Innoryx App Privacy Policy

This policy explains what personal data the Innoryx app for iPhone and Android ("the app") collects, why we collect it, who we share it with, and the choices you have. It is published by Innoryx Global Learning ("Innoryx", "we", "us").

It adds to our main Privacy Policy, which covers our websites, enquiries, enrolments, other payments, and WhatsApp and Instagram messaging. Where this policy does not cover a topic, the main Privacy Policy applies.

Innoryx Global Learning Pvt. Ltd., Nehru Institute of Engineering & Technology, Nehru Gardens, Thirumalayampalayam, Coimbatore – 641105, India. UAE operations: FutureX Global Learning, SPARK, University City, Sharjah – 66636, United Arab Emirates.

• We collect what we need to run your learner account, deliver your courses and certificates, and process purchases you make in the app.
• The app shows no advertising and contains no advertising or analytics software. We do not track you across other companies' apps or websites, and we do not sell your data.
• The app does not access your location, contacts, photos, camera, microphone or your device's advertising identifier.
• You can delete your account from inside the app at any time.

• Account details — your mobile (WhatsApp) number, which you verify with a code, your first, middle and last name, date of birth, email address, country, and password. Your name and date of birth are printed on your certificates. Your password is sent over an encrypted connection and stored only in hashed form; we cannot read it.
• Optional profile details — address, timezone and an emergency contact name and phone number, if you add them under Account → Personal information.
• Learning activity — the courses you are enrolled in, lessons you start and complete, where you stopped in videos and PDFs, your answers, attempts and results in quizzes, activities and assessments, and the certificates issued to you.
• Purchases — when you buy a course in the app: the course, the store product, the store (App Store or Google Play), the price and currency, the store transaction ID, the date, and whether the purchase was completed or refunded. Your card and bank details are handled by Apple or Google and never reach us.
• Device and security data — when you sign up, verify a code or reset your password, the app sends a random identifier it creates and stores on your device. Our server keeps only a one-way (hashed) form of it, together with a hashed form of your IP address, to limit repeated attempts and stop abuse. It is not an advertising identifier and is not used to follow your activity. Like any online service, our servers also receive your IP address and basic technical details (such as the app version and operating system) when the app connects.
• Support requests — if you email or call us from the app, we receive what you send us. Emails started from the app are pre-filled with the app version and your device's operating system and version; you can remove these before sending.

The app does not upload files, photos or documents from your device, and it does not collect your contacts or precise or approximate location.

• Create, verify and secure your learner account and keep you signed in.
• Deliver your courses, save your progress, run quizzes and assessments, and issue and verify certificates.
• Process purchases made in the app, unlock the course you bought on your account, restore purchases, and handle refunds.
• Answer your support requests and tell you about changes to your account.
• Keep the app and your account secure and prevent fraud and misuse.
• Meet our legal, tax, accounting and accreditation obligations.

We do not use data from the app for advertising, and we do not combine it with data from other companies to build a profile of you. The legal bases we rely on are described in our main Privacy Policy.

We share personal data only with the service providers that run parts of the app for us, and only what each one needs:

• Apple and Google — distribute the app and process in-app purchases and refunds under their own terms and privacy policies.
• RevenueCat — checks in-app purchases with Apple and Google and keeps them in step with your Innoryx account. It receives your Innoryx account ID (a random identifier, not your name, email or phone number), your store purchase records, and basic device and app information such as platform, operating system and app version, store country and IP address.
• Supabase — hosts our database and the sign-in service used by the app.
• Bunny.net — delivers course videos and files through short-lived, signed links. Like any content delivery network it receives your IP address and the files requested.
• Cloudflare — protects and delivers innoryx.com, including the app's sign-up and sign-in requests.
• Meta (WhatsApp Business Platform) and our messaging provider — deliver verification codes to your WhatsApp number.
• Our email provider — sends email verification codes and account emails.
• Expo — delivers updates to the app. It receives technical details such as your IP address, platform, app version and an identifier for the app installation.
• Awarding bodies, such as Highfield Qualifications, when you are registered for their qualification, and professional advisers or authorities where the law requires it.

We do not sell personal data, and we do not share it for advertising.

• Your sign-in session, kept in the app's private storage until you sign out or delete the app.
• The random device identifier described in section 3.
• Temporary copies of PDFs, toolkits and certificates you open, save or share, kept in the app's cache. Your device may clear the cache at any time, and deleting the app removes it.

Files you save to a folder or share with another app leave the app and are then under your control. Course videos are streamed and are not saved on your device.

The app asks for no access to your location, contacts, photos, camera or microphone, and it does not send push notifications. When you save a file on Android, the system asks you to choose a folder, and the app can only write to that folder. On iPhone, saving and sharing use the system share sheet.

• Account and learning data: while your account is open.
• Purchase, invoice and refund records: as long as tax and accounting law requires, even after your account is deleted, with your contact details removed.
• Records of certificates already issued: kept so that an employer or awarding body can still verify a certificate you shared.
• Security records (hashed identifiers): only as long as the security checks need.
• Support messages: as long as needed to help you.

In the app, open Account → Delete account, enter your password, type DELETE and confirm. You are signed out at once and can no longer sign in to the app or the website. We erase your personal data within 30 days, apart from the records listed in section 8. Deleting the app from your phone does not delete your account.

To delete your account without the app, or to see exactly what is deleted and kept, read Delete your Innoryx account.

You can view and update most of your details in the app under Account. You may also ask us for a copy of your data, to correct or delete it, or to object to or restrict how we use it, by emailing info@innoryx.com. We may need to verify your identity first. You also have the right to complain to the data protection authority where you live.

The app talks to our servers only over encrypted (HTTPS) connections. Access to your data is limited to your own account by database-level access controls, course media is served through short-lived signed links, and sign-up, sign-in and password-reset attempts are rate limited. No system is perfectly secure, but we work to protect your data and to fix problems quickly.

We operate in India and the United Arab Emirates, and our service providers may process data in other countries. Where data is transferred internationally, we rely on appropriate safeguards and contractual protections with those providers.

The app is for students, graduates and working professionals. We do not knowingly collect data from children under 13. If you believe a child has given us data, contact us and we will delete it.

We will update this policy when the app or the law changes. The new version will be published on this page with a new "last updated" date, and we will tell you by email or in the app about significant changes.

Email: info@innoryx.com
India: +91 9895 030 890
UAE: +971 58 570 0890