Legal · Privacy

Privacy policy

Couchd is made and operated by ZeroSuite, from India. Most people who use Couchd are students and some are under 18, so this is written to be read by a student and their guardian, and it is written with the Digital Personal Data Protection Act, 2023 (DPDP) in mind.

Last updated: 24 September 2026

In short

01 Who we are

Couchd is a product of ZeroSuite, operated by Agassi Nadar, sole proprietor trading as ZeroSuite, India. Under the DPDP Act, ZeroSuite is the Data Fiduciary for Couchd: we decide why and how your data is processed, and we are answerable to you for it.

02 What stays on your phone

Everything you put into Couchd, and everything Couchd works out about your studying, lives in an encrypted database on your own device. We do not receive it, we cannot look at it, and we could not hand it to anyone if we were asked.

WhatWhat it includes
What you are studyingBoard, class, medium, your subjects, your exam dates, and which chapters each exam covers.
What you call yourselfA first name or nickname, if you give one. "Skip for now" is a real answer.
School and cityOptional, and only if you fill them in under My Profile. Never asked for during setup.
What you didThe moves you finished, what you said afterwards, and how long a session ran.
Quick Check answersWhat you picked, whether it was right, how confident you said you were, how long you took.
Marks you type inSchool or practice test marks you enter yourself, and which chapters the test covered.
Anything you typeIncluding what you write when you tell Couchd a suggestion was wrong.

03 What Couchd can send

To find out where it gets in the way, Couchd can send a short list of usage events, but only if you turn that on: records that something happened, not what it was about you.

Each event carries a random identifier for the installation — a number generated on your phone, tied to nothing about you or your device, and replaced if you use Delete my data. It lets us see that the same phone came back the next day without knowing whose phone it is. We treat it as information about a person, not as anonymous data, because with a small group of users it could be reasonably linked back.

GroupWhat is recorded
Opening the appThat the app was opened, and that setup was finished.
Your examsThat an exam was added, and that its chapters were chosen. Not the dates, and not which school it is for.
Your planThat a plan was made, how many moves were in it and how many minutes it was for; which topic was suggested first and why; whether you started it or picked something else; whether you opened "Why this?".
StudyingThat a Quick Check was started and finished and how many answers were right out of three; that a move was completed, or that you found it hard.
Your timeThat you changed how long you had, and that you finished for the day.
FeedbackWhether you said a suggestion was right or wrong, which of the five reasons you picked, and whether you also typed something. Never what you typed.

Alongside an event, Couchd may send: the app version, your board and class, and its own internal ids for the subject, chapter and topic involved; the kind of move it was; the reason codes the planner used; a number of minutes, a count of items, or how many of three Quick Check answers were right. That is the complete list. It is enforced in the app by an allow-list that drops anything else before the event is sent.

04 What is never sent

  • Your name, your school, your city, your phone number or your email.
  • Any mark: not a test mark you typed, not a Quick Check result shown as a score, nothing out of anything.
  • Anything you type in your own words, including feedback notes.
  • The names of your topics or chapters. Couchd sends its own internal ids for them, which mean nothing outside Couchd.
  • Your date of birth or your age. Couchd never asks for either.
  • Your location. IP-based location is switched off, and PostHog is set to discard IP addresses.
  • Any recording of your screen, your taps or your scrolling. Session replay, heatmaps, autocapture and console logging are all off.
  • Photos, files, contacts, microphone or camera. Couchd asks for none of them.

We do not sell data, we do not run advertising of any kind, and we do not train public or third-party AI models on student data.

Usage events are off until someone turns them on under You → Help improve Couchd. Until then nothing is sent, and the random identifier the events would carry is not even created. Couchd works exactly the same with it off.

If you are under 18, only turn it on after your parent or guardian has agreed. The app cannot check who taps the switch or how old they are, so it records only that it was turned on, when, and under which version of this notice — not that anyone agreed.

Turning it off is one tap in the same place. It takes effect immediately — the next event is not sent — and nothing turns it back on by itself. Delete my data turns it off too, and a reinstalled app starts with it off.

06 Students under 18

Couchd is for students aged 12 and up. Before anything is saved, the app asks one question — whether you are 12 or older — and records only that you answered it. Never your age, never your date of birth.

Everything a student puts into Couchd stays on their own phone, so none of it reaches us. Usage events do, but only if Help improve Couchd is turned on, which a student under 18 should do only after a parent or guardian has agreed. A parent or guardian can turn it off at any time, use Delete my data, or write to us, and we stop.

There is no chat, no room, no leaderboard, no public profile and no way for one student to see another inside Couchd, and there will not be while our students include minors.

07 Who processes it

Usage events are processed by PostHog, a product analytics provider, acting as our Data Processor. We use their EU Cloud, so the events are stored in the European Union. Nobody else receives them, and we do not combine them with anything else.

Our PostHog project is configured so that:

  • IP addresses are discarded rather than stored, and location lookup is disabled;
  • session replay is off, so no recording of your screen is ever made;
  • autocapture is off: only the events listed above are recorded, nothing automatic;
  • heatmaps, console logging, web vitals and dead-click capture are all off.

Couchd does not use PostHog’s own mobile library. It sends the events itself, over HTTPS, so nothing is collected about your device beyond what is listed here.

08 How it is protected

  • Everything Couchd stores goes into a SQLCipher-encrypted database on the phone.
  • Its key is a random 256-bit secret generated on your device and held in the Android Keystore, marked for this device only. It is not in the app’s code and is never sent anywhere.
  • The app is excluded from Android cloud backup and device-to-device transfer, so your study data cannot ride along into a Google backup or onto a new phone.
  • Usage events travel over HTTPS and nowhere except our PostHog project.

09 Deleting your data

In the app: You → Delete my data. It removes the encrypted database, the key that opens it, and the random identifier used for usage events, so a later install is a different installation to us. Uninstalling has the same effect.

Events already sent are not erased by that, because they are not linked to you on your phone any more. If you want those removed too, write to us with roughly when you used Couchd and we will delete them and confirm within 30 days.

10 This website

couchd.app is a plain set of pages. There is no sign-up form, no waitlist, no newsletter, no analytics, no advertising and no cookie used to follow you. Our host serves the pages and keeps ordinary server logs to do that, which is what any website does.

11 What changes when accounts arrive

Couchd will eventually offer an account, so your work can move between devices and survive a lost phone. That version does not exist yet, and this page will be updated before it does, not after. When it happens, you can expect sign-in with a phone number or Google and still no password; verifiable guardian consent for anyone under 18, obtained before an account exists; a named list of the providers who store the data; written retention periods; and a way to export everything you have.

12 Your rights

Under the DPDP Act you have rights over your personal data. Most of them you exercise yourself, in the app, without going through us:

  • See what is on your phone. It is all in the app, under Progress and My Profile.
  • Correct anything that is wrong, by editing it in My Profile.
  • Erase all of it, with Delete my data, without asking us.
  • Stop usage events at any time, in one tap, under You. They stay stopped.
  • Ask us to erase the usage events already sent, and get an answer within 30 days.

You also have the right to nominate someone to exercise these rights for you, and to raise a grievance and have it answered. Write to us and we will reply within 30 days.

If you remain dissatisfied after using our grievance process, you may have the right to approach the Data Protection Board of India in accordance with applicable law.

13 Changes to this policy

We update this page when what Couchd does changes, and we date it at the top. Anything that would make Couchd collect more than it does today gets written here before the change ships, not after it. That is why this page changed when usage events were added rather than afterwards.

14 Contact & grievance officer

Questions about this policy, or about anything Couchd does with your data, go to the same person.

Operator
ZeroSuite (Agassi Nadar, sole proprietor), India
Support
support@zerosuite.in
Grievance officer
Agassi Nadar
Email
agassi@zerosuite.in
Response time
Within 30 days of your request.