Preppyy
Log inGet started

Legal

Privacy Policy

This policy explains what personal data we collect, why we collect it, how we protect it, and the choices and rights you have.

Last updated: 18 June 2026

1. Introduction

This Privacy Policy describes how Preppyy (“we”, “us” or “our”) collects, uses and protects your personal data when you use the Preppyy website and application (the “Service”). We act as the data fiduciary in respect of your personal data and are committed to handling it responsibly and in accordance with India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and other applicable laws.

2. Data we collect

Information you provide

  • Account data: your name, email address and password (passwords are stored only in hashed form by our authentication provider).
  • Profile data: optional details such as your target exam year, target colleges or preparation preferences.
  • Communications: messages you send us by email or through support.

Information generated through use

  • Practice & performance data: your answers, attempt history, time taken, error patterns, percentile estimates and analytics.
  • Pass & transaction data: your pass status and expiry, purchases and usage history. Payments are processed by our payment gateway; we do not store your full card or bank details.
  • Technical data: IP address, device and browser type, and usage logs collected automatically when you use the Service.

3. How we use your data

We use your personal data to:

  • Create and manage your account and authenticate your access.
  • Provide the core Service: generating practice, diagnosing error patterns, and producing analytics and percentile estimates.
  • Process pass purchases and maintain your pass status.
  • Respond to your support requests and communicate important updates about the Service.
  • Monitor, secure, debug and improve the Service, including our AI and diagnostic models in aggregated or de-identified form.
  • Comply with legal obligations and enforce our Terms & Conditions.

4. Legal basis

We process your personal data on the basis of the consent you provide when you sign up and use the Service, for the performance of our contract with you (providing the Service you request), and where necessary for our legitimate interests in operating and securing the platform or to comply with the law.

5. AI processing

To deliver diagnostics and explanations, your answers and related practice data may be processed by AI models, including trusted third-party AI providers acting as our processors under contractual safeguards. We do not sell your personal data, and we do not use your personal information to train third-party models for their own purposes.

6. Cookies & analytics

We use essential cookies to keep you signed in and to operate the Service. We also use Google Analytics, a web analytics service provided by Google, to understand how visitors find and use the Service so we can improve it. Google Analytics sets cookies and may collect information such as your IP address (truncated where supported), device and browser type, the pages you view and the site that referred you; this data is processed by Google in accordance with its own privacy policy. You can control cookies through your browser settings and opt out of Google Analytics using Google’s opt-out browser add-on. Disabling essential cookies may affect functionality.

7. Sharing & disclosure

We share personal data only as needed and only with:

  • Service providers / processors: such as hosting, database, authentication, payment-gateway, AI and analytics providers who process data on our behalf under appropriate agreements.
  • Legal & safety: where required by law, regulation or valid legal process, or to protect the rights, safety and security of Preppyy and its users.
  • Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy.

We do not sell or rent your personal data to third parties.

8. Data retention

We retain your personal data for as long as your account is active or as needed to provide the Service, and thereafter only as long as necessary to comply with our legal obligations, resolve disputes and enforce our agreements. When data is no longer required, we delete or anonymise it.

9. Security

We implement reasonable technical and organisational safeguards, including encryption in transit, access controls and secure infrastructure, to protect your personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, but we work continuously to protect your information.

10. Your rights

Subject to applicable law, including the DPDP Act, you have the right to:

  • Access the personal data we hold about you and obtain a summary of how it is processed.
  • Request correction or completion of inaccurate or incomplete data.
  • Request erasure of your personal data and deletion of your account.
  • Withdraw consent where processing is based on consent (this does not affect prior lawful processing).
  • Nominate another individual to exercise your rights in the event of death or incapacity.
  • Raise a grievance with us, and escalate to the Data Protection Board of India where applicable.

To exercise any of these rights, email us at admin@preppyy.com. We will respond within a reasonable timeframe.

11. Children’s privacy

The Service is intended for users aged 18 and above. We do not knowingly collect personal data from children without verifiable parental or guardian consent. If you believe a child has provided us data without such consent, please contact us so we can delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where the changes are material, take additional steps to notify you.

13. Grievance & contact

For any questions, requests or complaints about your personal data, please contact our Grievance Officer:

You can also reach us through our Contact page.