Privacy Policy - Data Protection & DPDP Compliance

Last updated: February 24, 2026

Exam Sankalp (https://www.examsankalp.in) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform. This policy is compliant with the Digital Personal Data Protection (DPDP) Act, 2023 of India and other applicable data protection regulations.

1. Information We Collect

We collect the following types of information:

a) Information you provide directly:

Mobile number — for account registration, OTP verification, and login
Name — for display on leaderboards and your profile
Email address (optional) — for profile completion and communications
Payment information — processed securely through PhonePe; we do not store your card or bank details
UPI ID / Bank account details — optional; only if you provide them for refund processing (e.g. mistaken top-up refund), stored securely
Referral code — if you sign up using a friend's referral link

b) Information collected automatically:

Device information — device type, operating system, browser type
Usage data — pages visited, features used, buttons clicked, time spent on the platform
Quiz performance data — answers submitted, scores, time taken, exam categories and topics selected
Streak and achievement data — daily login streaks, badges earned, milestones reached
Referral activity — referrals sent, completed referrals, bonus credits earned
IP address — for security, fraud prevention, and approximate location

2. How We Use Your Information

To provide, operate, and maintain the Exam Sankalp platform
To authenticate your identity via OTP and manage your account
To process payments and test fees via PhonePe
To generate and display leaderboard rankings (your name may be partially masked for privacy)
To manage your wallet (main wallet and bonus wallet) and transaction history
To track and display streaks, achievements, and badges
To process referral bonuses and bonus credits
To send you mock test reminders, results, and platform updates
To improve our platform based on usage patterns and analytics
To detect and prevent fraud, cheating, and unauthorized access

3. Analytics and Tracking

We use Amplitude, a third-party analytics service, to understand how users interact with our platform. This helps us improve the user experience, identify issues, and develop new features. Analytics data is collected in an aggregated and anonymized manner where possible. The data collected includes page views, feature usage, quiz participation patterns, and user engagement metrics.

4. AI-Generated Content

Our practice tests use AI technology to generate questions. Your selected exam category and topic preferences are sent to our AI system to generate relevant questions. We do not use your personal data to train AI models. The AI-generated questions are created fresh for each session and are not stored in association with your personal profile.

5. Organization (B2B) Data

If you are part of an organization on Exam Sankalp (as a member or Cohort Admin), the following additional data practices apply:

Cohort Admin Access: Organization administrators (Cohort Admins) can view your name, quiz performance (scores, time taken, accuracy), topic-wise analysis, strengths, weaknesses, and performance trends within their organization's quizzes.
Batch Assignment: Cohort Admins may assign you to a batch within the organization. Your batch name is visible to the admin for reporting purposes.
Invitation Data: When a Cohort Admin invites you via your mobile number, we may create an account on your behalf and send you an SMS with login instructions. The inviting admin's identity is recorded.
Analytics & Reports: Your quiz performance data within an organization may be viewed, analyzed, and exported (CSV/PDF) by Cohort Admins for academic or training purposes.
Peer Rankings: Your performance may be ranked against other members of the same organization. However, detailed individual data is visible only to Cohort Admins, not to other members.
AI Insights: Organization analytics may include AI-generated insights about your performance trends. These are derived from your quiz data and are visible to Cohort Admins.
Data Scope: Cohort Admins can only access data from quizzes conducted within their organization. They cannot access your personal practice test data, wallet information, or activity outside the organization.

6. Data Security

We implement industry-standard security measures including encryption (SSL/TLS) for all data transmission.
Authentication is handled through secure JWT (JSON Web Token) cookies.
All payment transactions are encrypted and processed through PhonePe's PCI-DSS compliant payment gateway.
Database access is restricted and monitored with role-based access controls.
We do not store your payment card details, CVV, or net banking credentials on our servers.

7. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with:

PhonePe — for payment processing (subject to PhonePe's Privacy Policy)
Amplitude — for analytics (anonymized usage data only)
Law enforcement — when required by law, court order, or to protect our legal rights
Service providers — hosting, email, and infrastructure providers who assist in operating the platform, bound by confidentiality agreements

8. Cookies and Local Storage

We use essential cookies for authentication (JWT session tokens) and session management.
We use local storage for user preferences (e.g., dark mode, selected exam category).
No third-party advertising or tracking cookies are used on our platform.
PhonePe may set cookies during payment processing as per their own cookie policy.

9. Data Retention

Account data is retained as long as your account is active.
Quiz performance data and transaction history are retained for record-keeping and dispute resolution.
If you request account deletion, your personal data will be deleted within 30 days, except where retention is required by law (e.g., financial transaction records).
Analytics data is retained in anonymized form and may be kept indefinitely for product improvement.

10. Your Rights

Under the DPDP Act, 2023 and applicable laws, you have the right to:

Access — request a copy of your personal data we hold
Correction — request correction of inaccurate or incomplete data
Erasure — request deletion of your personal data (subject to legal obligations)
Grievance redressal — raise complaints about data handling practices
Nomination — nominate another individual to exercise your rights in case of your incapacity or death

To exercise any of these rights, contact us at admin@examsankalp.in. We will respond within 30 days of receiving your request.

11. Children's Privacy

Exam Sankalp is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will take steps to delete such information promptly. If you believe a minor has provided us with their data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically. Continued use of the platform after changes constitutes acceptance of the updated policy.

13. Data Fiduciary

The Data Fiduciary (as defined under the DPDP Act, 2023) for Exam Sankalp is:

Vireon Labs Private Limited
3rd Floor, 211, Innov8 Okhla, Okhla Industrial Estate, Phase-III, New Delhi — 110020, India
Email: admin@examsankalp.in

14. Grievance Officer

In accordance with the DPDP Act, 2023, if you have any grievances regarding the processing of your personal data, you may contact our Grievance Officer:

Email: admin@examsankalp.in
We will acknowledge your grievance within 48 hours and resolve it within 30 days.

15. Contact

For any privacy-related inquiries, contact us at admin@examsankalp.in. You can also reach us through our Contact Us page.