Privacy Policy
Effective date: June 6, 2026
We collect the minimum personal data needed to run Flycodx, we never sell your data, and you stay in control. This Policy explains what we collect, why, and the rights you have under India's Digital Personal Data Protection Act, 2023.
1. Introduction
Flycodx ("Flycodx", "we", "us", "our"), operated by [Flycodx — registered operator name], [Registered business address, City, State, PIN, India], respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why and how we use it, with whom we share it, how long we keep it, and the rights and choices available to you. This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules made thereunder. For the purposes of the DPDP Act, Flycodx is the "Data Fiduciary" and you are the "Data Principal". By using the Platform, you acknowledge that you have read and understood this Policy.
2. Your Consent
Where we rely on your consent, that consent is sought as a free, specific, informed, unconditional and unambiguous indication of your wishes, given by a clear affirmative action, and limited to the purposes described in this Policy. You may withdraw your consent at any time by contacting us (see "Grievance Officer" below) or through available account settings. Withdrawing consent is as easy as giving it. On withdrawal, we will stop the relevant processing and delete your personal data unless we are required or permitted by law to retain it. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and may limit or prevent your use of certain features.
3. Personal Data We Collect
Information you give us: • Account data — your name, email address, password (stored only in hashed form), and the username you choose for your public profile. • Profile data (optional) — country, institution/college, skill level, preferred programming languages, bio, and links you choose to add (e.g. LinkedIn, GitHub). • User Content — code submissions, solutions, contest entries, feedback and support messages. Information we collect automatically: • Usage and device data — pages visited, features used, approximate session activity, browser type, device and operating-system information, and a randomly generated identifier used for first-party analytics. • Cookies and similar technologies — used to keep you signed in, remember your preferences (such as light/dark theme) and to understand aggregate product usage. See "Cookies and Analytics" below. • Log and security data — IP address and timestamps, used for security, fraud prevention and rate limiting. Information from third parties: • If you sign in using a third-party provider (e.g. Google), we receive basic profile information (such as your name and email) that you authorise that provider to share. We do not intentionally collect sensitive personal data, and we ask that you do not submit such data through code, profiles or messages.
4. How and Why We Use Your Data
We process your personal data for the following specified purposes: • to create and manage your Account and authenticate you; • to provide the Platform's core features — practising problems, executing and judging code, tracking your progress, generating certificates, and computing leaderboards and rankings; • to operate Contests and, where applicable, to verify eligibility and process prizes (including KYC and tax compliance); • to display your public profile, submission history and achievements as you direct; • to provide customer support and respond to your requests and grievances; • to maintain security, prevent fraud, abuse and cheating, and enforce our Terms; • to understand, measure and improve the Platform using aggregate, first-party analytics; • to send you essential service communications, and — only with your consent — optional updates; and • to comply with applicable law and respond to lawful requests from authorities.
5. Legal Bases for Processing
We process your personal data on the basis of your consent and, where applicable, for "certain legitimate uses" permitted under the DPDP Act (for example, where you have voluntarily provided data for a specified purpose, to comply with law, or to respond to a medical or safety emergency). We process only the personal data that is necessary for the purposes described in this Policy (data minimisation).
6. Cookies and Analytics
We use a small number of cookies and similar technologies: • Strictly necessary — to keep you securely signed in and to operate core functionality. • Preference — to remember choices such as your theme. • Analytics — first-party, self-hosted analytics that help us understand aggregate usage (for example, which features are used). We do not sell your data and we do not use third-party advertising or cross-site tracking cookies. You can control or delete cookies through your browser settings. Disabling some cookies may affect how the Platform works. We do not perform behavioural tracking, profiling or targeted advertising of users who are children (see "Children's Data").
7. How We Share Your Data
We do not sell your personal data. We share personal data only as follows: • Service providers / Data Processors — trusted vendors who process data on our behalf and under contract (for example, hosting, infrastructure, code-execution and email delivery). They may process data only as instructed by us. • Public profile information — information you choose to make public (such as your username, public profile, ranking and achievements) is visible to others by design. • Legal and safety — where required to comply with applicable law, a court order or a lawful request, or to protect the rights, safety and security of Flycodx, our users or the public. • Business transfers — in connection with a merger, acquisition, financing or sale of assets, subject to this Policy.
8. Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes set out in this Policy, to provide the Platform to you, to comply with our legal obligations, resolve disputes and enforce our agreements. When you delete your Account or withdraw consent, we will delete or irreversibly anonymise your personal data within a reasonable period, except where retention is required by law (for example, tax records relating to any prize payout) or is necessary to establish, exercise or defend legal claims.
9. Security Safeguards
We implement reasonable technical and organisational security measures appropriate to the risk, including encryption of data in transit (HTTPS/TLS), hashing of passwords, access controls, rate limiting, network isolation of sensitive services, and regular backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.
10. Personal Data Breach
In the event of a personal data breach, we will take prompt remedial action and will notify the Data Protection Board of India and affected Data Principals in the manner and within the timelines required under the DPDP Act and applicable rules.
11. Your Rights as a Data Principal
Subject to applicable law, you have the right to: • Access — obtain a summary of the personal data we process about you and the processing activities; • Correction and updating — request correction, completion or updating of inaccurate or incomplete data; • Erasure — request deletion of personal data that is no longer necessary for the purpose it was collected; • Withdraw consent — withdraw your consent at any time; • Nominate — nominate another individual to exercise your rights in the event of your death or incapacity; • Grievance redressal — have your grievances addressed by us in a timely manner. To exercise any of these rights, contact our Grievance Officer (below). We may need to verify your identity before acting on a request. You also have the right to make a complaint to the Data Protection Board of India if you are not satisfied with our response. If you are located in the EU/EEA or UK, you may additionally have rights under the GDPR (such as data portability and the right to object); if you are a California resident, you may have rights under the CCPA/CPRA. We honour applicable requests under those laws.
12. Children's Data
The Platform is intended for users who are 18 years of age or older. Under the DPDP Act, any individual under 18 is a "child". We do not knowingly process the personal data of a child without the verifiable consent of a parent or lawful guardian. We do not undertake tracking, behavioural monitoring, profiling or targeted advertising directed at children, and we do not process children's data in any manner likely to cause a detrimental effect on their well-being. If you are a parent or guardian and believe that a child has provided us with personal data without your verifiable consent, please contact us and we will take steps to delete such data.
13. Transfers of Data
We primarily store and process personal data on infrastructure located in or serving India. Where personal data is transferred to or processed in a country outside India, we will do so only in accordance with applicable law (including any restrictions notified by the Government of India under the DPDP Act) and with appropriate safeguards in place.
14. Third-Party Links and Services
The Platform may contain links to, or integrate with, third-party websites and services that are not operated by us. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies.
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective date" above and, where appropriate, notify you through the Platform or by email. Your continued use of the Platform after the changes take effect constitutes acknowledgement of the updated Policy.
16. Grievance Officer and Contact
If you have any questions, requests or complaints about this Policy or your personal data, please contact our Grievance Officer, who also serves as the point of contact for data-protection matters. We will acknowledge your complaint within twenty-four (24) hours and endeavour to resolve it within fifteen (15) days. Grievance Officer: [Grievance Officer / Data Protection contact name] Operated by: [Flycodx — registered operator name] Email: [email protected] Address: [Registered business address, City, State, PIN, India]