1. Who we are

SarvPariksha is a free exam-practice platform for Indian competitive exams, run as an independent student project by Abhay Mourya in Nagpur, India. “We” means the project and its operator. This policy covers sarvpariksha.in and every feature on it, including teacher exams, the community exam portal, Game Mode and the certificate verifier. It does not cover third-party sites we link to.

2. What we collect

Email, display name and the age confirmation are required to create an account. Everything else is optional or tied to a feature you choose to use.

• Without an account: nothing about you. If you take a teacher's shared exam without an account, your answers are saved under the name you type, for that teacher.
• Account: email address, display name, email-verification status and, with Google sign-in, the basic profile Google shares (name and email). Passwords are handled by Supabase Auth; we never see them or store them in plain text.
• Age confirmation: your confirmation at sign-up that you are 18 or older, or that a parent or guardian agreed, with the date and the version of the terms.
• Optional profile details you choose to add, such as class or stage, target exam, state or school.
• Your activity: exam attempts (answers, scores, time taken), bookmarks, resume state, Game Mode and Daily Challenge progress, Mistake Notebook entries, notes, AI chats, hints, predictions, notebooks and AI exams, and daily counters for usage limits.
• Images: an image you attach to an AI chat is sent to our AI provider to be read and is not stored after the answer is returned. Images uploaded to a teacher exam are stored in Supabase Storage so students can see them.
• Teachers: institution name and school ID for verification, the exams you create (questions, options, images, marking scheme, access codes, certificate settings) and the results of students who take them.
• Certificates: the name on the certificate, exam, score, level, issue date and serial ID.
• Messages to us: feedback, bug reports, content reports and any attachments.
• Plan details: your plan and any institution code you used. We collect no card, UPI or bank details.

3. What we collect automatically

• Technical data that our hosting providers process to run and secure the site: IP address, browser and device type, language, pages requested, timestamps and error logs.
• Usage data: features used, exam-completion events and daily counters. Anonymous, aggregated analytics (such as popular papers) run only if you opt in under Manage cookies.
• Exam integrity signals: during an exam we may count tab switches or focus changes on your device to show a warning and to help review suspicious certificate claims.
• On-device storage: preferences, drafts, exam-resume state and your cookie choice, kept in your browser under keys starting with sarv_. The Cookies Policy lists them. You can clear them with Clear Data on This Device.
• We do not request your GPS or precise location, run advertising or cross-site trackers, or use fingerprinting.

4. How we use your data

• Run the service: create and secure your account, run and score exams, save history, sync notebooks, issue and verify certificates.
• Personalise practice: show progress, recommend topics and tailor AI explanations to your attempts and prompts.
• Teacher features: let teachers create exams, share links or codes and see results for their own exams.
• Service messages: verification, security, password-reset and exam-result emails. We send no marketing emails; if that changes, we will ask you first.
• Safety and improvement: detect abuse and cheating, enforce the Terms of Service, fix bugs and improve the service using aggregated or de-identified data, and meet legal duties.

Under India's Digital Personal Data Protection Act, 2023, we process your data with your consent, or for uses the Act permits without consent, such as data you volunteer for a stated purpose, security, fraud prevention and legal compliance. You can withdraw consent at any time, but some features may then stop working.

5. AI features

AI Chat, hints, explanations, predictions, notebooks and AI exams send the text you submit, and any image you attach, to Groq, our AI provider, which returns the answer. Groq works under its own terms and privacy policy, and we do not control its internal practices. We do not use your chats or prompts to train our own models, and we do not sell them.

AI can be wrong. Treat it as a study aid, not an official answer or prediction. Do not send passwords, ID numbers, financial or health details, or other people's private data. Certificates depend on your score and the teacher's settings, not on AI alone.

6. Who we share data with, and where it is stored

We do not sell, rent or trade personal data. We share it only as needed to run SarvPariksha:

• Supabase: login, database and file storage.
• Groq (a US company): AI processing, as above.
• Cloudflare: hosting, delivery, security and request logs.
• YouTube and X: some pages embed their content; their own policies apply once it loads.
• Teachers: when you take a teacher's exam, the organiser sees what you submit (such as name, email or roll number if asked, answers, score and time). What they do with it is governed by their own practices.
• Everyone: exams you publish to the community portal and your display name as uploader, and your display name and score on Daily Challenge leaderboards. Anyone with a certificate's serial ID can see the holder's name, exam, score, level and issue date.
• Legal and safety: we may disclose data if the law requires, to protect rights and safety, to investigate abuse, or in a sale or merger of the project, with notice where required.

QR codes for certificates and game rooms are generated in your browser, so nothing is sent to a QR service. Supabase, Cloudflare and Groq may process data outside India. Where required we use contractual safeguards, and we will follow any restrictions on cross-border transfers that the Government of India notifies.

7. How long we keep data

• Account data, attempts, chats, notebooks, predictions and certificates: until you delete them or your account.
• Teacher exams and student results: until the teacher deletes the exam or account, or you ask us to remove what you submitted. Images uploaded to an exam are deleted with it.
• On-device data: until you clear it. Exam-resume state lasts about 24 hours at most, and your cookie choice 12 months.
• Logs and backups: server logs are kept for a limited period for security and troubleshooting, then deleted or aggregated. Backups may persist for a short rolling period after deletion before being overwritten.
• After you delete your account: your certificates become unverifiable and are removed. We may keep limited records where the law requires or to prevent fraud, and anonymised statistics that cannot identify you.

8. How we protect data

We use TLS in transit, Supabase Auth for sign-in, row-level security so your records are scoped to your account, least-privilege access and abuse monitoring. We never store passwords in plain text. No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires. Use a strong, unique password and tell us promptly about anything suspicious.

9. Your rights and choices

You can access, correct, complete, update or erase your personal data, withdraw consent, nominate someone to act for you, and make a complaint. Most of this you can do yourself:

• Export: Settings → Export My Data downloads your attempts, certificates, chats, predictions and teacher exams as a JSON file.
• Correct: edit your profile in Settings, or email us about a field you cannot edit.
• Delete: Settings → Delete My Account & All Data removes your account and records, including teacher exams and student results you own. Backups may persist briefly, as in section 7.
• On this device: Clear Data on This Device wipes preferences and drafts.
• Cookies and analytics: Manage cookies in the footer.

We may need to verify your identity first, and we aim to reply within 30 days. If we have not resolved your complaint, you can approach the Data Protection Board of India.

10. Children

SarvPariksha is built for students, many of whom are under 18. When you sign up, we ask you to confirm that you are 18 or older, or that your parent or legal guardian has agreed to the Terms of Service and this Privacy Policy. We do not collect your date of birth and do not independently verify this confirmation. We show no targeted advertising and do not track children for behavioural advertising. If you believe a child is using SarvPariksha without a guardian's consent, contact us and we will delete that account's data. Teachers and institutions must get any consent the law or their school requires before asking students to use SarvPariksha.

11. Changes to this policy

We may update this policy for new features, legal requirements or changes to our providers. We will post the new version with a new date and, for material changes, give at least 14 days' notice in the app or by email before they take effect. Where the law requires fresh consent, we will ask again. At least once a year we will remind you of this policy and the Terms of Service.

12. Contact and grievances

Grievance Officer: Abhay Mourya, Nagpur, India. Email contact@sarvpariksha.in. Use the subject line “Privacy request” for privacy requests and “Security” for security reports. Privacy requests: we acknowledge within 7 working days and aim to resolve within 30 days. Content, copyright and rule-violation complaints: we acknowledge within 24 hours and resolve within 15 days. If you are not satisfied, you can approach the Data Protection Board of India or the relevant consumer authority.