Privacy Policy

Effective Date: July 26, 2026 · Last reviewed and updated on July 26, 2026

ExamKracker ("we", "our", "us") operates the ExamKracker online MCQ practice platform accessible at this website. We are committed to protecting the privacy and security of the personal information of every user ("you", "your") who visits or uses our services. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform, and describes your privacy rights and how the law protects you.

This policy is aligned with the Information Technology Act, 2000 (India), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and applicable international standards including the EU General Data Protection Regulation (GDPR) where relevant.

1. Information We Collect

We collect information only when it is necessary to deliver the ExamKracker service to you. The categories of information we collect include:

1.1 Information You Provide Directly

Account Information Email address, full name (optional), password hash (we never store raw passwords), and Google profile data (if you sign in with Google).

Profile & Preferences Avatar URL (from Google Sign-In), membership status, and any free-form review text you submit via the Contact page.

Payment Information We do not store card details. Payments are processed by Razorpay via secure HTTPS. We retain only transaction IDs, dates, amounts, and subscription status.

Communications Any email correspondence, support messages, or feedback you voluntarily send to our team.

1.2 Information Collected Automatically

Log Data: IP address (pseudonymized where possible), browser user-agent, referring / exit pages, timestamps, and the pages you visit on our platform.
Session Cookies: Small data files stored on your device to maintain login state, quiz session continuity, and site preferences. See our Cookie Policy for details.
Device & Usage Analytics: Aggregated, de-identified data about quiz attempts, response patterns, and feature usage — used solely to improve question quality and platform performance.

2. How We Use Your Information

We process your personal data only for specific, legitimate purposes. These include:

Providing, maintaining, and improving the ExamKracker MCQ practice platform and its analytics dashboard.
Authenticating users, preventing fraud, and ensuring the security of accounts and quiz sessions.
Recording quiz attempts, scores, and performance history so you can track progress over time.
Processing subscription payments and managing paid membership access (including Razorpay webhook verification).
Sending essential transactional communications: welcome emails, membership activation confirmations, password-reset links, and payment receipts.
Responding to customer support queries, feedback, and review submissions.
Aggregating de-identified statistics for internal product research, content curation, and difficulty-calibration purposes.
Complying with applicable laws, regulations, lawful requests, and enforcing our Terms & Conditions.

3. Legal Basis for Processing

Where applicable regulations require a legal basis for processing personal data, we rely on one or more of the following:

Contractual necessity: To perform the ExamKracker service you signed up for (quiz sessions, progress tracking, member benefits).
Consent: Where you have explicitly given consent (e.g., opting into future newsletters — we currently do not run marketing mailing lists).
Legitimate interest: Platform security, fraud prevention, and product improvement through de-identified analytics.
Legal obligation: Compliance with Indian tax and record-keeping requirements and lawful government requests.

4. Sharing & Disclosure of Your Data

We do NOT sell your personal information to any third party. We only share your data with trusted service providers under strict contractual confidentiality obligations, and only where necessary to deliver the service:

Razorpay: For secure payment processing of membership subscriptions (subject to Razorpay's own privacy policy).
Google Identity Services: If you choose "Sign in with Google", we receive only your basic Google profile data (name, email, avatar URL) and never see your Google account password.
Cloud / Hosting Providers: Infrastructure providers operating under our direct control and instructions.
Lawful Requests: When we are required to disclose information by Indian law, court order, or government authority with valid jurisdiction.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy:

User accounts & profile data — retained as long as your account is active.
Quiz attempt history & analytics — retained for the lifetime of your account (essential for the "progress tracking" value proposition of the platform).
Payment transaction records — retained for a minimum of 7 (seven) years as required by Indian tax and commercial laws.
Session cookies — deleted at the end of each browsing session; persistent login cookies (if used) — retained for up to 30 days unless you log out earlier.

When data is no longer required, it is securely deleted, anonymized, or irreversibly pseudonymized.

6. Security of Your Information

We adopt industry-standard security measures aligned with the IT (Reasonable Security Practices) Rules, 2011:

HTTPS/TLS 1.2+ encryption on every page.
Salted, one-way hashing of passwords using Django's secure PBKDF2-based password hasher.
CSRF protection, secure session cookies, and HTTP-only authentication flags when deployed over HTTPS.
Role-based access control — only authorized staff can access minimal user data to operate the service.
Regular security reviews and dependency updates.

No method of internet transmission or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

7. Your Rights

You have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of any inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to our legal retention obligations.
Right to Restrict / Object: Object to or restrict specific types of processing.
Right to Data Portability: Receive your personal data in a machine-readable format.
Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Right to Lodge a Complaint: With the appropriate data protection supervisory authority if you believe our processing violates applicable law.

To exercise any of these rights, please contact us via the details in the Contact page. We will respond within 30 days of a verified request.

8. Children's Privacy

ExamKracker is designed for use by students of all ages, but we do not knowingly collect personal information from children under the age of 13 without verifiable parental or guardian consent. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will take steps to remove that information from our systems. Users under 18 should always review this Policy with a parent or guardian.

9. International Data Transfers

ExamKracker is primarily operated on infrastructure located within India. In limited cases, data may be processed by sub-processors (e.g., Razorpay, Google) located outside India. Any such transfer occurs only under contractual safeguards ensuring an adequate level of protection consistent with this Policy.

10. Third-Party Links

Our platform may contain links to third-party websites (e.g., external study resources advertised by staff through promotional ad slots). This Privacy Policy applies only to ExamKracker. When you follow links to other websites, you are subject to that website's own privacy policies and practices. We encourage you to review them before submitting any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. When we do, we will revise the "Effective Date" at the top of this page and, where the changes are material, provide a prominent notice on the platform prior to the changes taking effect. Your continued use of ExamKracker after such modifications constitutes acceptance of the updated Policy.

12. Grievance Officer & Contact Information

For any questions, complaints, or requests regarding this Privacy Policy or the handling of your personal information, please contact our Grievance / Data Protection Officer through our Contact Us page. We acknowledge every grievance received and respond within the statutory timeframe.