Privacy Policy

Effective Date: April 01, 2026

This Privacy Policy (“Privacy Policy”) establishes a legally binding agreement between the User and Outleap Technologies Private Limited (the “Company”).

Any reference to “we”, “us” or “our” shall hereinafter refer to the Company. Any person who accesses or uses the Site shall be termed the “User”; any reference to “You”, “Your” or “Yourself” shall hereinafter refer to the User.

Your access and/or usage of the Site indicates that You have read, understood and agreed in full to this Privacy Policy.

Our website https://www.leapscholar.com, its affiliated pages, and any mobile application (each, an “App”) – including our IELTS prep by Leap Scholar app available on the Google Play Store (ID: com.knudge.ielts), our Apex app available on the Google Play Store (ID: com.leapscholar.apex), and our Contri app available on the Google Play Store (ID: com.leapscholar.contri) – are collectively referred to as the “Site”.

For the purposes of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), the Company is a “Data Fiduciary” and the User is a “Data Principal”. This Privacy Policy is presently available in English; the Company will consider offering it in additional languages listed in the Eighth Schedule to the Constitution of India, in accordance with Section 5(3) of the DPDP Act, as the rules under that Act are notified and implemented.

This Privacy Policy explains what information We collect when You visit or otherwise interact with the Site, how We use it, and when We may share it.

In addition, the Site may link to third-party services or apps that We do not control, including social media sites (collectively, “Third-Party Sites”). We do not control the privacy practices, policies or security measures of Third-Party Sites. Your access to and use of any Third-Party Site is at Your own discretion, and We encourage You to review the applicable privacy policies and terms of such Third-Party Sites before providing any personal data. We are not responsible for the privacy practices or content of any Third-Party Site.

Please note that this Privacy Policy applies regardless of how You access the Site, including through a mobile device. Once You leave the Site or are redirected to a Third-Party Site, You are no longer governed by this Privacy Policy.

Why We Collect Personal Information

We collect personal information from You to identify You, to provide You with the information required to service You, and to help Us deliver a high-quality test-preparation and learning experience. The information collected enables Us to give You convenient access to Our Services and course offerings, and may help Us tailor Your learning experience.

How We Collect Information and What We Collect

Generally, We collect and receive certain information about You when You access the Site. What We receive, and how We receive it, depends in part on what You do when You access the Site.

We Collect Information When You Provide it to Us

We collect Personal Data that You voluntarily provide to Us when You interact with the Site or use Our Services. This may include information such as Your name, address, telephone number, email address, and other information that You provide Us, for example when You request to receive offers and alerts or complete an online survey. We may also receive personal data about You from Our business partners, service providers, and other third parties, where Your consent was obtained and where it is permitted under applicable law. You may browse and access certain portions of the Site without providing personal data. However, certain features, services or functionalities may require You to provide specific personal data. Where the provision of personal data is optional, We will indicate this at the relevant point of collection.

We also collect Personal Data that You provide when filling in forms on the Site, including registration forms. We may also ask You for information when You enter a contest or promotion sponsored by Us, and when You report a problem with the Site.

We Collect Information Automatically When You Access the Site

We may also automatically collect certain information when You access or use the Site, including technical, device, usage and log information. Where such information relates to or can reasonably be associated with an identifiable individual, We will treat it as personal data and process it in accordance with this Privacy Policy and applicable law. We may also collect aggregated or anonymised information that does not identify You, including for purposes such as analysing Site usage, improving Our Services, and maintaining the security and functionality of the Site.

Tracking Technologies

When You download, access and use Our Apps, We may use technology to automatically collect:

• Usage Details: We may automatically collect certain details of Your access to and use of the App, including traffic data, logs, and other communication data and the resources that You access and use on or through the App.
• Device Information: We may collect information about Your mobile device and internet connection, including the device's unique identifier, Internet Protocol (IP) address, operating system, browser type, mobile network information, and the device's telephone number.
• Stored Information and Files: The App may also access metadata and other information associated with other files stored on Your device. This may include, for example, photographs, audio and video clips, personal contacts, and address book information.

When You use an App or its content, certain third parties may use tracking technologies (such as cookies and web beacons) and other automatic information collection technologies to collect information about You or Your device and Your use of the App. These third parties may include:

• Parties who We utilise to process payments or provide related services on Our behalf;
• Your mobile device manufacturer; and
• Your mobile service provider.

The information they collect may be associated with Your personal information, or they may collect information, including personal information, about Your online activities over time and across different websites, apps and other online services. We may receive reports on this activity on an individual and aggregated basis.

We do not control these third parties' tracking technologies or how they may be used. If You have any questions about an advertisement or other targeted content, You should contact the responsible provider directly.

If You do not want Us or third parties to collect this information, do not download the App or delete it from Your device.

We or Our service providers may also automatically collect non-personally-identifiable information about You when You access the Site. The Site and some emails that We may send You may also use common tracking technologies, such as:

• Cookies: A cookie is a small text file that is placed on Your computer or mobile device to distinguish You from other visitors to the Site.
• Web Beacons: A web beacon (also referred to as a “pixel tag”) is a small block of code placed on a Site page or within an email to help distinguish You from other visitors to the Site, assess traffic patterns, and measure Your engagement with the Site or email.
• Google Analytics and Google AMP Client ID API: A service which tracks a User's journey across website pages.

The Company uses these features to collect non-personally-identifiable information about You. This type of information may include (but is not limited to) Your IP address and/or domain; the type and version of the internet browser that You use; the date, time and duration of Your visit to the Site; and the specific pages, buttons, images, videos or other Site content that You may access during Your visit. These tools enable Us to track and target the interests of Our Users to enhance the experience on and off the Site.

Your browser may enable You to block or (in the case of cookies) delete some of the means by which We automatically collect information when You visit the Site, but doing so may affect Your experience on the Site. You should refer to Your browser for information about the options available to You.

Data Retention and Deletion

We shall retain Your personal data only for as long as necessary to fulfil the purpose for which it was collected, or until You request erasure of the data in accordance with applicable law, whichever is earlier. Where retention beyond that point is necessary to comply with a specific legal obligation (for example, tax, accounting or other record-keeping requirements under applicable law), We will retain the relevant data only for so long as required under that law, and no longer.

You may request erasure of Your personal data for which You have previously provided consent, in accordance with applicable law. The Company shall erase Your personal data unless retention of such data is necessary for the specified purpose or for compliance with any law for the time being in force.

Deletion upon request: Upon written request to contact@leapscholar.com, We will, subject to compliance with applicable laws:

1. Delete Your profile information (name, email, phone);
2. Delete Your device identifiers and usage analytics; and
3. Anonymise Your transaction history (dates and amounts retained for tax compliance, but personal details shall be removed).

How We Use the Information We Collect

Information that We collect about You and Your web browsing behaviour is used to optimise Your online experience. Among other reasons, We may use the information that You provide or that We collect when You visit the Site to:

• verify Your identity and/or remember Your personal settings or preferences when using the Site;
• determine Your interests and needs in order to recommend relevant courses and services;
• qualify You for products and services that You request and to process Your transactions;
• post advertising content on Third-Party Sites, along with web beacons and pixel tags, to provide information to Us and to third parties about the pages You visit after seeing Our ads or offers;
• analyse the quality and performance of the Site and marketing campaigns;
• carry out Our obligations and enforce Our rights arising from any contracts entered into between You and Us, including for billing and collection; and
• notify You when App updates are available, and of changes to any products or services We offer or provide through it.

We may also use data that We collect on an aggregate or anonymous basis (such that it does not identify any individual User) for specified business purposes, including improving Our course offerings, research, marketing, and analysing marketing trends, consistent with applicable law.

How We Share the Information We Collect

We may share the personally-identifiable information that You provide to Us, or that We receive from Our business partners and/or service providers, with Our service providers. For example, We share Your email address with service providers who send emails on Our behalf. We may also share non-personally-identifiable information with third parties who perform advertising services on Our behalf and with companies that operate or analyse the Site. We do not authorise these third parties to collect, use or disclose this information except as necessary to perform services for Us or to comply with law. These third parties may not use the information that We provide to them to independently market to You unless You consent.

There may be other instances in which We may share either Your Personal Data or non-Personal Data with a third party. For example:

• to respond to a subpoena, warrant, court order or other official governmental action served upon Us, and then in conformity with its terms or as We are otherwise permitted or required by law;
• to respond to Our regulators or other governmental authorities;
• to protect or defend the Company or any of its affiliates or subsidiaries, or their directors, officers, employees, agents, partners or independent contractors, in any legal proceeding;
• where We suspect fraud or for other risk-management purposes;
• as required or permitted by law; or
• as otherwise instructed or authorised by You.

Your Rights

Subject to applicable law, You may have certain rights in relation to Your personal data processed by Us. These may include the right to:

1. Access: obtain information about the personal data We process about You and the manner in which such data is being processed;
2. Correction and updating: request correction, completion or updating of inaccurate or incomplete personal data;
3. Erasure: request erasure of Your personal data where such erasure is permitted or required under applicable law;
4. Withdrawal of consent: withdraw Your consent at any time where We process Your personal data based on Your consent – withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal;
5. Grievance redressal: raise a grievance or complaint regarding Our processing of Your personal data or the exercise of Your rights; and
6. Nomination: nominate another individual to exercise Your rights under this Privacy Policy and applicable law in the event of Your death or incapacity.

You may exercise Your applicable rights or raise a grievance by contacting Us using the details provided in the Grievance Redressal section of this Privacy Policy. We may require reasonable information to verify Your identity and process Your request. We will respond to requests within the time period prescribed under applicable law.

Where permitted by applicable law, certain requests may be subject to limitations or exceptions, including where retention or processing of personal data is required for compliance with a legal obligation, security, fraud prevention, or other lawful purposes.

Your Options

To stop receiving promotional emails or other promotional messages from the Company, You may follow the opt-out or unsubscribe instructions provided in the relevant communication, or contact Us through the channels specified in this Privacy Policy. Where applicable, You may also manage Your communication preferences through Your account settings. Even if You opt out of marketing messages, We may still send You transactional messages or other communications necessary for providing the Services, including responses to Your questions or information about Your course or application.

Where We use cookies, pixels or similar technologies for advertising or analytics purposes, You may manage or withdraw Your consent to the extent permitted through the cookie or privacy preference controls available on the Site or App. You may also manage certain permissions and advertising preferences through the settings available on Your device or browser. Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal.

If You do not wish to permit the automatic collection of information through cookies, pixels or similar technologies, You may manage Your preferences through the cookie settings available on the Site or App. Please note that disabling or restricting certain technologies may affect the functionality or availability of certain features of the Site or App.

Data Security

We implement appropriate technical and organisational measures to safeguard Your Personal Data against unauthorised access, use, alteration, disclosure, loss or destruction. We maintain internal policies and procedures to protect Personal Data and take reasonable steps to ensure that third parties and Data Processors engaged by Us implement appropriate security measures in accordance with applicable law.

While We take reasonable steps to protect personal data, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure. Accordingly, We cannot guarantee the absolute security of information transmitted to or through the Site. To the extent permitted under applicable law, the Company shall not be responsible for any loss, damage or harm arising from circumstances beyond Our reasonable control, including unauthorised access resulting from the compromise of Your electronic device, credentials or account due to Your acts or omissions.

You are also responsible for taking reasonable precautions to protect Your information and devices, including maintaining appropriate security controls and keeping Your account credentials confidential. We will not request Your passwords or other authentication credentials through unsolicited communications. You should avoid sharing personal data through unsecured communication channels.

If You communicate with Us electronically, We may respond to You through the same or another appropriate electronic medium, subject to applicable law and Our security practices.

Certain features or services may require You to provide personal data. If You choose not to provide information necessary for a particular feature or service, We may be unable to provide that feature or service to You.

Our Site may also contain links or references to third-party websites/platforms. Any information that You choose to provide directly to such third parties is governed by their respective privacy policies and terms, and not by this Privacy Policy. We are not responsible for the privacy or security practices of such third parties. We encourage You to review the applicable privacy policies and terms of any Third-Party Sites before providing personal data or otherwise interacting with them.

Personal Information of Children

For the purposes of this Privacy Policy and applicable Indian law, a “child” means an individual under 18 years of age.

We do not knowingly process the personal data of a child except where verifiable consent has been obtained from the child's parent or lawful guardian, in accordance with Section 9 of the DPDP Act and applicable law. You must be at least 18 years of age to independently create an account or use the Service. If You are under 18 years of age, the Service may be used only with the verifiable consent of Your parent or lawful guardian, and such parent or lawful guardian shall be treated as the User for the purposes of accepting this Privacy Policy on the child's behalf.

The Company shall implement appropriate technical and organisational measures to ensure that such verifiable consent is obtained, including conducting due diligence to verify that the person providing consent is an adult and is identifiable, by reference to:

1. reliable identity and age details available with the Company; or
2. identity and age details voluntarily provided by the individual, including through a virtual token issued by an entity entrusted under applicable law or by the Central or State Government to issue or verify identity and age details (or a virtual token linked to such details), and includes any entity authorised by it for this purpose, as well as Digital Locker Service Providers or other government-recognised verification frameworks.

The Company does not undertake processing of a child's personal data that is likely to cause any detrimental effect on the well-being of the child, and shall not engage in tracking, behavioural monitoring, or targeted advertising directed at children.

If We become aware that a child's data has been collected without appropriate consent as required under applicable law, We will immediately cease processing and delete such personal data.

If You Access the Site from Outside India

If You reside outside India, You understand and agree that any information You provide to Us on the Site may be transferred to, and stored and processed in, India. If You do not want Your Personal Data to be transferred to India, You may choose not to provide that information to Us.

Where the Company transfers Your personal data outside India (for example, to service providers or infrastructure located outside India), such transfer shall be carried out in compliance with Section 16 of the DPDP Act and other applicable law, including any restrictions notified by the Central Government from time to time.

Policy for NDNC

This Privacy Policy covers the Company's treatment of Personal Data that the Company collects when You are on the Site and when You use Our Services, and of Personal Data that the Company's business partners share with the Company. This Privacy Policy does not apply to certain products, services or promotions offered by third parties, which are governed by their own applicable terms and privacy policies.

When You register with Us, We ask for Your first name, last name, contact number and email address. Once You register and sign in to Our Services, You are not anonymous to Us. During registration, You may also be asked to provide Your mobile phone number and email address to receive text messages and other communications relating to the Services.

Subject to Your consent, and where You have opted in to receive marketing communications, We may contact You via email, phone call, SMS or WhatsApp to offer You Our services, share product information, and inform You of promotional offers available on the Site or from associated third parties, for a period of 365 days from the date such consent is given, or until You withdraw Your consent, whichever is earlier. This consent is separate from, and is not implied merely by, Your use of the Site or registration for the Services.

Where You have registered Your preference under the DND/NCPR framework, such communications shall be made only to the extent permitted under applicable TRAI regulations, including where the Company has obtained Your valid explicit digital consent in accordance with the prescribed Digital Consent Acquisition (DCA) mechanism. Nothing in this clause shall be construed as overriding any registered DND/NCPR preference except to the extent expressly permitted under applicable law.

By registering for the Services, You authorise Us to send You SMS/email alerts relating to Your login details and other service requirements. Any promotional messages or emails will only be sent to You in accordance with Your consent as described above.

Grievance Redressal

You may submit Your grievance through the contact details provided below. All grievances shall be acknowledged within 24-48 hours of receipt.

The Company shall respond to and resolve such grievances within 15 days from the date of receipt, or within such period as may be prescribed under applicable law.

You are required to exhaust the grievance redressal mechanism provided herein before approaching the Data Protection Board of India.

If the Company is notified as a “Significant Data Fiduciary” under Section 10 of the DPDP Act, it shall, in addition to the Grievance Officer named below, appoint a Data Protection Officer based in India in accordance with Section 8(9) of the DPDP Act, and shall update this Privacy Policy accordingly.

Grievance Officer details

Name: Debasish Sahoo
E-mail: studentgrievance@leapfinance.com
Contact: +91 91872 33422

Data Breach Notification

In the event of a personal data breach affecting Your information, the Company shall, without delay upon becoming aware of the breach, notify the Data Protection Board of India within 72 hours of becoming aware and each affected User, in the form and manner prescribed under applicable law. Where required, such notification to You will describe the nature of the breach, its likely consequences, and the measures taken or proposed to be taken to mitigate the risk to You.

Changes to the Privacy Policy

We may make changes to this Privacy Policy from time to time to reflect changes in Our practices, services, technologies, or applicable laws. Any changes to this Privacy Policy will be notified to You through appropriate means, including by posting the updated Privacy Policy on the Site and, where required by applicable law, through additional notice or communication.

The updated Privacy Policy will indicate the date on which it was last revised. We encourage You to review this Privacy Policy periodically to stay informed about how We collect, use and process Your personal data.

Where any change requires Your consent under applicable law, We will obtain such consent in the manner prescribed by law. Your continued use of the Site will not, by itself, constitute consent to any new or materially different processing of Your personal data where consent is legally required.

© 2026 Leap Scholar. All rights reserved