Privacy Policy

Lap MD is operated by Embedite Private Limited. For the purposes of India's Digital Personal Data Protection Act 2023, Embedite Private Limited is the data fiduciary for your personal data. Our contact point, including for grievances, is support@lapup.app.

We collect only what the app needs to work:

• Account details: your name and email address, received from Google or Apple when you sign in. We never receive your Google or Apple password.
• Study activity and progress: card reviews and ratings, spaced repetition scheduling state, concept mastery, mock exam attempts with answers and timings, and study plans.
• Your exam selection, target year, focus systems and daily goal.
• Optional user content: PDFs and prompts you upload to generate your own study material.
• Payment metadata from our payment processor, such as plan, amount, status and processor reference. We never receive or store raw card details.
• Basic technical logs, such as error reports and security events.

Account details let you sign in and keep your progress across devices. Study activity runs spaced repetition, mock exams, your strength map and your planner, and personalises what you see next. Your exam selection shapes the curriculum and mock format. User content is used only to generate study material for your account. Payment metadata processes payments and entitlements. Contact details let us provide support. Technical logs keep the service secure and let us diagnose errors.

In India we process your personal data on the basis of the consent you give when you create an account and use the features described above. For visitors in the European Union or the United Kingdom we rely on performance of our contract with you for account and study features, and on legitimate interest for security, fraud prevention and error diagnosis. You can withdraw consent as easily as you gave it, by writing to support@lapup.app or by deleting your account. Withdrawal does not affect processing already carried out.

We use a small set of service providers, each for a stated role:

• Supabase and Lovable Cloud: managed database, authentication and app hosting.
• Google and Apple: sign-in.
• Sentry: error monitoring.
• Razorpay: payments in India.
• Stripe: international payments.
• Cloudflare: DNS and content delivery.

We do not sell your personal data and we do not share it with data brokers. We run no advertising and we do no cross-site tracking or ad profiling.

We keep your personal data only as long as it is needed for the purposes above, or as long as the law requires us to keep it, and then we erase it. If you delete your account we erase your personal data and study history, keeping only records we must retain for accounting, tax or legal reasons.

You may ask us for access to your personal data, for correction of anything inaccurate, for erasure of your data, and for an export of your data in a portable form. You may withdraw consent, raise a grievance, and, in India, nominate another person to exercise your rights in the event of your death or incapacity.

Use the controls in your profile, or write to support@lapup.app from the email address on your account. We respond within 90 days, and sooner wherever practical.

Lap MD is intended for users aged 18 and older. It is not directed to children. We do not knowingly collect personal data from anyone under 18, and if we discover such data we delete it.

The sub-processors named above may process your data outside India. Where that happens we rely on contractual safeguards with each provider, together with technical measures such as encryption in transit and per user access controls at the database level.

Grievances go to support@lapup.app, addressed to the grievance contact at Embedite Private Limited. If you are in India and are not satisfied with our response, you may also complain to the Data Protection Board of India.

This policy is effective from 13 August 2026 and is version 2026-08-13. If we change it we will update this page and, where the change is significant, tell you by email or with a notice in the app before it takes effect.