Privacy Policy

1. Who we are

LakshyaPath is an exam-preparation service for Indian government recruitment exams. We provide mock tests, previous-year papers, practice questions and performance analytics, on the web and in our Android app.

For the purposes of India’s Digital Personal Data Protection Act, 2023, we are the data fiduciary for the information described here — meaning we decide what is collected and why, and we are answerable to you for it. You can reach us any time at pritamkunar13@gmail.com.

2. What we collect, and why

We collect only what the service needs in order to work. Each group below says what it is and what it is for.

• Account details

  Your name, email address and phone number, and a password that is stored only as an irreversible hash — never as text we can read. If you sign in with Google we receive your name, email address and Google account ID instead.

  Why: To create your account, sign you in, recover access when you forget your password, and send you the one-time codes that protect it.

• Your exam activity

  The exams you follow, every mock test, previous-year paper, daily quiz and practice session you take, the answers you chose, your scores, ranks, time spent, bookmarks, streaks, reward points and referrals.

  Why: This is the product. It is what produces your score, your topic-wise analytics, your revision cards and your position on a leaderboard.

• Purchase records

  The plan you bought, the amount, the payment and order reference numbers returned by Razorpay, any coupon used, and the refund status.

  Why: To give you access to what you paid for, to issue invoices, and to keep the accounting records the law requires.

• Messages you send us

  The content of emails you write to support, including anything you choose to put in them.

  Why: To answer you, and to keep a record of what was asked and what we did about it.

• Technical information

  Your IP address, browser or device type, operating system, app version, and error reports produced when something goes wrong.

  Why: Your device sends most of this automatically whenever it talks to a server. We use it to keep the service running, to fix crashes and to stop abuse such as brute-force sign-in attempts.

We rely on your consent for the account you chose to create, and on the necessity of performing our contract with you for everything that follows from it — running the tests you take, and giving you what you paid for.

3. What we never collect

Some things are worth stating as absences, because a policy that only lists what it takes leaves you guessing about the rest:

• Your card number, CVV, UPI PIN or bank credentials — these go straight to Razorpay and never reach our servers.
• Your contacts, photos, files, microphone or camera. The app never asks for those permissions.
• Your location. We do not collect or track it.
• Your fingerprint or face. If you unlock the app with biometrics, the check happens on your device and the result never leaves it.

4. Who we share it with

We use a small number of established service providers to run LakshyaPath. Each one receives only the data it needs for its job, and may not use it for anything else. These are all of them:

• Razorpay

  Payments

  Collects your payment details directly and tells us only whether a payment succeeded, for how much, and against which order.

  Their privacy policy

• Google — Sign-In

  Authentication

  If you choose "Continue with Google", Google confirms your identity and shares your name, email address and account ID with us.

  Their privacy policy

• Google AdSense

  Advertising

  Serves the ads on our website and may use cookies to choose which ones you see. You can turn off personalised ads in your Google Ad Settings.

  Their privacy policy

• Anthropic (Claude) and OpenAI

  AI features

  Power "Explain this answer" and your AI study plan. We send them the question text and the topic-accuracy figures the plan is built from — never your name, email address or phone number. Under their API terms your inputs are not used to train their models.

  Their privacy policy

• MongoDB Atlas

  Database hosting

  Stores the database itself. They host it; they do not use its contents.

  Their privacy policy

• Vercel

  Website and API hosting

  Runs the website and the API your app talks to, and keeps short-lived server logs.

  Their privacy policy

Beyond these, we disclose personal data only where the law requires it — a valid order from a court or a government authority — or where it is necessary to investigate fraud, cheating or a threat to someone’s safety. If LakshyaPath is ever sold or merged, your data may transfer to the new owner, who would remain bound by this policy until you are told otherwise.

Some of these providers store or process data on servers outside India. Where that happens, we rely on the provider’s own contractual data-protection commitments.

5. Ads and cookies

Our website shows ads through Google AdSense. Google and its partners may use cookies to choose which ads you see, including on the basis of your previous visits to this and other websites. You can turn personalised ads off entirely at Google My Ad Center — the ads remain, they just stop being tailored.

The mobile app does not show ads and contains no advertising or analytics trackers.

Apart from advertising, the only things we store on your device are these — and none of them track you across other sites:

• tokenYour sign-in token, so you stay signed in between visits. Removed when you log out.
• themeWhether you chose the light or dark theme.
• practiceLangWhether you read questions in English or Hindi.

In the app, your sign-in token is held in the device’s encrypted secure storage (Keychain on iOS, Keystore on Android) rather than in a cookie.

6. AI features

Two features send data to an AI provider: Explain this answer, and your AI study plan. They run on Anthropic’s Claude and OpenAI’s models.

What gets sent is the question you asked about — its text and options — or, for a study plan, the names of your weak topics with their accuracy percentages and the hours a day you said you can study. Your name, email address and phone number are never sent. Under the API terms we use, your inputs are not used to train their models.

AI-generated explanations and plans can be wrong. Treat them as study aid, not as an authority on the syllabus.

7. How we protect it

• Traffic between your device and our servers is encrypted with HTTPS.
• Passwords are stored only as bcrypt hashes. We cannot read them, and neither can anyone who obtains the database.
• One-time codes are hashed too, expire in ten minutes, and lock after five wrong attempts.
• Sign-in tokens are held in your device secure storage on mobile, and expire.
• Access to the production database is limited to the people who need it to operate the service.

No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your personal data, we will tell you and the Data Protection Board of India as required by law. Please use a password you do not use anywhere else.

8. How long we keep it

We keep your account and its test history for as long as your account is open, because that history is what your analytics are built from — a two-year-old score still tells you whether you are improving.

If you stop using LakshyaPath entirely, we may delete an account that has been inactive for 3 years, after writing to your registered email address first. Payment and invoice records are kept for 8 years, which is the period Indian tax law requires, even if the account itself is gone.

When you ask us to delete your account, these are the categories that go:

• Account and profile information
• Learning progress
• Test history
• Saved content and preferences
• Subscription account data

And these are what we may have to keep, for the period the law or the safety of other candidates requires:

• Payment and invoice records — Tax and accounting law requires us to keep proof of a payment for a fixed period, so invoices are retained even after the account is gone.
• Security and fraud-prevention records — A minimal record of abuse or fraud is kept where it is needed to protect other candidates.
• Anonymised statistics — Aggregate figures such as an exam average or a question difficulty rating stay, because they no longer identify anyone.

9. Your rights

The data is yours. You can exercise any of these by writing to pritamkunar13@gmail.com from your registered email address, and we will respond within 30 days.

• See and correct your information

  Your name, email address, phone number and preferences are all editable in Settings. Write to us for anything you cannot change there.

• Get a copy of your data

  Ask us and we will send you the personal data we hold about you in a readable file.

• Delete your account

  You can ask us to erase your account and its data at any time. Our deletion page explains exactly what goes and what we must keep.

• Withdraw consent

  Turn off email or SMS notifications in Settings, and turn off personalised ads in your Google Ad Settings.

• Complain

  If we have not resolved something, you can escalate it to us in writing, and to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

To delete your account, follow the steps on our account deletion page. It is public, so you can read it without signing in.

10. Students under 18

LakshyaPath is built for candidates preparing for government recruitment exams, so most of our users are adults. Some of our practice material follows the NCERT school syllabus, though, and school students do use it.

If you are under 18, please use LakshyaPath with the knowledge and consent of a parent or guardian. We do not knowingly create accounts for children under 13, we do not show personalised ads to anyone we know to be a child, and we never use a child’s data for advertising or profiling.

Parents and guardians: write to pritamkunar13@gmail.com and we will show you what we hold about your child, correct it, or delete the account. We will not ask you to prove anything more than that the account is your child’s.

11. Changes to this policy

We update this page when what we do with data changes — a new feature, a new provider, a new legal obligation. The date at the top always says when it last changed. If a change materially affects you, we will tell you by email or in the app before it takes effect, rather than quietly editing this page.