Privacy Policy

1. Information We Collect

We may collect the following categories of information:

• Account and profile information: name, email address, profile image, phone number (when provided), authentication provider identifiers, and account preferences.
• Learning and usage data: prelims practice activity, test attempts, scores, answer submissions, mains evaluation uploads, notebooks, bookmarks, progress metrics, and interaction history within the Platform.
• Payment and subscription data: purchase history, subscription status, plan details, and transaction references. We do not store full payment card numbers on our servers.
• Communications: messages you send to us (for example, support requests) and notification preferences.
• Device and technical data: device type, operating system, app version, browser type, IP address, language settings, push notification tokens, and diagnostic logs.
• Security and anti-abuse signals: limited technical signals used to protect accounts, detect fraud, and maintain service integrity.

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Platform and your account.
• Deliver educational features including practice tests, answer evaluation, analytics, and personalized learning insights.
• Process payments, subscriptions, test series purchases, and related billing.
• Send service-related communications, including evaluation results, account notices, and push notifications (where enabled).
• Monitor performance, troubleshoot issues, improve reliability, and develop new features.
• Protect the Platform and our users from abuse, fraud, unauthorized access, and security threats.
• Comply with applicable laws, regulations, and lawful requests.

3. Google Sign-In

You may sign in using Google Sign-In on the website and Android app. When you choose this option, we receive information from Google as permitted by your Google account settings, which may include your name, email address, profile picture, and a unique Google account identifier.

We use this information solely to authenticate you, create or link your UPSC Practice account, and maintain your profile. We do not receive or store your Google account password. Google’s use of your data is governed by Google’s Privacy Policy.

4. Truecaller Sign-In

On supported Android devices, you may sign in using Truecaller. If you use Truecaller Sign-In, we may receive your phone number and related verification data provided by Truecaller for the purpose of authentication and account creation or login.

We use this information only to verify your identity and manage your account. Truecaller’s handling of your data is subject to Truecaller’s Privacy Policy.

5. Payments and Transaction Information

Paid courses, subscriptions, test series, evaluation credits, and related services may be purchased through our Platform. Payment processing is handled by third-party payment providers (such as Razorpay). When you make a payment, we and our payment partners may collect billing details, transaction identifiers, payment status, and purchase metadata necessary to complete and record the transaction.

Sensitive payment credentials (such as full card numbers or UPI PINs) are processed directly by the payment provider and are not stored by UPSC Practice. We retain transaction records as needed for billing support, subscription management, refunds, tax compliance, and fraud prevention.

6. Cookies, Analytics, and Logging

We use cookies, session storage, and similar technologies to keep you signed in, remember preferences, and understand how the Platform is used. You can control cookies through your browser settings; disabling certain cookies may limit some functionality.

We use analytics, monitoring, and logging tools (such as application performance monitoring and server logs) to measure usage, diagnose errors, and improve service quality. These tools may collect aggregated or pseudonymous usage data, page views, device information, and technical events. Where configured, we take steps to avoid logging sensitive credentials such as passwords or authorization headers.

7. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. Learning records, evaluation history, and payment records may be retained for a reasonable period after account closure where required for legal, accounting, or fraud-prevention purposes. We may anonymize or aggregate data so it can no longer identify you.

8. Data Security

We implement administrative, technical, and organizational safeguards designed to protect your information, including encryption in transit (HTTPS), access controls, and secure authentication practices. No method of transmission or storage is completely secure; we cannot guarantee absolute security, but we work to protect your data against unauthorized access, alteration, disclosure, or destruction.

9. Third-Party Services

We use trusted third-party services to operate the Platform. These may include:

• Google — Sign-In and related authentication services.
• Truecaller — phone-based sign-in on Android.
• Razorpay — payment processing.
• Cloud hosting and infrastructure providers — application hosting and data storage.
• Analytics and monitoring providers — performance, error tracking, and security monitoring.
• Push notification services — delivery of mobile and web notifications.
• AI and processing services — automated processing of uploaded answers and related educational content, where applicable.

These providers process data on our behalf or as independent controllers under their own policies. We encourage you to review the privacy policies of third-party services you interact with through the Platform.

10. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including the right to:

• Access and receive a copy of personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information, subject to legal and contractual limitations.
• Withdraw consent where processing is based on consent.
• Opt out of non-essential communications or push notifications through device or account settings.

To exercise these rights, contact us using the details in the Contact section below. We may need to verify your identity before responding to your request.

11. Account Deletion Requests

You may request deletion of your UPSC Practice account and associated personal data by emailing hey@upscpractice.com from the email address linked to your account. Please include “Account Deletion Request” in the subject line.

After verification, we will delete or anonymize your account data within a reasonable timeframe, except where retention is required by law or for legitimate business purposes (such as unresolved payment disputes, fraud prevention, or legally mandated record-keeping).

12. Children’s Privacy

The Platform is intended for UPSC aspirants and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at hey@upscpractice.com and we will take steps to delete such information.

13. International Users

UPSC Practice is operated from India and intended primarily for users preparing for examinations in India. If you access the Platform from outside India, your information may be processed and stored in India or in other locations where our service providers operate, subject to applicable data protection laws.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes may be communicated through the Platform, by email, or by other appropriate means. Your continued use of the Platform after changes become effective constitutes acceptance of the updated policy.