Privacy Policy

1. Information We Collect

We collect the following information to provide and improve the Service:

Account information

• First and last name and email address you provide when you register or sign in.
• Phone number (optional) if you choose to add it to your profile.
• Password, if you register with email and password. Passwords are stored only as a bcrypt hash — we never store or see your plain-text password.
• A generated user code(it starts with "AP") that identifies your account within the Service.
• Basic account state we need to run your account: whether your email is verified, when you last signed in, and your current paid-access expiry date.

Google Sign-In

If you sign in with Google, we receive your Google account's email address, a unique Google account identifier, and the URL of your Google profile photo in order to create or link your account. We do not receive your Google password, and we do not get access to your Gmail, contacts, or any other Google data.

Region you select

You may optionally select your country, state, and city from a list. This is region information you choose to provide. The app does not request or collect GPS or any other precise device location, and it does not track where you are.

Profile photo you upload

You can optionally set a profile photo by taking a picture with your camera or picking one from your gallery. The camera and photo permissions are used only at the moment you choose a picture — the app never opens your camera or reads your gallery in the background. Please note the following about how the photo is stored:

• The image file is uploaded to our server and saved under a randomly generated file name.
• It is then served from a public URL that is not password-protected. Anyone who has the exact URL can view the image, although the URL is not published or listed anywhere and is practically impossible to guess.
• You can remove the photo at any time from the Profile screen, and it is deleted from our server when you remove it or when you delete your account.
• Only image files (JPEG, PNG, WebP) are accepted, and each upload replaces the previous one.

Quiz activity

• Quizzes you start and complete, the topics and sub-topics they cover, and the date and time.
• Your answers, which questions you got right or skipped, your score, and the time you took.
• Progress statistics such as your daily streak, accuracy, and subject-wise performance.
• Questions you save to your review list or bookmark.

Mock-test activity

• Which mock tests you start and finish, and the start and end time of each attempt.
• Your answers to each question, marks scored, negative marks, the number of correct, wrong, unanswered and marked-for-review questions, and the accuracy and time figures shown on your analysis screen.
• Which mock-test series or all-pass access you own, and when that access expires.

Purchase information

The app sells day-packs (a number of days of quiz access) and mock-test purchases (a single series, or an all-pass). Payments are processed by Razorpay, our payment processor. For each purchase we store the Razorpay order ID and payment ID, the amount and currency, the name of the plan or product, the payment status, and the access it granted you.

Your card, UPI, net-banking and other financial details are entered inside Razorpay's own checkoutand go directly to Razorpay. Agnipariksha never receives them and never stores them. To save you typing, we pre-fill the Razorpay checkout with the name, email address and (if you have added one) phone number already on your account. Razorpay's handling of your payment data is governed by Razorpay's Privacy Policy.

Payment receipts

For every completed payment we create a receipt record with a receipt number linked to your order. When you open or download a receipt, we generate an invoice PDF from that record. The PDF shows your name, email address and user code, the item you bought, the amount, and the payment date, alongside our business details.

Push notifications

If you allow notifications, we collect and store a Firebase Cloud Messaging (FCM) device token for your device, the platform (Android) and app version, and when the device was last seen. We also store your notification preferences (the master on/off switch and any categories you have turned off) and a delivery recordper notification — whether it was sent to your device, whether you have read it in the in-app inbox, and when.

Email one-time passcodes (OTPs)

We email you a six-digit one-time passcode to verify your email address when you register and to confirm a request to delete your account. The code and its expiry time are stored on your account record only until the code is used or expires, and are then cleared.

Contact form (website)

If you contact us through the form on our website, we store the name, phone number, email address (optional) and message you submit, along with the date of submission, so that we can reply.

Technical information

We process limited technical information needed to operate, deliver and secure the Service — for example your app version, and the server logs and connection details generated when your app talks to our API. We do not use any advertising, analytics or crash-reporting SDK in the app.

2. How We Use Your Information

• Create and manage your account and sign you in.
• Keep your account secure — for example, our single-device sign-in signs you out of a previous device when you sign in on a new one.
• Provide quizzes and mock tests, and track your progress, scores, streaks and analysis.
• Process and verify your purchases, grant your paid access, and issue receipts.
• Send account and verification emails (such as one-time passcodes) and the push notifications you have enabled.
• Respond to your enquiries and provide customer support.
• Maintain the security of the Service, prevent fraud and abuse, and comply with the law.

3. Legal Basis for Processing

We process your information because:

• It is necessary to provide the Service you asked for— your account, your quiz and mock-test records, and your purchases.
• You gave consent— for optional things such as your phone number, region, profile photo, and push notifications. You can withdraw that consent at any time.
• We have a legitimate interest in keeping the Service secure and preventing fraud and abuse.
• The law requires it— for example, keeping records of payments for tax purposes.

4. How We Share Information

We do not sell your personal information, we do not rent or trade it, and we do not use it for advertising. We share information only with the service providers needed to operate the Service, and only as much as they need:

• Razorpay Software Private Limited— our payment processor. Handles your payment and receives your name, email address and phone number (if any) to complete the transaction. See Razorpay's Privacy Policy.
• Google / Firebase— Google Sign-In for identity, and Firebase Cloud Messaging for delivering push notifications to your device. See Google's Privacy Policy.
• Our email (SMTP) provider— to deliver verification codes, account emails and notification emails to your email address.
• Our hosting provider— which stores our database and uploaded files on our behalf.

We may also disclose information if required by law or a valid legal request, or where necessary to protect the rights, safety and security of Agnipariksha and our users.

5. International Transfers

Agnipariksha operates from India. Some of our service providers — in particular Google and Firebase — operate globally and may process or store data on servers outside India. Where that happens, we rely on those providers' own contractual and technical safeguards to protect your information, and we share only the data described in this policy.

6. Data Storage, Retention and Deletion

Your information is stored in our database on secured servers, and uploaded profile photos are stored as files on that server. On your device, your authentication tokens are kept in the operating system's encrypted secure storage.

• While your account exists, we keep your account information, quiz and mock-test activity, purchases and receipts so that the Service works and your history is available to you.
• One-time passcodes are cleared as soon as they are used or expire (they are valid for 10 minutes).
• When you delete your account, we erase your personal data immediately — see section 9.
• Payment, order and invoice records are kept for 8 years after the transaction, as required by Indian tax law, with personal identifiers removed once your account is deleted.
• Contact-form messages are kept for as long as needed to handle your enquiry and our records of it.

7. Data Security

We protect your information using standard measures, including encryption of data in transit (HTTPS/TLS), bcrypt-hashed passwords, encrypted on-device storage of your login tokens, signed verification of every payment before access is granted, and access controls on our systems. No method of transmission or storage is completely secure, but we work to protect your data and review our practices regularly.

8. Your Rights and Choices

• Access and update your name, phone number, region and profile photo at any time from the Profile screen in the app.
• Remove your profile photo from the Profile screen; the file is deleted from our server.
• Manage notifications— turn push notifications on or off in the app or in your Android settings.
• Request a copy or correction of your personal data by emailing us.
• Delete your account and data— see section 9.
• Withdraw consent where processing is based on your consent. This may mean some optional features stop working.
• Raise a grievance with us at the contact address in section 12; we aim to respond within 30 days.

9. Account and Data Deletion

You can delete your account yourself, in two ways:

• In the app — go to Profile → Delete Account. We email a one-time passcode to your registered address; entering it confirms the deletion.
• By email — if you have already uninstalled the app, write to info@agnipariksha.comfrom your registered email address with the subject "Delete my account".

Deletion is immediate and permanent once the passcode is confirmed. There is no grace period and the account cannot be recovered. In the same step we:

• Anonymise your account record— your name, email address, phone number, password hash, Google Sign-In link, user code and selected region are removed or replaced with non-identifying values.
• Delete your uploaded profile photo from our server.
• Permanently delete your activity— quiz attempts and answers, mock-test attempts and answers, scores and statistics, streaks, saved and bookmarked questions, your notification inbox and delivery records, your notification preferences, and your registered device (push) tokens.
• Sign you out everywhere immediately.

What we keep: your payment, order and invoice records— order and payment IDs, amounts, dates and what was purchased — are retained for 8 yearsbecause Indian tax law requires it. Your personal identifiers are stripped from those records, so they can no longer be used to identify you. Data already held by Razorpay about the transaction is governed by Razorpay's own policies and retention rules.

Deleting your account does not refund any unused paid access — see our Refund & Cancellation Policy. For the full step-by-step process, see our Delete Your Account page.

10. Children's Privacy

The Service is intended for users aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and for material changes we will provide notice within the app or by email. Your continued use of the Service after changes take effect means you accept the updated policy.

12. Contact Us

If you have questions, concerns, or grievances about this Privacy Policy or your personal data, contact us at:

• Email: info@agnipariksha.com
• Agnipariksha, Gujarat, India