Privacy Policy

PrepyPanda ("we", "our", or "us") is an online exam preparation platform operated by PrepyPanda (registered in India). We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains what information we collect when you use our website and services at preppypanda.com (the "Service"), how we use it, and what rights you have in relation to it. Please read it carefully. If you disagree with the terms of this policy, please discontinue use of our Service.

We collect information you provide directly to us and information generated through your use of the Service.

We use the information we collect to:

• ·Provide and improve the Service — deliver question banks, mock tests, AI tutoring, progress tracking, and personalised study recommendations
• ·Manage your account — create and maintain your account, authenticate your identity, and process your preferences
• ·Process payments — handle subscription purchases and upgrades through our payment partner Razorpay
• ·Send communications — send you account-related notifications, streak alerts, and study reminders (only if you have opted in)
• ·Analyse and improve — understand how users interact with the platform so we can fix bugs and improve features
• ·Enforce our terms — detect, investigate, and prevent fraudulent or abusive activity
• ·Comply with legal obligations — respond to lawful requests from government authorities or courts

We will never sell your personal data to third parties for marketing purposes.

We share your data only with trusted third-party services necessary to operate the platform:

All third-party services are required to handle your data securely and are prohibited from using it for their own marketing purposes. We do not share your data with advertisers, data brokers, or any other parties not listed above.

We retain your personal data for as long as your account is active or as needed to provide you with the Service. Specifically:

• ·Account data (name, email, preferences) — retained for the lifetime of your account
• ·Practice and mock test data — retained for the lifetime of your account to support your progress tracking
• ·Payment records — retained for 7 years as required by Indian financial regulations
• ·AI Tutor conversation logs — retained for up to 90 days to improve response quality

When you delete your account, we permanently delete all your personal data from our systems within 30 days, except where we are legally required to retain certain records.

You have the following rights with respect to your personal data:

• ·Access — You can request a copy of the personal data we hold about you
• ·Correction — You can update your name, email, and preferences at any time from your Settings page
• ·Deletion — You can permanently delete your account and all associated data from Settings → Account Actions → Delete Account
• ·Portability — You can request an export of your data in a machine-readable format
• ·Withdraw consent — You can opt out of non-essential communications (e.g., study reminders) from Settings → Notifications
• ·Complaint — If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the appropriate data protection authority

To exercise any right not accessible directly through the app, email us at privacy@prepypanda.com. We will respond within 30 days.

We use cookies and similar technologies to operate and improve the Service:

• ·Essential cookies — Required for authentication and security. These cannot be disabled without breaking the Service (e.g., session tokens managed by Supabase).
• ·Analytics cookies — Help us understand how users navigate the platform so we can improve it. These are anonymised and do not identify you personally.

We do not use advertising or tracking cookies. We do not participate in cross-site tracking.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in.

PrepyPanda is designed for students preparing for college entrance exams. Users must be at least 13 years old to create an account. Users between 13 and 18 years old should review this policy with a parent or guardian.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@prepypanda.com and we will delete it promptly.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• ·All data is transmitted over HTTPS (TLS encryption)
• ·Passwords are hashed using bcrypt before storage — we never store plaintext passwords
• ·Access to production databases is restricted to authorised personnel only
• ·Authentication is handled by Supabase, which is SOC 2 Type II compliant
• ·Payment data is handled entirely by Razorpay and is PCI-DSS compliant — we never touch your card details

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA). Any disputes arising from this policy will be subject to the exclusive jurisdiction of the courts in India.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. When we make material changes, we will notify you by:

• ·Sending an email to the address associated with your account, and/or
• ·Displaying a prominent notice on the platform

The date at the top of this page will always reflect when the policy was last updated. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.