Privacy policy

1What this policy covers

This policy explains what personal data TestSangam ([to be filled: legal entity]) collects, why, who it is shared with, how long it is kept, and what your rights are. It is written to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

2What we collect

• Identity: name, mobile number, email (optional), language preference.
• Exam profile: which exam, its date, category (if you tell us), your sitting time.
• Learning data: your answer to every question, the option chosen, the seconds taken, where the question came from, mock scores, streak, reports — this is the “account” the service exists to keep.
• Payment: payment ID, amount, status, invoice. Card or UPI details never reach us — they stay with Razorpay.
• Technical: IP address, device and browser information, timestamps — for security and audit. Events during a test such as switching tabs or locking the screen — for honest timing.
• Messages: chat with the mentor, and messages sent from the contact page.

3What we do with it

• To run the service: the check, the daily set, review, the plan, the weekly report.
• For the mentor’s review: a real person reads your account and signs the suggestions.
• For payments and invoices: issuing invoices and keeping records as tax law requires.
• For security: OTP login, session control, preventing fraud (such as the once-only free week).
• To improve the service: judging question difficulty and quality, at group level.
• To talk to you: OTPs, a notice when a report is ready, announcements, payment-related notices. We do not send third-party advertising.

4Who we share it with

• The payment gateway (Razorpay) — what a payment needs.
• Messaging providers — your mobile number, to deliver OTPs and notices.
• Hosting and infrastructure providers — where the service runs.
• The mentor — your whole learning account, because that is the service.
• Publicly — only when you yourself share a report link or image.
• On legal demand — when the law or a court requires it.
• We do not sell your data, and we give it to no one for advertising.

5Your rights

• Access and correction: your profile in the app; for the rest, write to us.
• Erasure: ask for your account and personal data to be deleted. Records the law requires us to keep (such as invoices) stay for the required period.
• Withdrawing consent: at any time; the service cannot continue after that.
• Nomination: you may nominate a person to exercise these rights if you are unable to.
• Complaint: first to our grievance officer; if unsatisfied, to the Data Protection Board of India.

6How long we keep it

While your account exists, your learning data is kept — it is your history. When the account closes, personal data is deleted or anonymised within a reasonable period, except what the law requires us to keep (such as tax invoices). Anonymised, group-level statistics may be retained.

7Security

• No passwords — OTP only; login tokens rotate and are revoked on misuse.
• All data travels over encrypted connections (HTTPS).
• Access is restricted, and staff actions are recorded in an audit trail.
• No system is perfectly secure; in the event of an incident we will notify you as the law requires.

8Cookies and storage

We use no advertising or tracking cookies. One cookie (ts_auth) only records that you are logged in. Your login token, language preference and unfinished drafts live in your browser’s local storage.

9Children

The service is for people aged 18 or above. Data of a student under 18 is processed only with a guardian’s consent; an account found to lack that consent will be removed.

10Shared letters

A report’s share link opens without a login and shows your first name and the report; whoever you give the link to can see it. The share image carries only the positive parts — improvement, streak, best mock; weakness and rank stay on your private page.

11Changes

When the policy changes, the current version stays here with its date, and major changes are announced in the app. This document exists in Hindi and English; where the meanings differ, the English version prevails.

12Contact and grievance officer

Data requests: [to be filled: contact email]. Grievance officer: [to be filled: grievance officer], [to be filled: grievance email]. Address: [to be filled: address].