Privacy policy
Effective 2026-09-13 · Last updated 2026-09-13
We collect the minimum needed to run a subscription service that works on your devices. This page says exactly what that is, in plain terms.
We do not sell your personal data. We do not build advertising profiles about you ourselves, and we do not share your viewing history with third parties for marketing.
1. Who we are
AI Mastery Edu, India, operating Varunsh OS TV, is the data controller. Contact support@aimasteryedu.in for any privacy matter.
2. What we collect
Account data
- Mobile number — this is your account identity and how we enforce one subscription per person.
- One-time passwords (stored only as a hash, and only until verified or expired).
- Optional name and email if you provide them.
Device data
- Device identifier and hardware fingerprint — used to bind your subscription to your 1 TV + 1 mobile device and to detect a copied installation. This is the technical basis of the device limit described in our terms.
- Device model, platform and app version, for support and compatibility.
- Application integrity signals (package signature, tamper indicators) to detect modified builds.
- IP address, for security, rate limiting and regional availability.
Transaction data
- Orders, plan purchased, amount, currency, status, and refunds.
- A payment reference from our payment provider. We never receive or store your full card number, CVV or UPI PIN.
Usage data
- What you played and searched for, to power continue-watching and recommendations.
- Error and crash diagnostics.
- Ad impression counts (aggregate, not tied to your identity in our reporting).
3. Why we use it
| Purpose | Data used | Basis |
|---|---|---|
| Create and secure your account | Mobile number, OTP hash | Performance of contract |
| Enforce subscription and device limits | Device ID, fingerprint | Performance of contract; legitimate interest in preventing abuse |
| Take payment and issue refunds | Transaction data | Performance of contract; legal obligation |
| Detect tampering, piracy and fraud | Integrity signals, IP | Legitimate interest |
| Recommendations and continue watching | Usage data | Performance of contract |
| Show advertising on free tiers | Ad identifiers via Google | Consent |
4. Third parties we use
- Payment providers (including RevenueCat and the card/UPI networks behind it) — to process payments and refunds.
- Google AdMob and AdSense — advertising on free and ad-supported tiers. Google may use advertising identifiers under its own policies; see how Google uses data from sites and apps.
- Google Gemini — powers the AI assistant. Your assistant queries are sent to Google to generate a response.
- SMS provider — to deliver one-time passwords.
- Content metadata providers — we request catalogue information; they do not receive your identity.
5. Advertising and your choices
Paid subscriptions show no advertising at all. On free tiers you can limit ad personalisation through your device settings (Android: Settings → Google → Ads; iOS: Settings → Privacy & Security → Tracking). Non-personalised ads may still be shown.
6. How long we keep data
| Data | Retention |
|---|---|
| Account and device records | While your account is active, then 12 months |
| Transaction and refund records | 8 years (Indian tax and accounting requirements) |
| OTP hashes | Until verified or expired (minutes) |
| Usage and diagnostics | Up to 90 days |
| Fraud and tamper records | Up to 24 months |
7. Security
Traffic is encrypted in transit. Passwords are bcrypt-hashed and OTPs are stored only as hashes. Source credentials are encrypted at rest with AES-256-GCM. Access to production data is restricted to administrators. No system is perfectly secure, and we will notify you without undue delay if a breach affects your personal data.
8. Your rights
You can ask us to:
- Give you a copy of the data we hold about you
- Correct anything inaccurate
- Delete your account and associated data (subject to legal retention above)
- Stop processing for marketing purposes
- Export your data in a portable format
Email support@aimasteryedu.in and we will respond within 30 days. We may need to verify your identity via your registered mobile number.
9. Children
The service is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
10. Changes
We will post any changes here and, for material changes, notify you in the app or by SMS before they take effect.