
Last Updated: June 15, 2026
---
Introduction
NotesHub ("we," "our," or "us") is a peer-to-peer academic marketplace that connects students who want to buy study materials with those who want to sell them. This Privacy
Policy explains what personal information we collect when you use the NotesHub mobile application, how we use it, with whom we share it, what rights you have over your data, and
how we comply with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 and the Information Technology (Intermediary Guidelines and
Digital Media Ethics Code) Rules, 2021. By using the application, you agree to the practices described in this document. If you do not agree, please discontinue use of the app.
For the purposes of this Privacy Policy, you are the "Data Principal" and NotesHub is the "Data Fiduciary" within the meaning of the Digital Personal Data Protection Act, 2023.
---
Who This Policy Applies To
This Privacy Policy applies to all users of the NotesHub Android application, including buyers who browse and purchase notes, sellers who upload and list notes for sale, and
visitors who access the app without registering an account. NotesHub is intended for users who are 18 years of age or older. If you are under 18, please use the app only under
the supervision of a parent or guardian who agrees to this Privacy Policy on your behalf. By registering for an account, you confirm that you are at least 18 years of age or that
a parent or guardian has consented to this Policy on your behalf.
---
Information We Collect
We collect information in two ways: information you provide to us directly, and information collected automatically as you use the app.
Information You Provide Directly
When you create an account, we collect your mobile phone number, which is your primary identifier within the app. After your first login, we ask for your full name and whether
you wish to use the app as a buyer or a seller. If you choose the seller role, we additionally collect your UPI ID so that we can facilitate payouts of your earnings to your bank
or UPI-linked account.
When you list a note for sale, we collect the content you submit, including the title, description, subject category, tags, price, cover image, and the note files themselves
(which may be in PDF, image, or presentation format).
When you purchase a note, we collect and store the payment ID and order ID associated with that transaction, along with the amount paid, the date and time of purchase, and
details about the note and the seller involved.
When you leave a review for a note, we collect your written comment and the star rating you assign.
Information Collected Automatically
When you use the app, we automatically collect certain technical information. This includes your Firebase authentication user ID, your account creation timestamp, and metadata
about your in-app activity such as which notes you have added to your wishlist, which sellers you follow, your cart contents, and your purchase history. We also store your last
few search terms locally on your device so that the app can display your recent searches when you open the search screen.
When you first install NotesHub through the Google Play Store, we may receive install referrer information from Google Play, which tells us whether your installation was
attributed to a specific referral link. This attribution data is processed once and stored locally on your device.
We collect and store your notification token from Firebase Cloud Messaging so that we can send you push notifications about relevant activity such as purchases, payouts, and
platform updates. You are asked for permission to receive push notifications when you first launch the app, and you may revoke this permission at any time through your device
settings.
Information We Do Not Collect
We do not collect your location data, access your contacts, use your camera or microphone, or collect any biometric information. We do not use browser cookies because NotesHub is
a native mobile application, not a web-based service.
---
How We Use Your Information
We use the information we collect for the following purposes.
To create and manage your account, including authenticating you via one-time password sent to your phone number, loading your profile on login, and allowing you to switch between
buyer and seller roles.
To facilitate transactions between buyers and sellers, including processing payments through Razorpay, verifying payment signatures on our servers, maintaining records of your
purchases, and transferring seller payouts to their linked UPI accounts.
To provide and improve the core features of the marketplace, including enabling note discovery through search and filtering, allowing sellers to upload and manage their listings,
enabling buyers to leave reviews and ratings, and allowing users to follow sellers.
To send you push notifications about activity relevant to your account, such as confirmation of purchases or updates from sellers you follow.
To operate our advertising feature, which allows sellers to promote their notes within the app for a fee.
To notify the app operator of new transactions via automated email, so that platform activity can be monitored and issues resolved.
To remember your preferences locally on your device, including your chosen theme and the contents of your cart between sessions.
To comply with our legal obligations as an intermediary under the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media
Ethics Code) Rules, 2021, including preserving user information and first originator data as required by law.
---
How We Share Your Information
We do not sell your personal information to any third party. We do not share your data with advertisers, data brokers, or marketing firms. However, we do share limited
information with the following parties in order to operate the app and comply with our legal obligations.
Firebase and Google Cloud. Our backend infrastructure is built on Firebase, which is a Google Cloud service. Your account information, uploaded notes, purchase records, reviews,
notifications, and all other data stored in the app reside in Firebase Firestore and Firebase Storage. By using NotesHub, your data is processed and stored in accordance with
Google's terms of service and privacy policies for Firebase. Firebase also handles our phone-based authentication and push notifications.
Razorpay. When you make a payment in the app, your transaction details are processed by Razorpay, our payment gateway. Razorpay receives information such as the payment amount,
order ID, and payment ID necessary to complete and verify the transaction. For sellers, Razorpay Route is used to transfer earnings to your linked UPI or bank account. Your UPI
ID is shared with Razorpay for this purpose. Razorpay's handling of your financial information is governed by Razorpay's own privacy policy.
Google Play Store. If you install NotesHub via a referral link, Google Play provides us with install attribution data. This is processed by Google and subject to Google's privacy
policies.
App Operator Notifications. When a purchase is completed, an automated notification email is sent to the app owner. This email includes information about the transaction,
including the seller's phone number and UPI ID, the note title, and the payment amount. This is used solely for platform monitoring and support purposes.
Law Enforcement and Government Authorities. We are required by law, and committed as a matter of public responsibility, to share user information with law enforcement agencies,
courts, judicial authorities, and government bodies when we receive a valid legal process such as a court order, police notice, summons, or government directive. This includes
situations where a user is suspected of uploading Confidential Examination Material or leaked question papers in violation of the Public Examinations (Prevention of Unfair Means)
Act, 2024, situations involving suspected fraud, cheating, or misrepresentation under the Bharatiya Nyaya Sanhita, 2023, and situations involving copyright infringement
complaints from Examination Bodies or other rights holders. In such cases, we may share your registered phone number, account details, upload history, transaction records, device
information, and any other relevant data in our possession. We will not notify you of such disclosures where prohibited by the applicable court order or government directive, or
where doing so would obstruct an investigation.
Examination Bodies. If content uploaded by you is found to constitute Confidential Examination Material, we may proactively report your identity, phone number, upload records,
and transaction history to the relevant Examination Body, including the Central Board of Secondary Education (CBSE), the National Testing Agency (NTA), state examination boards,
or any other affected authority. This disclosure is made in the public interest and in compliance with our obligations under the Public Examinations (Prevention of Unfair Means)
Act, 2024.
---
Data Storage and Security
All cloud-stored data, including your profile, notes, and transaction history, is maintained in Firebase Firestore and Firebase Storage. Access to this data is protected by
Firestore security rules that require authentication and restrict each user to accessing only their own private records such as their transaction history and notifications.
Payment integrity is protected through server-side signature verification of Razorpay transactions, which prevents tampering with payment records. Firebase App Check is also
implemented to protect our backend services from unauthorized access.
Data stored locally on your device, such as your cart, theme preference, and search history, is kept in the device's shared preferences storage, which is private to the NotesHub
app and not accessible to other apps.
While we implement these security measures, no system can guarantee absolute security. We encourage you to protect your registered phone number and to report any suspicious
activity related to your account to us promptly.
---
Data Retention
In compliance with Rule 4 of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we retain user identification data, account
information, content metadata, and first originator information for a minimum period of one hundred and eighty (180) days from the date of creation or the date of any relevant
transaction, or for such longer period as may be mandated by Applicable Law or required for the purposes of a pending investigation or legal proceeding.
We retain your account information and purchase history for as long as your account exists. Transaction records are retained for a period of at least five years after the
transaction date for tax, financial audit, and legal compliance purposes, including compliance with the Public Examinations (Prevention of Unfair Means) Act, 2024, the Copyright
Act, 1957, and any other applicable statute.
If you choose to delete your account, your profile information will be removed from our active database. However, transaction records, content upload history, and first
originator information may be retained beyond account deletion for the periods described above and for the purpose of cooperating with ongoing or future legal processes.
Local data stored on your device, including cart contents and search history, remains until you uninstall the app or clear the app's data through your device settings.
---
Your Rights as a Data Principal
Under the Digital Personal Data Protection Act, 2023 and other applicable Indian laws, you, as a Data Principal, have the following rights with respect to your personal data.
You have the right to access the personal data we hold about you and to receive a summary of the data we have processed, the purposes for which it has been processed, and the
identities of any parties with whom it has been shared.
You have the right to correct inaccurate or incomplete personal data we hold about you. You may update your name and profile picture at any time through the app's settings
screen.
You have the right to erasure of your personal data, subject to our legal obligations to retain certain data as described in the Data Retention section above. To request deletion
of your account and personal data, please contact our Grievance Officer using the details in the Contact section.
You have the right to nominate another individual who shall, in the event of your death or incapacity, exercise your rights under the Digital Personal Data Protection Act, 2023
with respect to your personal data.
You have the right to withdraw your consent to the processing of your personal data at any time. However, withdrawal of consent may result in the inability to use the Platform or
specific features thereof. Withdrawal of consent does not affect the legality of processing that occurred prior to withdrawal.
You have the right to withdraw your consent to push notifications at any time by adjusting the notification permissions for NotesHub in your device's settings.
You have the right to file a complaint with the Data Protection Board of India if you believe your rights under the Digital Personal Data Protection Act, 2023 have been violated.
To exercise any of the above rights, please contact our Grievance Officer as described in the Contact section. We will respond to your request within thirty (30) days of receipt.
---
Children's Privacy
NotesHub is intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under the age of 18 without verifiable parental
consent. If you are a parent or guardian and believe that your child has created an account without your consent, please contact us immediately and we will take steps to delete
their account and associated data. We do not knowingly allow individuals under 13 years of age to register for or use the Platform under any circumstances.
---
Third-Party Links and Content
Notes uploaded by sellers may contain references to external websites or resources. NotesHub is not responsible for the privacy practices or content of those external sites. We
encourage you to review the privacy policies of any external sites you visit.
---
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the app's features, applicable law, or our data practices. When we make changes, we will update the
"Last Updated" date at the top of this document. We encourage you to review this policy periodically. Continued use of NotesHub after changes are posted constitutes your
acceptance of the revised policy.
---
Grievance Officer
In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, NotesHub
has designated a Grievance Officer to address User concerns, privacy complaints, and data-related requests. You may contact the Grievance Officer for any of the following
matters: requests to access, correct, or erase your personal data; complaints about unauthorized processing or disclosure of your data; complaints about content involving your
personal information; and any other privacy-related concern.
Grievance Officer Contact:
Email: saumyajain254@gmail.com
Application: NotesHub (Android)
We will acknowledge receipt of your complaint within forty-eight (48) hours and will endeavor to resolve it within thirty (30) days.
---
Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact us at:
Email: saumyajain254@gmail.com
App: NotesHub
Platform: Android (Google Play Store and Indus App Store)
We aim to respond to all privacy-related inquiries within 30 days.