Privacy Policy

• Account information: name, email address, and password (encrypted) — or, if you sign up/sign in with Google, your name, email address, and Google account ID as shared by Google's OAuth consent screen.
• Learning activity: mock test attempts, question responses, scores, time spent, bookmarks, and subject-wise progress, used to power your dashboard and AI-generated performance analysis.
• AI chat interactions: messages you send to the study-assistant chat and the responses generated, so we can maintain conversation context and improve the feature.
• Session and device data: device/browser identifiers, IP address, and session timestamps, used to enforce our two-device concurrent session limit and to keep your account secure.
• Payment data: subscription plan, billing status, and transaction references. Card, UPI, and net-banking details are collected and processed directly by Razorpay, our payment gateway partner — we do not store your full payment credentials.
• Technical information: browser type, device type, and usage/log data collected automatically for security, analytics, and troubleshooting.
• Cookies and local storage: used to keep you signed in, remember preferences (such as dark mode), and maintain your session token for device-limit enforcement. You can control cookies through your browser settings; disabling them may affect login and other core functionality.

• To create and secure your account, including via Google Sign-In, and to authenticate you on future visits.
• To provide and improve mock tests, PYQ practice, subject notes, and current affairs content.
• To generate AI-assisted chat responses and post-test performance analysis (via third-party AI providers, including Google's Gemini — see Section 3).
• To personalize recommendations and highlight subject-wise strengths and weak areas.
• To process subscription payments and manage your billing status via Razorpay.
• To enforce our concurrent-device session limit and protect the Platform from abuse, fraud, and unauthorized access.
• To send account-related emails such as welcome messages, password resets, and important service notifications, and, where you have not opted out, occasional product updates.

We do not sell your personal data. We share limited information only with service providers strictly to operate the Platform:

• Supabase — our database, authentication, and file-storage provider, which hosts your account and learning data.
• Google (Gemini API) — receives relevant chat messages or test performance data to generate AI responses; also acts as an OAuth identity provider if you use Google Sign-In.
• Razorpay — processes subscription payments on our behalf and handles your payment instrument details directly.
• Email delivery providers (such as Resend or our SMTP provider) — used solely to deliver transactional emails (welcome, password reset, receipts, notifications).

These providers are contractually or by design limited to using your data only to provide the service we requested, and are not permitted to use it for their own independent marketing purposes.

• We retain your account and learning data for as long as your account remains active, or as needed to comply with legal, tax, or accounting obligations.
• If you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is required by law or for legitimate fraud-prevention/dispute-resolution purposes.
• We use industry-standard safeguards including encrypted password storage, row-level access controls on our database, and rate-limiting/session controls to protect your data from unauthorized access.
• No method of transmission or storage is 100% secure; we work to protect your data but cannot guarantee absolute security.

The Platform is intended for exam aspirants generally aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at privacy@bankprepwithai.com so we can remove it.

• You may access, update, or correct your account information at any time from your dashboard settings.
• You may request deletion of your account and associated personal data by writing to privacy@bankprepwithai.com.
• If you signed up via Google, you can revoke the Platform's access to your Google account at any time from your Google Account's security settings, in addition to deleting your Platform account.
• You may opt out of non-essential marketing emails using the unsubscribe link included in those emails; you will still receive essential account/service emails.

Some of our service providers (including our AI and cloud infrastructure providers) may process data on servers located outside India. Where this occurs, we rely on our providers' contractual and technical safeguards to protect your data consistent with this Policy.

In accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, our Grievance Officer can be reached at grievance@bankprepwithai.com for any privacy-related grievances.

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will revise the "Effective date" above when we do. Continued use of the Platform after an update constitutes acceptance of the revised Policy.

For privacy concerns, email privacy@bankprepwithai.com or visit Contact Us.