Last updated: 6 November 2026
Effective date: 6 November 2026
Students Sathi respects your privacy. This policy explains what personal information is collected when you use our Android application, why it is used, who receives it, and how you can exercise your choices.
Students Sathi is operated by Sobhan Hossain Sarkar, trading as Students Sathi, established in India.
Contact address: Salas, Tapan, Dakshin Dinajpur, West Bengal
Contact telephone: +966 576870632
Privacy and support email: iamsobhan007@gmail.com
The operator is responsible for the personal information processed to provide Students Sathi, including acting as a data controller where applicable data-protection law uses that term.
Students Sathi is an independent, unofficial educational companion. It is not affiliated with, endorsed by, sponsored by, or officially connected with Indira Gandhi National Open University (IGNOU). IGNOU and other third-party names and marks belong to their respective owners.
The information processed depends on the features you use. Some information comes from you, some is generated by your activity, and some is processed automatically by the services integrated into the app.
When you register or sign in, we process your name, email address, Firebase user identifier, authentication-provider information and account timestamps. If you choose Google sign-in, we receive the account information made available through that sign-in process. An optional profile photo and changes to your display name are stored to provide your profile.
Firebase Authentication handles authentication credentials and password-reset services. We do not store your password in plain text in our app database. Authentication providers also process technical information, such as IP addresses and device or browser information, for sign-in security and abuse prevention.
We process records such as resources opened, recently read books, completion status, recorded reading minutes, streak activity, points, referral codes, referral counts, reward claims and membership status. These records support progress synchronisation, reading history, programme eligibility and fraud prevention.
Account-based records are associated with your signed-in account. Guest activity and device preferences may be stored separately. Logging out does not delete information already saved to an account.
When you use support or feedback, we process your messages, associated account details, timestamps, conversation status and routing information. If you attach an image or document, we also process the file and related information, such as its filename, type and size.
Authorised support and administrative personnel can access information relevant to resolving requests, managing the service and investigating misuse. Support alerts may be delivered through notification or email services. Do not send passwords, full payment-card details or unnecessary sensitive information in support messages or attachments.
Google Play processes subscription payments. We process information needed to verify and manage access, such as product identifiers, purchase-verification tokens or their hashes, subscription state, expiry dates and the account associated with a verified purchase.
These records support activation, restoration, renewal updates and protection against duplicate or unauthorised claims. We do not receive your full payment-card number, bank-account credentials or Google payment password.
Firebase Cloud Messaging processes installation identifiers and messaging tokens used to deliver notifications. A device token may be associated with your account to deliver support replies. We also process notification preferences and read status where needed for the feature.
You can control notification display through Android settings and any notification controls offered in the app. Disabling notification display does not necessarily delete an existing messaging token or your account.
Google AdMob and its Google Mobile Ads SDK process information for advertising, measurement and fraud prevention. This can include IP addresses, approximate location inferred from IP addresses, advertising or app identifiers, ad interactions and diagnostic information.
Firebase Analytics and Firebase Crashlytics process usage events and technical information, such as installation identifiers, device and operating-system information, app version, screen or feature interactions, crash traces and error reports. This helps us understand usage, investigate faults and improve reliability. Operational systems also process request and security logs needed to run and protect the service.
The app stores preferences such as language, theme, notification choices, session information and reading-resume information on your device. Document viewing can create temporary cached files. Supported downloads saved to a location you choose may remain after logout or account deletion until you remove them.
When you choose a profile image or support attachment, the app accesses the selected file for that action. File access and any required Android permission depend on your device version and the feature used.
We use information to:
Create and secure accounts and provide authentication.
Deliver educational resources, reading history and progress features.
Administer points, referrals, rewards and membership access.
Verify purchases and maintain subscription entitlements.
Respond to support requests and send relevant notifications.
Serve and measure advertisements where applicable.
Diagnose faults, maintain reliability and prevent misuse.
Handle privacy requests and meet legal obligations.
Providing information required for an account or purchase is necessary to use that feature. Optional information, such as a profile photo, is not required for unrelated features.
Where applicable law requires a legal basis, we rely on the basis appropriate to the activity: providing a service you request, meeting legal obligations, legitimate interests such as security and reliability where permitted and balanced against your rights, or your consent where required.
Permissions and consent are requested separately where necessary. This Privacy Policy is a notice, not blanket consent to every type of processing. Where processing relies on consent, you can withdraw it using the relevant available control or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.
We do not sell your personal information. Information is processed by service providers as necessary for the purposes described in this policy, including:
Service Purpose
Firebase Authentication
Registration, sign-in and account security
Cloud Firestore
Account records, progress, rewards, support and app data
Cloud Storage for Firebase
Profile photos, support attachments and hosted files
Cloud Functions and Google Cloud infrastructure
Secure backend operations, purchase verification, notifications and operational processing
Firebase Cloud Messaging
App notifications and support replies
Firebase Analytics and Crashlytics
Usage analysis and diagnostics
Google AdMob / Google Mobile Ads SDK
Advertising, measurement and fraud prevention
Google Play Billing and Google Play services
Purchases, subscription verification and related platform functions
Google processes information under the terms and privacy arrangements applicable to each service. Some processing is performed on our behalf; other processing is governed by Google's own relationship with you.
We may disclose relevant information when required by law, to respond to valid legal requests, protect users, investigate fraud or enforce lawful rights. Any access by authorised personnel is for relevant operational purposes. Information you choose to send to an external website or recipient is also subject to that recipient's practices.
Read more at Google's Privacy Policy, Firebase Privacy and Security, and How Google uses information from apps and sites.
Non-premium access includes advertisements. Personalised advertising depends on applicable law, consent requirements, service configuration and available user choices. Non-personalised advertising can still involve data processing for delivery, frequency limits, measurement and fraud prevention.
Use the advertising privacy controls available on your Android device or Google account, and any consent controls presented in the app. These controls have different effects; limiting personalisation does not necessarily stop all data collection or advertisements.
Premium removes advertisements from eligible app placements while access is active. It does not automatically stop authentication, purchase verification, diagnostics or other processing needed to provide the service. External websites control their own advertisements and privacy practices.
Google and its service providers may process information outside your country, including in the United States and other locations where their infrastructure operates. Applicable privacy protections may differ between countries.
Where the law restricts international transfers, we must use an appropriate lawful transfer mechanism and safeguards. Contact us for information about safeguards applicable to your data.
We retain account and activity information while needed to provide your account and requested features. Support records and attachments are retained as needed to resolve requests and address related disputes. Purchase-verification and limited security records may need to be retained after account deletion to meet legal obligations, prevent fraudulent reuse or resolve an existing dispute.
Retention is determined by the purpose, sensitivity of the information, legal requirements and whether it remains necessary. Analytics, diagnostic logs and provider-managed backups also follow applicable service settings and provider retention schedules. Deletion from active systems and expiry from backups may occur at different times.
We do not retain personal information indefinitely merely because it might be useful. When information is no longer needed, it is deleted or irreversibly anonymised as appropriate. You can contact us about retention for a particular category or request.
You can initiate deletion inside the app:
More → User Profile → Edit Profile → Delete Account
If you cannot access the app, email iamsobhan007@gmail.com with the subject “Account Deletion Request” and identify the email address used for your Students Sathi account. You do not need to reinstall the app to send this request. We may request proportionate verification of account ownership; never send us your password.
We process verified requests to delete your account and associated personal information, including profile information, progress, support records and uploaded files, except information that must be retained for a specific lawful purpose. Where an exception applies, we explain the relevant category and reason. We respond within applicable legal deadlines and explain any necessary additional steps or permitted delay.
Account deletion is different from logout or temporary deactivation. Logging out or uninstalling does not delete cloud records. Files you saved outside the app may need to be removed separately from your device.
Deleting your Students Sathi account does not automatically cancel a Google Play subscription. Cancel unwanted renewal through Google Play subscriptions. Cancellation and deletion requests can be raised with support separately.
Depending on the law that applies, you may be entitled to request access, correction, deletion, restriction of processing or a portable copy of certain information, and to object to particular processing. You may also withdraw consent where processing relies on it and complain to a competent data-protection authority.
Contact iamsobhan007@gmail.com to exercise a right. We may verify identity and explain any lawful limitation. A privacy request does not require you to disclose unnecessary sensitive documents.
You can also update available profile details, manage Android notification permissions, adjust available advertising controls, cancel subscriptions through Google Play and use account deletion. The app does not promise a separate in-app switch for every service described in this policy.
We use measures such as authenticated access, service permissions and encrypted network connections to help protect information. Security controls and operational procedures reduce risk but cannot guarantee absolute protection. Protect your credentials, keep your device secure and report suspected unauthorised access to support.
Students Sathi is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information contrary to this policy, contact us so we can investigate and take appropriate action.
Where local law requires parental permission or additional protections for older children, those requirements also apply.
The app links to educational websites and may retrieve documents from third-party sources. When you connect to those sources, their operators may receive technical information such as your IP address and request details. Their privacy policies govern their own processing. Our responsibilities for the information we process remain governed by this policy and applicable law.
We may update this policy when our services, data practices or legal obligations change. We will update the date and give appropriate notice of material changes. Additional consent will be obtained where required before new processing begins.
For privacy questions, account deletion or other data requests, contact:
Students Sathi
Operator: Sobhan Hossain Sarkar
Email: iamsobhan007@gmail.com
Address and telephone: See Section 1.