← Back to Home

Privacy Policy

Last updated: May 2026 · IndIaTaxSim (indiataxsim.com)

1. Who We Are

IndIaTaxSim is an educational GST simulation platform operated by Sajan Thesis Works. We provide a web application at indiataxsim.com and an Android mobile application (GST Simulator, available on Google Play, package: com.indiataxsim.app) for students and institutes to practise GST compliance procedures in a risk-free, simulated environment.

Contact: info@indiataxsim.com · Phone/WhatsApp: +91 94950 84610

Address: 3/245/B, Nedungottil House, Moongode, Near Puthuval Devi Temple, Trivandrum – 695573, Kerala, India.

This platform is for educational and simulation purposes only. It is not affiliated with GSTN or the Government of India.

2. Information We Collect

2.1 Account Information

  • Full name and email address provided during registration.
  • APAAR ID (optional), used solely for personalising your completion certificate.
  • For institute accounts: organisation name, contact details, and student enrolment records.

2.2 Simulation Data

  • Course progress and completed module records.
  • Practice registration data (simulated PAN, GSTIN, business details, promoter information, uploaded photographs).
  • Practice filing data: invoices, returns (GSTR-1, GSTR-3B, GSTR-7, GSTR-8, GSTR-5A, GSTR-5, GSTR-9, GSTR-4, CMP-08), challans, e-way bills, e-invoices, and ledger entries. All this data is fictional and for practice only.
  • Exam attempt records and scores.

2.3 Payment Information

  • The Android mobile app is free to download and does not process any payments. All purchases (Standard Plan, institute packages, exam fees) are made exclusively through the website at indiataxsim.com.
  • Transaction references and order IDs from web purchases are stored against your account via Razorpay.
  • We do not store card numbers, UPI credentials, net banking passwords, or any other sensitive payment credentials. All payment processing is handled by Razorpay.

2.4 Mobile App Data

  • App Lock PIN: If you set an App Lock PIN, it is stored securely on your device using the operating system's secure storage (Expo SecureStore). This PIN is never transmitted to our servers.
  • Biometric preference: Your choice to enable or disable biometric (fingerprint / Face ID) unlock is stored locally on your device only.
  • Push notifications: Users (students, institutes, and admins) who grant notification permission on the mobile app — an Expo push token is stored on our servers to enable activity notifications such as enrollment updates, credit assignments, new messages, support replies, and platform announcements. You may revoke this permission at any time from device Settings without affecting other app features.
  • Photo Library / Camera access: Only used when you choose to upload a photograph during GST registration practice. The app accesses your device photo library (READ_MEDIA_IMAGES on Android 13+, READ_EXTERNAL_STORAGE on earlier versions) to let you select an image. You may decline; no photo is required to use the rest of the app. Selected photos are uploaded to our secure cloud storage (Supabase) linked to your account.
  • Local draft storage: During the GST registration practice form, your in-progress form data is temporarily saved to your device's local cache folder (using Expo FileSystem) to prevent data loss if the app is interrupted. This cache is automatically deleted when you complete or abandon the registration. It is never shared with any third party.
  • All other simulation data (course progress, registration details, messages) is synced to our servers under your account, same as the web platform.

2.5 Device and Log Data

  • IP address, browser/device type, operating system version, and access timestamps — collected for security, analytics, and to improve the platform.

3. How We Use Your Information

  • To create and manage your account and provide access to the simulation platform (web and mobile).
  • To track your course progress and unlock completed modules.
  • To issue completion certificates upon passing the GST Knowledge Exam.
  • To process payments for Standard Plans, institute packages, and exam fees via Razorpay.
  • To send transactional emails and OTPs (registration, filing verification, password reset).
  • To send push notifications to users (students, institutes, and admins) about platform activity, enrollments, credit assignments, and support updates.
  • To facilitate messaging between students and their enrolled institutes.
  • To respond to support queries submitted via the app, website contact form, or email.
  • To comply with applicable Indian laws and regulations.

We do not sell, rent, share, or disclose your personal data to third parties for marketing or advertising purposes.

4. Data Storage and Security

  • Account data and simulation data are stored in Supabase (PostgreSQL) with row-level security (RLS) enabled — each user can only access their own data.
  • Uploaded photographs are stored in a private Supabase Storage bucket accessible only to the account owner.
  • Passwords are hashed using bcrypt and are never stored in plain text.
  • All data transmission between your device and our servers uses HTTPS / TLS encryption.
  • App Lock PINs are stored in device secure storage and never leave your device.

5. Mobile App Permissions

The GST Simulator Android app may request the following permissions:

  • Internet (INTERNET): Required for all platform features — login, course progress, practice filing, messaging, and payments. Always needed.
  • Read Media Images / Storage (READ_MEDIA_IMAGES on Android 13+; READ_EXTERNAL_STORAGE on Android 12 and below): Requested only when you choose to attach a photograph during GST registration practice. Used solely to access your photo gallery. You may decline; the rest of the app works without this permission.
  • Camera (CAMERA): Optional — requested only if you choose to take a new photo during registration practice instead of picking from gallery. You may decline and select from gallery instead.
  • Biometric / USE_BIOMETRIC / USE_FINGERPRINT: Optional. Only requested if you choose to set up App Lock with biometric authentication. Biometric data is processed entirely by the device OS and never leaves your device or reaches our servers.
  • Receive Push Notifications (POST_NOTIFICATIONS on Android 13+): Requested for all user types (students, institutes, and admins) to receive activity notifications — enrollment confirmations, credit assignments, new messages, support replies, and platform alerts. You may decline; the rest of the app works without this permission.

You can revoke any permission at any time from your device Settings → Apps → GST Simulator → Permissions. Revoking a permission only disables the feature that requires it and does not delete your account or data.

6. Cookies and Local Storage

On the web platform, we use session cookies to keep you logged in. We do not use third-party tracking or advertising cookies. On the mobile app, session tokens are stored securely using device-level secure storage.

7. Data Sharing & Third-Party Services

We share data only in the following limited circumstances:

  • Razorpay: Payment processing for the web platform (Standard Plan, institute packages, exam fees). Payments are made via the website only — the Android app does not process any payments. Subject to Razorpay's Privacy Policy.
  • Supabase: Database and file storage hosting (servers in the EU/US). All user account data, simulation data, and uploaded photographs are stored here. Subject to Supabase's Data Processing Agreement.
  • Firebase (Google): The web platform is hosted on Firebase Hosting (Google LLC). The Android app uses Firebase services via google-services.json. Firebase may collect standard app analytics and crash data. Subject to Google's Privacy Policy.
  • Expo (Push Notifications): Push tokens from students, institutes, and admin users are submitted to Expo's push notification service (Expo Go / EAS) to deliver activity notifications relevant to each user role.
  • Institute Administrators: If you are enrolled in an institute, your course progress summary and message history are visible to the institute admin on their dashboard.
  • Legal obligation: We may disclose data if required by law, court order, or a valid request from a government authority.

We do not sell personal data to any third party. We do not use your data for advertising or profiling.

8. Your Rights & Account Deletion

  • Access: You may request a copy of the personal data we hold about you at any time.
  • Correction: You may request correction of inaccurate personal data.
  • Deletion: You may request deletion of your account and all associated personal data at any time. Deletion is completed within 30 days. Note that anonymised, aggregated analytics data (containing no personal identifiers) may be retained.

How to delete your account:

  • Via the mobile app: Go to Profile → Feedback → select "Account Deletion Request" and submit. We will process it within 30 days.
  • Via email: Send a deletion request from your registered email address to info@indiataxsim.com with subject "Account Deletion Request".
  • Via website: Use the contact form at indiataxsim.com/#contact.

Deleting your account removes your name, email, simulation data, payment history, and uploaded photographs. Credits are non-refundable upon deletion (see Refund Policy).

9. Data Retention

We retain your account data and simulation records for as long as your account is active. If you delete your account, all personal data is removed within 30 days. Aggregated, anonymised analytics data may be retained indefinitely.

10. Children's Privacy

This platform is intended for users aged 16 and above. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has created an account, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related queries, data access requests, or account deletion:

Sajan Thesis Works
3/245/B, Nedungottil House, Moongode, Near Puthuval Devi Temple,
Trivandrum – 695573, Kerala, India
Email: info@indiataxsim.com