Privacy Policy

1. Scope

This Privacy Policy explains what personal data AdvikPrep collects, why, how it's used, and your rights, regardless of where you are located — including specific sections for EU/EEA/UK users (GDPR), Indian users (Digital Personal Data Protection Act, 2023 — "DPDP Act"), and California/U.S. users (CCPA/CPRA).

2. What We Collect

• Account data: name, email address, password (hashed), account creation date.
• Payment data: we do not store your full card/bank details — payments are handled entirely by our payment processor(s) (e.g. Stripe, Lemon Squeezy), who act as independent data controllers/processors for that information under their own privacy policies.
• Usage data: quiz attempts, scores, question-level performance, time spent, feature usage, device/browser type, IP address, and similar analytics data — used to improve question quality and your learning experience.
• Communications: support emails, feedback, ratings/reviews you submit.
• Cookies and similar technologies: see Section 8.

We do not knowingly collect any special category / sensitive personal data (e.g. health, biometric, financial account numbers) beyond what's needed for account and payment administration.

3. How We Use Your Data

• To provide and maintain your account and subscription access
• To process payments and manage billing/renewals
• To personalize quiz content and track your progress
• To improve question quality (e.g. analyzing which questions are frequently missed or reported)
• To communicate with you about your account, billing, or support requests
• To send you product updates or marketing communications, only where you have consented (you can opt out at any time)
• To detect and prevent fraud, abuse, or violations of our Terms of Service
• To comply with legal obligations

4. Legal Bases for Processing (GDPR/EEA/UK users)

We process your personal data on the following legal bases:

• Contract necessity — to provide the Service you signed up for (account, quizzes, billing)
• Legitimate interests — to improve our Service, prevent fraud, and maintain security, balanced against your rights
• Consent — for optional marketing communications and non-essential cookies (you may withdraw consent at any time)
• Legal obligation — where we must retain or disclose data to comply with law

5. Who We Share Data With

We do not sell your personal data. We share data only with:

• Payment processors (e.g. Stripe, Lemon Squeezy) — to process your subscription payment
• Hosting/infrastructure providers (e.g. Vercel, MongoDB Atlas, or equivalent) — to run the Service
• Analytics providers (if used — e.g. a privacy-respecting analytics tool) — to understand usage patterns
• Law enforcement or regulators, only where legally required
• A successor entity, if AdvikPrep is acquired or merged, subject to this policy continuing to apply

All third parties we use are contractually required to protect your data and use it only for the purposes we specify.

6. International Data Transfers

AdvikPrep is operated from India. If you are located in the EU/EEA/UK, your data may be transferred to and processed in India or other countries (e.g. where our hosting/payment providers operate) that may not have the same data protection laws as your home country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) with our service providers to protect your data in these transfers.

7. Data Retention

We retain your account and usage data for as long as your account is active, and for a reasonable period afterward (e.g. 12 months) to handle disputes, legal obligations, or re-activation requests, after which it is deleted or anonymized, unless a longer retention period is required by law (e.g. financial/tax records).

8. Cookies and Tracking

We use cookies/local storage for: keeping you logged in (essential), remembering preferences, and (if applicable) understanding usage via analytics. Where required by law (e.g. EU/UK), we will request your consent for non-essential cookies via a cookie banner before setting them, and let you manage preferences.

9. Your Privacy Rights

If you are in the EU/EEA/UK (GDPR)

You have the right to: access your data; correct inaccurate data; request erasure ("right to be forgotten"); restrict or object to processing; receive your data in a portable format; withdraw consent at any time (without affecting prior lawful processing); and lodge a complaint with your local data protection supervisory authority.

If you are in India (DPDP Act, 2023)

As a "Data Principal," you have the right to: obtain a summary of your personal data and processing activities; request correction, completion, updating, or erasure of your data; have your grievances addressed by our Grievance Officer (contact above) within the statutory timeline; and nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

If you are in California or another U.S. state with a comparable law (CCPA/CPRA, etc.)

You have the right to: know what personal data we collect and why; request deletion of your personal data; correct inaccurate personal data; and opt out of the "sale" or "sharing" of personal data — we do not sell or share your personal data with third parties for cross-context behavioral advertising. We will not discriminate against you for exercising these rights.

To exercise any of the above rights, email support@advikprep.com. We will respond within the timeframe required by applicable law.

10. Children's Privacy

AdvikPrep is not directed at, and does not knowingly collect personal data from, individuals under 18 (or the applicable age of digital consent in your jurisdiction). If we learn we have collected data from a child without appropriate consent, we will delete it promptly.

11. Security

We use reasonable technical and organizational measures (e.g. encrypted connections, hashed passwords, access controls) to protect your data. No system is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version with a new effective date, and for material changes, notify active users by email or in-app notice where required.

13. Contact Us

For privacy questions, data requests, or grievances: AdvikPrep Grievance Officer, support@advikprep.com, or general contact at support@advikprep.com.