Privacy Policy

1. Who we are

PrepMate is operated by PrepMate SI Pvt Ltd. For privacy questions or requests, contact privacy@prepmate.si.

2. What we collect

Account details. Your email address, your name and preferred language, optional education level, and the exams you choose to follow. Your password is handled by our authentication provider; we do not see or store it in readable form.

Practice data. Your test attempts: the answers you select, whether you marked questions for review, time taken, scores and results, and when each attempt started and ended. This is what powers your dashboard, results and (later) study recommendations.

Technical data. Basic server logs such as IP address, browser type and request times, used to keep the service secure and working. Server logs are kept for 365 days. We do not currently use analytics tools.

Messages. Anything you send us when you contact support.

Payments (when paid plans launch). Payments will be handled by our payment provider Razorpay. We will store a payment reference, amount and status, but not your card or UPI credentials. If you subscribe through the Google Play Store or Apple App Store, that store processes the payment under its own terms.

We do not run third-party advertising, and we do not sell your personal data.

3. How and why we use it

• To provide the service: sign you in, run timed tests, score them on the server and show your results and explanations.
• To keep tests fair and the platform secure, for example by validating timing and preventing misuse.
• To improve the content: for example, spotting questions many people find confusing so editors can review them.
• To communicate with you about your account, security and, where you agree, product updates.
• To meet legal obligations. This follows the Digital Personal Data Protection Act, 2023: we process your personal data with your consent, given when you create an account and accept our terms, and for the limited legitimate uses the Act allows, such as providing the service you asked for, keeping it secure, and complying with the law. You can withdraw your consent at any time by deleting your account or writing to us; withdrawal does not affect processing done before it.

4. Who we share data with

We use trusted service providers (“processors”) who handle data only on our instructions:

• Database, authentication and hosting: Supabase, hosted in India.
• Payments: Razorpay, once paid plans are available.
• OTP / email delivery: Supabase’s email service sends sign-in and one-time-code emails.
• AI features (planned): an AI model provider will process the text of your questions to the tutor. We will not send your email address or phone number to AI providers, and AI answers will be labelled.

We may disclose data if required by law or to protect rights and safety. If the business is ever sold or merged, we will tell you before your data is transferred.

5. Cookies and local storage

We store your sign-in session in your browser’s local storage so you stay logged in. This is strictly necessary for the service to work. We do not use advertising cookies.

6. How long we keep data

We keep your account and practice data while your account is active. If you delete your account, we will delete or anonymise your personal data within 365 days, except where we must keep certain records for legal or accounting reasons (for example payment records, for the period the law requires). Server logs are kept for 365 days.

7. Your rights and choices

You can ask us to give you a copy of your data, correct it, or delete it, and you can withdraw consent you have given. You can also nominate another person to exercise your rights in the event of your death or incapacity, as the Digital Personal Data Protection Act, 2023 allows.

To make a request, email privacy@prepmate.si from the address on your account. We will respond within 7 days. If you are not satisfied, contact our Grievance Officer below.

8. Children

Many people preparing for exams are under 18. You must be at least 18 to create an account. A person under 18 may use PrepMate only with the consent of a parent or legal guardian.

9. How we protect your data

Each user can access only their own account and practice data, enforced in the database. Correct answers to a test in progress are never sent to your device. Secret keys are kept on the server, not in the app. Connections to PrepMate use encryption in transit. Our hosting provider, Supabase, states that customer data is encrypted at rest (AES-256) and in transit (TLS). No system is perfectly secure; if a breach affecting you occurs we will notify you and the relevant authority as the law requires.

10. Where data is processed

Your data is stored and processed in India. We do not transfer it outside India.

11. Grievance Officer

Name: Shivaji Chauhan · Email: privacy@prepmate.si · Response time: within 7 days.

12. Changes to this policy

If we make material changes, we will update this page and, where appropriate, notify you by email or in the app before they take effect.