PrepareForCAT
Privacy Policy
Last updated 10 July 2026
This Privacy Policy explains how [[FILL: legal entity name]] ("we", "us") collects, uses, and protects your personal data when you use PrepareForCAT (the "Service"). We aim to align with India's Digital Personal Data Protection Act, 2023 and applicable rules.
1. What we collect
- Account details:your name and email from your sign-in provider, and phone number if you provide it.
- Learning data:your answers, diagnostic results, mastery and progress, streaks, plans, and mock attempts. This is the core of what the Service does for you.
- Payment data:when you subscribe, our payment provider processes your payment. We receive confirmation and limited transaction details, not your full card number.
- Usage and device data:analytics events, approximate location (from IP), device and browser type, and error diagnostics, used to run and improve the Service.
2. Why we use it
- To provide the diagnostic, daily plan, practice, mocks, and your progress.
- To operate, secure, debug, and improve the Service.
- To process subscriptions and prevent fraud.
- To communicate with you about your account, and, with your consent, about product news.
3. Consent
We ask for clear, purpose-specific consent when you sign up and when you subscribe. You can withdraw consent for non-essential uses at any time by contacting us; withdrawing consent for essential processing may mean we can no longer provide the Service.
4. Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our behalf under contract:
| Provider | Purpose | Where |
|---|---|---|
| Google Firebase | Sign-in and app hosting | Google infrastructure |
| Render | Backend hosting and database | Singapore |
| Razorpay | Payments (from month 2) | India |
| Anthropic | Generating your weekly plan | United States |
| PostHog, Google Analytics, Microsoft Clarity, Sentry | Analytics and error monitoring | EU / US |
Some providers are located outside India, so your data may be processed abroad under appropriate safeguards. We may also disclose data where required by law.
5. How long we keep it
We keep your data while your account is active and for as long as needed to provide the Service and meet legal obligations. You can ask us to delete your account and associated personal data, subject to records we must retain by law.
6. Your rights
You can access, correct, or delete your personal data, withdraw consent, and raise a grievance. To exercise these rights, contact the grievance officer named on our Contact page. We will respond within the timelines required by law.
7. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections and access controls. No system is perfectly secure, but we work to keep your information safe and will notify you and the authorities of a reportable breach as required.
8. Cookies and analytics
The website and app use cookies and similar technologies for essential functionality and analytics. You can control cookies through your browser settings. Analytics help us understand what works so we can improve the Service.
9. Children
The Service is for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a minor has used the Service, contact us and we will delete the data.
10. Changes
We may update this policy and will post the new version here with a revised date. Material changes will be notified where required.
11. Contact and grievance officer
For any privacy question or complaint, reach the grievance officer via our Contact page.
Questions about this policy? Write to our contact page.