Privacy Policy

Who we are

The Legal Smriti app and website are operated by Legal Smriti. In this policy, “Legal Smriti”, “we”, “us” and “our” mean that operator.

Legal Smriti is a legal-education platform. You can reach us using the details under Contact and grievances.

What this policy covers

This policy applies to the Legal Smriti app for Android and to the Legal Smriti website, including the pages where you register, sign in, enrol and learn in a browser. You use one account for both, so your courses and progress are the same in each.

It also covers these information pages about our courses.

It doesn’t cover services run by other organisations that you use alongside Legal Smriti, such as the meeting platform for live classes or a payment provider’s own pages. Their own privacy policies apply to them.

Information you give us

When you register

When you register, you give us:

• your full name, age and gender;
• your mobile number and email address, which you can also use to sign in;
• a password;
• your category: Student, Advocate or Aspirant;
• the course you want to start with;
• your postal address, with your consent to its use. We record when you gave that consent.

We also ask for a few details that depend on your category:

• Students: your college, degree and semester.
• Advocates: your Bar Association and, if you choose to give it, the enrolment ID issued by your State Bar Council.
• Aspirants: your education level and, if you choose to give it, your school or college.

We don’t ask for your date of birth or for any identity document.

When you change your profile

You can change your name, your student, advocate or aspirant details and your postal address. When you change your address, we ask for your consent again and record the new time. A new email address or mobile number goes through a verified request, described under Your choices.

When you contact us

If you email, call or message us, we receive your message and the contact details you use, and we use them to help you and to reply.

Your learning records

As you learn, we keep a record of:

• the courses you’re enrolled in, when you joined each one and when you last opened it;
• your progress through each day, including whether you joined the day’s live class while it was on;
• the replays you start, and when;
• your assignment answers, and the marks, summary and suggestions your reviewer gives;
• the drafting templates you unlock;
• the dispatch status of your study material and certificate, with the dispatch date and any tracking reference;
• the notifications in your inbox, and when you read them.

Some features are introduced gradually, so they may not be on your account yet. If you use them, we also keep what you create in them: practice answers and scores, notes, bookmarks and flashcard progress, your study plan, questions you send to faculty and their replies, written answers you send for evaluation, mentor-session bookings, milestones and digital certificates.

Who reads your work. Reviewers read your assignment answers to mark them. Their review screens show the submission’s reference number and your category, not your name. Faculty read the questions you send them, and reviewers read the written answers you send for evaluation.

Live classes are recorded so that learners who miss a class can watch its replay. If you speak, share your video or write in the chat during a class, this may appear in the recording.

Payment records

When you pay for a course, we keep a record of the payment:

• what you paid for, the amount and the currency;
• the order and payment references, and the status of the payment;
• the dates of the payment and of any refund recorded against it;
• how the payment was confirmed.

If you pay through a payment provider, you enter your payment details with that provider, not with us. We never receive or store your financial details, and we confirm every payment directly with the provider before it counts.

We send the provider only what it needs: the amount, the currency and our order reference. We don’t send it your name, email address or mobile number. The provider’s own page may ask you for contact details; it uses them under its own terms and privacy policy.

Device and technical data

• Installation ID. A random ID that the app creates when it’s installed, and that the website creates each time you sign in. We use it to manage your sign-ins and protect your account.
• App version. The app tells our servers which version it is with each request, and this is recorded in our server logs.
• Push token. If push notifications are switched on for the app, we store your device’s push token so that we can tell the app to check for updates. That message contains no personal information.
• Sign-in protection. To stop people guessing passwords, we keep coded versions of the sign-in name that was typed, the network address and the installation ID for 48 hours. We don’t keep the original values.
• Network address. We use your device’s network (IP) address only briefly, to limit repeated requests, and we store it only in coded form in those sign-in protection records. It isn’t kept in our server logs, audit records or usage statistics.
• Server logs. Our logs record the type of each request, the part of the service it was for, the result and how long it took. They don’t record what you typed or sent, and anything that looks like an email address, a mobile number or a sign-in token is masked.

The Android app doesn’t read your advertising ID, IMEI, Android ID or device model. It doesn’t ask for access to your location, camera, microphone, contacts or device storage.

Usage statistics

The Android app sends us short usage events so that we can see how the courses are used and improve them. For example, an event may record that a course was viewed, a day was opened, a class was joined, a replay was started, an assignment was submitted or a day was completed. The app also sends brief error reports, which record the type of error and the screen it happened on but not its details, and a note when someone tries to take a screenshot of a protected screen.

• First-party only. Events go only to Legal Smriti’s own servers. The app, and the pages of the website where you sign in and learn, contain no third-party analytics, advertising or crash-reporting tools. These information pages use Google Analytics only if you accept it, as described under Analytics on these information pages.
• What an event holds. The event’s name, a few short details such as a course code or a day number, the time, and a random number for that session of the app.
• Pseudonymous. Instead of your account details, each event carries a code that we derive from your account with a secret key. Events contain no names, contact details, answers, IP address or device ID, and our servers discard any event that seems to contain personal details.
• Only while you’re signed in. The app sends events only while you’re signed in.
• Unlinked when you leave. If you delete your account, the code is removed from your events, so they can no longer be linked to you.

The website doesn’t send these events. The app doesn’t currently offer a setting to turn these statistics off.

Cookies and browser storage

In the app

The app doesn’t use cookies. It keeps your sign-in tokens and assignment drafts on your phone in encrypted form, with a key protected by the phone’s secure key store. Other information it keeps so that screens open quickly, such as your profile and course overview, stays in the app’s private storage. Signing out clears what the app keeps on your phone.

On the website

When you sign in on the website, it uses:

• A session cookie that keeps you signed in. It holds your sign-in in sealed form, can’t be read by the page’s scripts and is sent only over secure connections. It lasts up to 30 days, is renewed as you use the website and is removed when you sign out.
• Your browser’s storage for your theme choice and for drafts of your assignment and written answers. Drafts are kept in plain text in that browser until you submit them, and they stay there after you sign out.
• Temporary session storage for the replay page and for questions you flag during a test. Your browser clears it when you close the tab.

If you use a shared or public computer, submit your answers before you leave, or clear the browser’s data for the website after you sign out.

Our network and security provider may run a short check in your browser to tell people apart from automated traffic. On a payment page, the payment provider’s own scripts run and may store information on the provider’s own sites. Our network provider may also count visits to the website in aggregate, for example how many pages are viewed and how quickly they load.

On these information pages

Our own code on the pages about our courses sets no cookies. It keeps one item in your browser’s storage: your answer to the analytics question, so that you aren’t asked on every page. Unless you accept analytics, these pages load no scripts from other websites. If you accept, Google Analytics sets its own cookies, described under Analytics on these information pages.

We don’t use advertising cookies anywhere on Legal Smriti.

Analytics on these information pages

These information pages about our courses use Google Analytics, through Google Tag Manager, to understand how they are used: for example, which pages people visit and how they find them. They use it only if you accept it. The Legal Smriti app and the pages where you sign in and learn don’t use it.

Your choice

• On your first visit, a notice asks whether you accept analytics cookies. Until you choose Accept, Google Analytics isn’t loaded and no analytics cookies are set. If you choose Reject, or don’t answer, it stays off.
• We keep your answer in your browser’s storage for this website, so that we don’t ask on every page. If your browser doesn’t allow this, we can’t remember your answer: the notice appears again on the next page, and Google Analytics loads only on pages where you choose Accept.
• You can change your answer at any time with Cookie settings at the bottom of every page. If you change it to Reject, the change applies from the next page you open: Google Analytics doesn’t load again.

What is collected

If you accept, Google Analytics records:

• the pages you view, and the page or website you came from (the referrer);
• how you use the pages, such as how far you scroll and the links you follow, including phone, email, WhatsApp, “Download App” and “Enrol on the website” links;
• the type of device, operating system and browser you use, your screen size and your browser’s language;
• your approximate location, such as your city or region, which Google works out from your network (IP) address.

It uses these cookies:

• _ga holds a random identifier, so that visits from the same browser can be counted together;
• _ga_ followed by an ID keeps track of the current visit.

You can delete them at any time in your browser’s settings. Analytics isn’t linked to a Legal Smriti account. Google’s advertising features are switched off on these pages, so no advertising cookies are set and analytics information isn’t used to show you ads.

Google’s role

Google provides Google Analytics and Google Tag Manager as our service provider and processes this information on our behalf. It may process it in countries other than India. Google explains how it uses information from sites that use its services (opens in a new tab).

Opting out

Besides choosing Reject, you can stop Google Analytics on every website you visit with Google’s opt-out browser add-on (opens in a new tab).

How long it is kept

How long Google Analytics keeps this information is being finalised and will be published here.

How we use information

• Your account. We use your details to create and run your account and to let you sign in on the app and the website.
• Your courses. We open each day, run live classes and replays, record your progress and show your results.
• Payments. We confirm payments, unlock the courses you’ve paid for and keep payment records.
• Reviews. Reviewers mark your assignments and answers, and we return their marks and feedback to you.
• Posting. We use your postal address to post your study material and certificates to you.
• Account emails. We send password-reset and contact-change codes, and notices when your password or contact details change or when someone repeatedly tries to sign in to your account.
• Notifications. We send the notifications you’ve chosen, such as class reminders, feedback alerts and payment updates.
• Help. We answer your questions and help with problems.
• Security. We keep the service secure and prevent misuse, for example by limiting repeated sign-in attempts.
• Improvement. We use the pseudonymous usage statistics described above to see how courses are used and improve them.
• Website analytics. If you accept analytics, we use Google Analytics reports to see how these information pages are used and to improve them.

The app and the website show no third-party advertising, and we don’t share your information with advertisers.

Offers and announcements

Where this setting is available, you can choose to receive occasional news and offers from Legal Smriti:

• it’s off until you turn it on;
• messages appear only in your Legal Smriti inbox, never as phone notifications, text messages or emails;
• you get no more than 3 in any 7 days;
• we record your choice and the version of the notice you agreed to;
• you can turn it off at any time: new messages stop, and ones you’ve already received stay in your inbox;
• it isn’t available to learners under 18.

Sharing your information

We share personal information only with the organisations that help us run Legal Smriti, and only what each one needs for its task.

Service providers

• Hosting. Our hosting provider runs the servers and databases behind the app and the website. Details of where our servers are located will be published here.
• Network and security (currently Cloudflare). Carries traffic to and from our servers securely and blocks attacks. It sees your IP address and the details of each request.
• Email delivery (currently SMTP2GO). Sends our account emails. It receives your email address and each email’s subject and text, which can include a one-time code. Our emails contain no tracking pixels.
• Website analytics (Google). If you accept analytics on these information pages, Google receives the information described under Analytics on these information pages.
• Payment providers. Take payments on their own pages, as described under Payment records.
• Video delivery. Streams course videos and replays to your device through short-lived links. It sees your device’s IP address while it does so.
• Live-class meeting platform. Live classes are held on an external meeting platform. When you join, the platform handles your information under its own terms and privacy policy, and other participants may see the name and video you choose to share.
• Push notifications. If push notifications are switched on for the app, the push service receives your device’s push token. The messages we send through it contain no personal information.
• Couriers and postal services. Receive your name and postal address so that they can deliver your study material and certificates.

This list describes the providers in use when this policy was last updated.

Within Legal Smriti

Our staff see learners’ information only in the parts of our admin console that their role allows. When staff open learners’ personal details, such as profiles and postal addresses, the view is recorded in an audit log. Staff who post study material and certificates can export names and postal addresses for the courier; that export needs its own permission and is recorded.

Information others can see

Your profile, progress and results aren’t shown to other learners, and there are no rankings or leaderboards. If you’re issued a digital certificate, anyone with its code or link can check it: the check shows the name on the certificate, the course, the issue date and the issuer.

Other disclosures

We may also disclose information where the law requires it. Apart from that, we share personal information only as described in this section.

How long we keep information

We keep your account and learning information while you have an account. When you delete your account, we delete or anonymise it straight away, as described under Deleting your account.

Some records have set periods:

• Sign-in protection records: 48 hours.
• Password-reset codes: valid for 10 minutes and usable once.
• Contact-change requests: deleted when they expire. After a change, your previous contact details can be used to reset your password for 72 hours.
• Sign-in sessions: deleted 90 days after they end.
• Your notification inbox: kept until you delete your account.

Some records are kept after you delete your account, without your name or contact details: payment and enrolment records, learning records, our audit log and usage statistics. How long we keep these records, our server logs and recordings of live classes is being finalised and will be published here.

Deleting your account

You can delete your account yourself, in the app or on the website: open Profile, choose Delete account and confirm with your password.

• Your account is closed straight away, and you’re signed out everywhere.
• There’s no waiting period, and deletion can’t be undone.
• Your access to your courses ends. For what this means for payments, see our Refund and Cancellation Policy.

What we delete

• Your name, email address, mobile number, age, gender and password.
• Your postal address and your student, advocate or aspirant details.
• Your notification settings, your offers choice, your inbox, your registered devices and your sessions.
• The text of your assignment answers and of written answers you sent for evaluation.
• Your practice answers, notes, bookmarks, flashcard progress and study plan, and the questions you sent to faculty with their replies.
• Your milestones and digital certificates. Their verification links stop working.
• Any contact-change request in progress.
• The link between you and your usage statistics.

What we keep, without your name or contact details

• Payment records: enrolments, what was bought, amounts, references, dates and any refunds.
• Learning records: day progress and replay counts, submissions without their text, marks and feedback, templates unlocked, mentor-session bookings, and the dispatch status of study material and certificates, without the address.
• Our audit log of actions on the service, which is kept in a minimised form.
• Usage statistics, which can no longer be linked to you.
• The closed account record, which shows your learner category and when the account was created and closed.

If our backups contain information you have deleted, it stays there only until those backups are replaced.

If you can’t sign in to delete your account, contact us for help.

Your choices

• See your information. Your profile, progress, submissions and reviews are shown in the app and on the website, along with receipts, notes and certificates where those features are available.
• Correct your profile. Change your name, your student, advocate or aspirant details and your postal address in Profile.
• Change your email address or mobile number. Use the verified change in Profile. For a new email address, we send a 6-digit code to both your current and your new address; for a new mobile number, the code goes to your email address. After a change, your other devices are signed out, your previous email address gets a notice, and your previous details can still be used to reset your password for 72 hours.
• Choose your notifications. Turn class reminders, review published, next day ready, payment updates and milestones on or off. On Android, notifications other than class reminders wait in your inbox between 9:30 pm and 7:00 am.
• Offers and announcements. Turn them on or off whenever you like.
• Analytics on these information pages. Accept or reject it, and change your answer at any time with Cookie settings at the bottom of every page, as described under Analytics on these information pages.
• Sign out. Signing out ends your session on that device. In the app, it also clears what the app keeps on your phone.
• Delete your account at any time, as described above.

Your age, gender and category can’t be changed in the app or on the website. To ask for a copy of your information, a correction you can’t make yourself, or anything else about how we handle it, contact us.

Young learners

You can register if you’re 16 or older. You tell us your age when you register; we don’t check it.

Learners under 18 can’t turn on offers and announcements and don’t receive them.

Our approach for learners under 18, including whether a parent’s or guardian’s consent is needed, is being finalised and will be set out here.

How we protect information

• Connections to the app, the website and our servers are encrypted, and the Android app refuses unencrypted connections.
• Passwords are never stored in a readable form. We refuse passwords that are too common or that match your email address or mobile number.
• Your contact details, postal address, college or institution, Bar Association, enrolment ID, assignment and written answers, notes and messages to faculty are encrypted in our database.
• Your financial details are entered with the payment provider and never reach our servers, and every payment is confirmed directly with the provider.
• Sign-in is protected against guessing by lockouts and limits on repeated attempts, and we email you if someone repeatedly tries to sign in to your account.
• Sessions are short-lived. Resetting your password or deleting your account signs you out on every device, and a verified contact change signs out your other devices.
• Staff see only what their role allows, and their views of learners’ personal details are recorded.
• In the Android app, sign-in tokens and drafts are encrypted on the phone, screenshots are blocked on the sign-in, registration, account-deletion and course screens, and the app’s data is left out of phone backups.
• Course videos are delivered through short-lived signed links.

No system is completely secure, so we can’t promise that information will never be accessed without permission. If you think someone has used your account, reset your password with “Forgot password?” and contact us.

Changes to this policy

We’ll update this policy when the service, or the way we handle information, changes. Each update changes the “Last updated” date at the top of this page.

Contact and grievances

If you have a question or a complaint about how we handle your information, or you want help with any of the choices above, contact us using the details below. Our grievance officer can be reached through the Contact page.

Email

legalsmriti1@gmail.com

Phone

+91 96660 05045

WhatsApp

+91 96660 05045 (opens in a new tab)

Office address

Mahalaxmi Nilayam, Rahamath Bagh
Kachiguda Station Road, beside Bank of Maharashtra, opposite Prathima Hospital
Kachiguda, Hyderabad, Telangana 500027

Office hours

Open every day, 9:00 am – 10:00 pm