Privacy Policy

Nipunta is a white-label practice platform that coaching institutes run for their own students under their own brand. This policy explains what Nipunta collects when you sign in to an institute's site, what your institute provides about you, and what we do with it.

Last updated: 30 September 2026.

Who is who

• Nipunta is operated by Launchship IT & Media Services Private Limited, Hyderabad, India ("we", "us").
• Your institute is the coaching institute whose site you sign in to. It decides who is on its roster, which batches exist and who may sign in. For roster data your institute is the controller and Nipunta processes it on the institute's instructions. Questions about why you are on a roster go to your institute; questions about how Nipunta handles data go to us.

What we collect

• Sign-in. If you sign in with Google, Google sends us a signed token; we store the stable account identifier it carries, your display name, and your email address only when Google marks it as verified. We never receive your Google password. If you sign in with an email code instead, we store the address the code was sent to; the code itself expires after 10 minutes.
• Roster data from your institute. Your name, email address, role (owner, location head, teacher or student) and the batch or batches you belong to. Your institute enters this; we do not collect it from you.
• Practice data. Which puzzles and drills you were served, what you submitted, your times, scores and streaks. This is what the practice products run on and what your institute's reports summarise.
• Reports. A nightly roll-up per batch (activity, completion, timings) that your institute's owners, location heads and teachers see for their own batches only.
• Audit records. Who did what in the institute console and the platform HQ (for example, a seat issued or a role changed), with the time.
• Ordinary server logs. IP address, timestamp and user agent, kept for security, abuse prevention and debugging, and only as long as needed for those purposes.

How we use it

• To sign you in and show you the dashboard your role gets.
• To run the practice products and keep your history.
• To give your institute reports about its own students, and only its own.
• To send you a sign-in code when you ask for one. Today that is the only email Nipunta itself sends you.

What we don't do

• We don't sell or rent personal data, and we don't share it with anyone but your own institute.
• We don't run advertising scripts. The public pages on nipunta.com — the homepage, the institute door and the demo — load PostHog to count page views. It is the same product-analytics tool our practice apps use. It is not loaded on institute dashboards, sign-in, or this page. Session recording is off, so what you type is not captured, and it is not given your email. It may store an identifier in your browser. Cloudflare Web Analytics also counts page views on hub pages, without cookies and without identifying you. A page that sends a Content-Security-Policy allows only the hosts that policy names.
• We don't ask students for a phone number, address or exam roll number.
• Nipunta does not take payments online. An institute's licence is settled directly with us; nothing on this site charges a card or UPI account, and we never see such credentials.

Cookies

Nipunta sets one first-party cookie, nip_sid, when you sign in. It identifies your session for up to 30 days and does nothing else. Signing out clears it. PostHog, on the public nipunta.com pages named above, may set its own browser storage. There are no advertising cookies.

Where data lives

Data is stored on Cloudflare's platform (its D1 database, KV and R2 storage) and served from Cloudflare's network. Sign-in codes are delivered through Resend, our email provider, which receives only your address and the code.

Google API Services

Nipunta uses Google sign-in only to identify you. Nipunta's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke Nipunta's access at any time in your Google account permissions.

Institute enquiries

If you write to us as an institute (through the enquiry form or by email), we keep what you gave us (institute name, your name, how to reach you, your role, city, batch size and exam) to reply and to follow up about Nipunta. We don't add it to any other list.

Children

Nipunta is used by coaching institutes for competitive-exam aspirants and is not directed at children under 13. We do not knowingly collect personal data from children under 13. Where a student on a roster is a minor, the institute is responsible for having a parent's or guardian's consent before adding them.

Retention and your choices

• Your session ends when you sign out, or on its own after 30 days.
• Roster, batch and practice-report data is kept while your institute's licence is active.
• After you are removed from a roster, or after your institute's licence ends, that data is deleted within 12 months.
• Audit records, and records of deletion requests, are kept for 2 years.
• A claim code is kept until it is used or it expires.
• Deletion is not automated yet. Today it is done on request: ask your institute, use "Request deletion of my data" on your account page, or email hello@nipunta.com.

Contact

Questions or data requests: hello@nipunta.com. Nipunta is operated by Launchship IT & Media Services Private Limited, Hyderabad, India.