Last updated: October 2026

Privacy Policy

Science Lab ("we") runs Science Lab, a virtual laboratory for school students. This page explains what we collect, why, and the choices you have. We collect only what the service needs.

What we collect

• Account details: your name, e-mail address, class (11 or 12) and, optionally, a phone number. Your password is stored only as a salted Argon2id hash; we cannot read it.
• Learning activity: which labs you open, how long you work, the steps you reach, quiz (viva) scores and the results you reach. This powers your progress page and helps us improve the labs.
• Reports and feedback you send from inside a lab, with the lab it concerns.
• Payments: handled by Razorpay. Card, UPI and bank details go to Razorpay directly; we never see or store them. We keep the order, plan, amount, coupon and payment id so we can activate your plan and issue support.
• Technical data: IP address and device/browser information in security logs, used to protect accounts and prevent abuse.

How we use it

• To run your account, show your progress and unlock the labs your plan includes.
• To send service e-mails: sign-up, password reset codes, payment and security notices.
• To send reminders, progress summaries and offers. You can switch these off at any time from your account page or with the Unsubscribe link in every such e-mail.
• To keep the service secure and to fix problems you report.

We do not sell your personal data and we do not show third-party advertising.

Cookies and storage

We use a secure, HTTP-only cookie to keep you signed in, and a small preference cookie / local storage entry for your language and display choices. We do not use advertising cookies.

Who we share data with

Only service providers that help us run Science Lab: hosting and database providers, an e-mail delivery provider, and Razorpay for payments. They process data on our instructions. We may disclose information when the law requires it.

Students under 18

Science Lab is made for school students. If you are under 18, please use the service with the knowledge of a parent or guardian. A parent or guardian can ask us to access, correct or delete a child's data at any time.

Retention

We keep your account and learning data while your account is open. When you ask us to delete your account we remove your personal data, except records we must keep by law (for example payment records for tax purposes).

Your rights

You can see and correct your details on your account page, opt out of marketing e-mails, and ask us to export or delete your data. Use the contact page.

Security

Data is encrypted in transit (HTTPS). Passwords are hashed, sessions can be revoked, access to the admin console is restricted and logged, and sign-in is rate limited. No system is perfectly secure; if we ever learn of a breach that affects you, we will tell you.

Changes

If we change this policy in a meaningful way we will update the date above and, where appropriate, tell you by e-mail or in the app.