Back

Privacy Policy

Last updated: 14 July 2026

DRAFT — this policy has not yet been reviewed by a lawyer. Do not treat as final before official launch.

1. Who we are

This app ("we", "us", "the app") provides JNVST (Jawahar Navodaya Vidyalaya) and OAVET (Odisha Adarsha Vidyalaya) entrance exam preparation for Class 5 students in Odisha, India. It is currently operated by an individual, Gopinath Suna, based in Odisha, India, as a commercial product. This section will be updated with a registered business entity if and when one is incorporated.

2. This app is built for children

Our users are primarily children around 10 years old. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), a child is anyone under 18, and we are required to obtain verifiable consent from a parent or lawful guardian before processing a child's personal data. We do not knowingly allow a student to create an account without a parent/guardian confirming they have reviewed this Privacy Policy and our Terms of Use on the student's behalf, and we do not use a child's data for behavioural advertising or tracking outside this app.

3. What we collect

  • Identity & contact: student's full name, phone number (used to sign in via OTP), district, and school name.
  • Exam & practice data: answers, scores, time spent per question, marked-for-review flags, and answer changes during practice and mock tests — used to power progress tracking, mastery scores, and leaderboards.
  • Device & usage data: basic technical data such as IP address and browser/device type, collected automatically for security and to keep the app working reliably.
  • Consent record: the date and time a parent/guardian confirmed consent during onboarding.

4. Why we collect it

  • To create and secure the student's account and verify identity via OTP login.
  • To generate progress reports, mastery scores, and district/state leaderboards.
  • To improve the app's content and question quality over time.
  • To communicate important account or service updates (e.g. OTP messages).

We do not sell student data to third parties, and we do not use it to serve targeted advertising.

5. Who can see this data

A student's exam answers and personal details are visible only to that student's account and to authorised app administrators for support and content-quality purposes. Leaderboards show a student's name/district and score to other students in the same district or state — a parent/guardian consenting to this policy consents to that limited, in-app visibility.

6. How long we keep it

We retain account and exam data for as long as the account is active, so that progress history remains available to the student. If a parent/guardian requests deletion (see Section 8), we will delete or anonymise the student's personal data within a reasonable period, except where we are legally required to retain it.

7. Third-party services we use

We use a small number of trusted service providers to run the app, each of which processes data only on our behalf and only as needed to provide their service:

  • Supabase — our database and authentication provider, storing all account, exam, and progress data.
  • Vercel — hosts the app itself.
  • Firebase (Google) — verifies the student's phone number via OTP at login.
  • Google Gemini — used internally by our admin team to help process and translate question content; it does not process student personal data.
  • Sentry — automatically records technical error reports (e.g. a broken page) so we can fix problems quickly; these reports may incidentally include device/browser information but are used only for debugging.

We do not permit any of these providers to use student data for their own purposes, such as advertising. These providers may store and process data on servers located outside India as part of delivering their service to us; we only work with providers that maintain strong security and confidentiality standards.

8. Cookies and local storage

We use a small number of essential cookies and browser local storage — to keep a student logged in between visits, and to remember simple preferences like chosen language. We do not use advertising or cross-site tracking cookies.

9. Security

We use industry-standard measures (encrypted connections, access-controlled databases, row-level security so a student can only ever see their own private data) to protect student information. No system is perfectly secure, and if we become aware of a data breach affecting personal data, we will notify affected users and the Data Protection Board of India, as required by law.

10. Parent/guardian rights

A parent or guardian may, at any time, request to review, correct, or delete the personal data we hold about their child, or withdraw consent (which will result in the account being deactivated). A parent/guardian may also nominate another individual to exercise these rights on the child's behalf in the event of the parent/guardian's death or incapacity, by writing to us at the contact below. To make any of these requests, contact our Grievance Officer at:

Gopinath Suna — gopinathsuna75@gmail.com

If you are not satisfied with how we have addressed your request or complaint, you have the right to file a complaint with the Data Protection Board of India.

11. Changes to this policy

We may update this policy as the app evolves. Material changes affecting how children's data is handled will be highlighted in-app and, where required, will require renewed parental consent.