Last updated: August 2026 · Applies to the CATalyst app and website
We collect what's needed to run your practice, track your mistakes, and process payment — nothing more. We never sell your data. You can ask us to delete it at any time. We don't store your card details; Razorpay handles that.
This policy covers anyone using the CATalyst app or website — free trial, paid, or just browsing. "We"/"CATalyst" refers to the team running the product; "you" refers to you, the user.
Only what the product actually needs to function:
| Category | What | Why |
|---|---|---|
| Account | Email, name (if you provide one), authentication data | To create and secure your account (via Supabase Auth) |
| Practice activity | Questions attempted, answers, timing, mistakes, streaks, error log | This is the core product — tracking and fixing your mistakes |
| Payment | Plan purchased, amount, payment ID, payment status | To grant/manage paid access. We never see or store your card, UPI ID, or bank details — Razorpay processes and holds that directly |
| Notifications | Push notification token (only if you enable push) | To send practice reminders |
| Feedback | Anything you submit via feedback or bug reports | To fix bugs and improve the product |
| Usage events | App events like page views, feature usage (no browsing history outside the app) | To understand what's working and fix what isn't |
We don't sell your data to anyone. It's shared only with the services that run the product:
Your data is kept for as long as your account is active, so your practice history and progress aren't lost between sessions. If you stop using CATalyst or request deletion, we remove your practice data within 30 days (this matches the retention window in our Refund Policy). Payment records may be kept longer where required for accounting/tax purposes.
You can ask us, at any time, to:
This is currently a manual process — email us and we'll action it directly. There's no automated self-serve deletion yet; if you email a deletion request, we confirm your identity via your registered email and process it within a reasonable time.
Email a data request →Your data is protected by row-level access controls at the database level — your practice data, attempts, and profile are only accessible to your own account, enforced server-side (not just hidden in the app). No system is perfectly unbreakable, but we treat this seriously and fix issues as soon as we find them.
CATalyst is built for CAT exam aspirants, who are legal adults or approaching adulthood pursuing higher education. We don't knowingly collect data from children under 13.
If this policy changes in a meaningful way, we'll update the date at the top. Continued use of CATalyst after a change means you're okay with the update.
This policy is intentionally written in plain language, not legal boilerplate. If anything is unclear, email us directly — you'll reach a real person.