No third-party brokers, no ads.
Off by default. Toggle in Settings.
Answer data stored in AWS ap-south-1. Some processors operate outside India.
Hard-delete in 30 days. No emails.
01.What we collect
Three buckets, nothing more:
- Account — your name, email, and (if you sign in with Google) your Google profile photo and locale. That’s the lot.
- Submissions — the photographs of your handwritten answer sheets, the OCR transcript we extract from them, the question metadata you tag, and the evaluation report we return.
- Telemetry — coarse usage events (pages viewed, evaluations run, errors hit) so we can fix what breaks. No mouse heatmaps, no session recordings, no third-party trackers.
We do not collect your phone number, your aadhaar, your geolocation, your contacts, or anything from other apps on your device.
02.Why we collect it
| Data | Purpose | Legal basis (DPDP) |
|---|---|---|
| Email + name | Sign-in, send your reports, support replies | Contract |
| Answer photos | OCR + grading; show you the report | Contract |
| Transcripts | Searchable history in My Evaluations | Contract |
| Telemetry | Bug-fixing, queue-load, error rates | Legitimate use |
03.Your handwriting & answers
This is the part that matters most. Your answer sheets are yours. We hold them on your behalf to produce a report; that’s the entire deal.
- Photos and transcripts are encrypted at rest and in transit using industry-standard protocols.
- Only you and our evaluation pipeline can read them. No human at Likhit reads your answers unless you explicitly forward them to support.
- OCR runs in our private cloud — never sent to a third-party LLM provider for transcription.
- The grading model is hosted by us; we send it your transcript, not your photo, and we don’t share its inputs or outputs with anyone.
If — and only if — you flip the Help improve Likhit toggle in Settings → Privacy, we may use anonymised excerpts of your transcripts to fine-tune our grading model. You can flip it back any time; old contributions remain in the training set, but no new ones are taken.
05.How long we keep it
- Answer photos — 90 days, then permanently deleted from primary storage. Encrypted backups age out at 30 more days.
- Transcripts + reports — for the life of your account, so you can revisit them in My Evaluations.
- Account data — until you delete your account, then 30 days in cold storage to honour any reversal request, then gone.
- Telemetry — 365 days, then aggregated to non-identifying counts.
06.Your rights & controls
Under India’s DPDP Act 2023 you have the right to:
- Access — download every photo, transcript, and report we hold on you, in a single zip. Settings → Export
- Correct — fix errors in your account data.
- Erase — delete your account and everything tied to it, in one click.
- Withdraw consent — turn off model-training contributions at any time.
- Grieve — escalate to our Data Protection Officer (below) within 7 days.
If the in-app delete button ever fails, mail us. We’ll honour the request within 24 hours and send you a confirmation log. Promise.
— L.07.How we secure data
- We use encryption in transit and at rest for all answer photos, transcripts, and reports.
- Production access is restricted, logged, and reviewed. No credentials, photos, or transcripts on developer devices.
- We are strengthening our security controls throughout the beta period and will publish a more detailed security overview when we reach general availability.
If the worst happens we will notify affected users and the CERT-In within 72 hours, with a plain-English description of what happened, what we did, and what you should do.
08.Age requirement
Likhit is built for adult civil-services aspirants. You must be 18 or older to use this service, or using it with verifiable consent from a parent or lawful guardian. We do not knowingly collect data from anyone under 18. If a parent or guardian believes we have, write to hello@likhit.in and we will delete it within 7 days.
09.Cookies & analytics
Two cookies, both first-party, both essential:
- likhit.session — keeps you signed in. Expires after 30 days of inactivity.
- likhit.consent — remembers that you’ve seen this notice. Expires in 365 days.
No Google Analytics, no Meta Pixel, no Hotjar. We use a self-hosted Plausible instance for aggregate page-view counts; it sets no cookies and stores no IP addresses.
10.Changes to this policy
If we change anything material, we’ll email you at least 14 days before the new version takes effect, with a plain-English summary of what changed and why. Cosmetic edits (typos, broken links) we may do quietly, but we keep a public changelog.
11.Privacy contact
Privacy questions, deletion requests, grievances — write to us directly:
- Privacy queries — hello@likhit.in
- Postal: Likhit, Mukherjee Nagar, Delhi 110009
- Response SLA: 7 working days for grievances; 24 hours for deletion confirmations.
Read the terms next.
The other half of the fine print — what we promise, what you promise, and what happens if either of us slips up.