Privacy Policy

The short version

We collect what the platform needs to work and nothing we cannot justify. We do not sell personal information, we do not run advertising on any tier, and we do not share your learning data with third parties for their own purposes.

What we collect

Account information — your email address, name, a hashed password if you set one, and your Google account identifier if you sign in that way. We never store passwords in a readable form.

Learner profile — anything you choose to add: date of birth, state, target grade, callsign, club. All optional except the target grade, which we use to scope your readiness score.

Learning activity — which tests you start, which questions you were shown, the answers you selected, your scores, your confidence flags, timing, review schedule and ability estimates. This is the product; without it there is no adaptive engine and no readiness score.

Morse practice — drill accuracy, speed settings and per-character results, so the trainer can show progress over time.

Payment records — the payment provider's order and payment identifiers, amount, status and your access period. We never see or store your card number, UPI PIN, bank password or any one-time code.

Security information — sign-in events, IP address and browser details, used to detect abuse and to help you if an account is compromised.

Technical data — session cookies, CSRF tokens, and local preferences such as your Morse speed settings.

What we deliberately do not collect

We do not run third-party advertising or advertising trackers on any tier.

We do not use cross-site tracking pixels or share your activity with data brokers.

The WMS locator runs entirely in your browser. If you use the distance sort, your coordinates are read by your own device and used locally — they are never transmitted to us. Anything you type in its search box stays on your device too.

How we use it

To run your account and keep it secure.

To deliver lessons, practice, mocks, the review queue and the Morse trainer.

To calculate your ability per topic, schedule your review cards and estimate your readiness.

To calibrate question difficulty from aggregate response data, which improves the bank for everyone. This uses response patterns, not identities.

To process payments, activate access and handle refunds.

To send account, security and payment messages. Anything promotional is opt-in only and every message carries an unsubscribe link.

To detect abuse and troubleshoot faults.

Cookies and storage

Essential only. A session cookie keeps you signed in, a CSRF token protects forms, and a guest key lets someone take the free readiness check without an account. Local storage holds interface preferences such as your Morse trainer settings.

There are no advertising cookies, because there is no advertising.

Payments

Payments are processed by Razorpay. We receive confirmation and the transaction identifiers needed to activate access, issue a receipt and process a refund. Full card and banking credentials never reach our systems.

Who else processes your data

Hosting and database infrastructure providers.

The payment processor, for payments and refunds.

An email delivery provider, for account and transactional messages.

Google, only if you choose to sign in with Google.

Each receives only what it needs for the service it performs.

How long we keep it

Account, profile and learning records are kept while your account is active. Payment and tax records are kept as long as law requires.

You can delete your account from your profile page. We remove or anonymise your data, except records we are legally required to retain — principally payment and tax records.

Your rights

You can access and correct your profile from your account pages, export or delete your account, opt out of optional email at any time, and ask us anything about what we hold.

Contact hello@scoutlibrary.in for any request. We will respond within a reasonable period.

Young learners

The minimum age to sit the ASOC examination is 12, so some of our learners are minors. If you are under 18, please use this platform with a parent or guardian's involvement. We do not knowingly collect more information from a young learner than from anyone else, and everything beyond an email address is optional.

Security

Passwords are hashed with bcrypt. Sessions are signed and HTTP-only. Forms are CSRF-protected. Administrative access is role-restricted. Answer keys are never sent to a browser before they have been earned.

No online service can promise perfect security. If you believe your account has been accessed without your permission, contact us immediately.

Changes

If we make a material change we will say so on this page and, where it affects you meaningfully, by email.