CodeJal - Privacy Policy

Last updated: October 16, 2026

CodeJal ("we", "our", "the app") is a free Android app for learning programming. This policy explains what personal data the app processes, why, who receives it, how long it is kept, and how you can exercise your rights. It is written to meet the requirements of the Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) of India ("DPDP Act") and the rules made under it.

1. Who we are

CodeJal is published by WebHoga Digital Services ("WebHoga"), which is the Data Fiduciary (the party that decides why and how your personal data is processed) for the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"). The app was developed by Sarang Menon. You are the Data Principal (the person the data relates to). Contact details are in section 13.

2. Personal data we process and why

Personal dataPurpose
Account details: your email address, and your name and profile photo if you sign in with Google. If you register with email and password, your password is handled by the authentication service and is not readable by us. To create and secure your account and let you sign in on your devices.
Learning and progress data: streaks, XP, challenge and quiz results, selected track or language, and leaderboard standing. To save your progress, show your statistics and operate leaderboards.
Content you send to the AI assistant, Sky: your questions, messages, code, error text and images you attach, together with the lesson or challenge context needed to answer. See section 5. To generate explanations and coding help when you choose to use Sky.
Basic technical information: app version, device type and Android version. To keep the app compatible with your device and working correctly.
Messages you send us, such as feedback, requests or complaints. To respond to you.

We process only the personal data needed for these purposes. We do not ask for your precise location, contacts or payment information. We do not sell your personal data and do not use it for advertising.

3. Your consent

We process your personal data on the basis of your consent, which you give when you create an account and agree to this policy, and when you choose to submit content to Sky. Consent is free, specific, informed and given by a clear action. Sky is optional: content is sent to it only when you submit it, and you can use the rest of the app without Sky.

You can withdraw consent at any time, as easily as you gave it, by deleting your account in the app or by emailing us (section 13). Withdrawal does not affect processing done before it. If you withdraw consent, we will stop processing your personal data and erase it unless the law requires us to keep it. Features that depend on your account, such as saved progress and leaderboards, will stop working.

4. Service providers that receive your data

We use the following providers to run the app. They process data on our behalf.

ProviderPurposeData involved
Google (Firebase) Authentication, database storage of account and progress data, and app hosting services Account details, progress data, technical information
Google Sign-In Optional sign-in with a Google account Basic Google profile information you approve
Google (Gemini API) Generating responses for the Sky AI assistant Content you send to Sky (section 5)

Each provider handles data under its own terms. We do not share your data with advertisers. We may disclose personal data where the law requires it, for example to a court or government authority.

5. The AI assistant (Sky)

Sky is powered by an external AI provider, not by a model running on your device. When you use Sky, the content you submit is transmitted over the internet to Google's Gemini service so that a response can be generated and returned to you.

This can include:

Because this content is sent to an external provider, please do not enter passwords, personal details of other people, or confidential or proprietary code into Sky. Do not upload images that you do not have the right to use or that show other people without their permission.

Google processes this content to produce the response. CodeJal does not store your Sky conversations or keep a history of them. Google handles the content under its own Gemini API terms (ai.google.dev/gemini-api/terms), which determine whether and for how long Google retains it and how it may be used. We do not use your Sky content for advertising.

Sky responses are generated by AI and can be incorrect. Check important information before relying on it.

6. How long we keep data

We keep personal data only for as long as it is needed for the purposes in section 2.

7. Deleting your data

You can delete your account and the associated data at any time from within the app. This removes your account details and progress data from our systems.

If you cannot access the app, email sarangmenon555@gmail.com from the address linked to your account and ask for deletion. We aim to respond within 30 days and in any case within 90 days.

Deleting your account does not automatically remove data that an external provider holds under its own terms. To ask about content you sent to Sky, contact us and we will help where possible.

8. Your rights under the Digital Personal Data Protection Act, 2023

As a Data Principal you have the right to:

To exercise any right, email the address in section 13 from the address linked to your account. We may need to confirm your identity first. We respond to grievances within the time prescribed by law and in any case within 90 days.

9. Children

CodeJal is available to users aged 13 and over. We do not track or monitor the behaviour of children for profiling, and we do not show targeted advertising to anyone, including children.

We do not knowingly collect personal data from children under 13. If we learn that a child under 13 has created an account, we will delete it and its data. Parents or guardians who believe this has happened can contact us at the address in section 13.

10. Security and data breaches

Data is transmitted over encrypted connections and stored using Firebase security controls. We apply reasonable security safeguards to protect personal data. No system is completely secure, and we cannot guarantee absolute security.

If a personal data breach affects you, we will inform you as required by law.

11. Transfers outside India

Our service providers, including Google, may process data on servers located outside India. We transfer personal data only to countries and territories that the Government of India has not restricted for this purpose.

12. Language and changes to this policy

This policy is available in English. On request, we will provide it in any language listed in the Eighth Schedule to the Constitution of India.

We may update this policy. The "Last updated" date shows the latest version. If a change significantly affects how your personal data is used, we will notify you in the app and, where needed, ask for your consent again before it takes effect.

13. Contact and grievance officer

WebHoga Digital Services, publisher of CodeJal
Developer: Sarang Menon
Email: sarangmenon555@gmail.com

Use this address for questions, to exercise your rights, to withdraw consent, or to raise a grievance.