Privacy Policy

Last Updated: 10 July 2026

This Privacy Policy describes how LEOMEE ("we", "us") — the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") — collects, uses, stores, shares, and deletes your personal data when you use the LEOMEE website or mobile application.

We process your personal data on the basis of the consent you give at registration. You may withdraw that consent at any time (see "Your Rights" below); withdrawing consent means we can no longer provide you the service and your account will be deleted.

1. Who We Are

2. Personal Data We Collect, and Why

Account data — to create and secure your account

  • Email address (verified by OTP)
  • Password (stored only as a salted hash — we never see it)
  • Date of birth (to verify age eligibility and apply child-safety restrictions)
  • Username, name, gender (optional), profile photo (optional), bio (optional)
  • Exam/education category you select
  • The date and time you accepted our Terms (your consent record)

Content you create — to provide the service

  • Posts, comments, quiz answers, and reels you publish
  • Messages and images you send in private, group, and public chats
  • Reports you file about other users or content

Payment data — only if you are a creator requesting payouts

  • UPI ID or bank account number, IFSC code, and account holder name. These are encrypted at rest and visible only to payout staff.

Technical data — to keep the platform working and secure

  • IP address, device/browser type, login timestamps
  • Security logs (login attempts, account actions) — retained 180 days as required by CERT-In directions
  • A push-notification token for your device (if you enable notifications)

The website uses cookies strictly for login sessions and security (CSRF protection). We do not use advertising or cross-site tracking cookies, and the mobile app contains no advertising or third-party analytics SDKs.

3. Who We Share Data With (Data Processors)

We do not sell personal data. We share it only with the processors below, only as needed to run the service:

  • Email delivery provider — receives your email address to send OTPs and service emails.
  • Google Firebase Cloud Messaging (push notifications) — receives your device's push token and notification content.
  • Google Play (payments) — if you buy a subscription, the purchase is processed by Google Play; we receive a purchase token to verify it.

Some of these providers process data on servers outside India. We transfer data abroad only to provide the features above, consistent with Section 16 of the DPDP Act.

We may also disclose data when required by law, court order, or a lawful direction of a government agency, and to investigate fraud or protect the safety of users.

4. AI-Generated Content

Content produced by our AI assistant is always labelled with an "AI" badge. Some course material is generated with AI assistance and reviewed before publication. AI output can be inaccurate — do not rely on it as professional advice.

In public groups where the AI assistant is enabled, recent messages from that group are processed by an AI service provider to generate the assistant's replies. Images attached to public posts may also be screened by an automated safety classifier. Private one-to-one messages are never sent to AI providers.

5. Children

LEOMEE is not available to users under 13. Users under 18 are treated as children under the DPDP Act: features that pair users with strangers (such as random calls) are disabled for them, and we do not use their data for behavioural tracking or targeted advertising (we do this for no one).

If you believe a child's data has been collected improperly, contact the Grievance Officer and we will delete it.

6. How Long We Keep Data

  • Account & content: while your account is active.
  • After you delete your account: your account is deactivated immediately and permanently erased after a 28-day grace period (during which you can reactivate by logging in). Erasure includes your uploaded photos and files.
  • Financial records: completed payout amounts and dates are kept as required by tax law, with your bank identifiers removed.
  • Security logs: 180 days (CERT-In requirement).

7. Your Rights (DPDP Act, Sections 11-14)

  • Access: get a copy of your personal data — in the app this is available via Settings → Download My Data, or by writing to us.
  • Correction: edit your profile in the app, or ask us to correct inaccurate data.
  • Erasure: delete your account in Settings → Manage account access, or ask us to erase your data.
  • Withdraw consent: at any time, with effect for the future, by deleting your account or writing to the Grievance Officer.
  • Grievance redressal: complain to our Grievance Officer (acknowledged within 24 hours, resolved within 15 days).
  • Nomination: nominate a person to exercise these rights for you in case of death or incapacity — write to the Grievance Officer.
  • Data Protection Board: if you are not satisfied with our response, you may complain to the Data Protection Board of India.

8. Security

We use reasonable security safeguards required by Section 8(5) of the DPDP Act: passwords are hashed, traffic is encrypted with HTTPS, financial identifiers are encrypted at rest, private chat media requires authentication to access, security events are logged, and access to personal data is restricted to staff who need it. In the event of a personal data breach we will notify affected users and the Data Protection Board as required by law, and report incidents to CERT-In within the mandated timelines.

9. Policy Updates

We will notify you in the app or by email of material changes to this policy. Each version is dated; continued use after the effective date constitutes acceptance, except where the law requires fresh consent.

10. Contact

इस गोपनीयता नीति की हिंदी प्रति के लिए contactleomee@gmail.com पर लिखें। (For a Hindi copy of this Privacy Policy, write to us.)