1. Information we collect

A. You provide this to us

• Account data: name, email, phone, password or SSO ID.
• Profile data: photo, preferred language, exam preferences, education details you add.
• Content: practice answers, notes, bookmarks, messages, feedback, support requests.
• Purchases: plans, coupon codes, invoices, transaction IDs. Card data is handled by our payment processors; we do not store full card details.
• Verification & proctoring (if enabled): camera or microphone input, screenshots, screen recording flags, identity documents you upload.

B. Collected automatically

• Device & app data: device model, OS, app version, app build, mobile carrier, unique device identifiers, push token.
• Log & usage data: feature usage, page views, taps, session length, referral source, crash logs, diagnostics.
• Approximate location: derived from IP for security, fraud prevention, and regional content. We do not collect precise GPS unless you enable a feature that needs it.

C. From third parties

• Single Sign-On: Google, Apple, or similar, if you use them to log in.
• Payments & stores: payment processors and app stores send us limited info to confirm purchases.
• Referrals and partners: if you join via a referral, we receive basic attribution data.

2. How we use information

We use personal information to:

• Provide and operate the Services, including practice sets, scoring, leaderboards, and saved progress.
• Personalize content and recommendations.
• Process purchases, subscriptions, and refunds.
• Send service messages, security alerts, and updates. You can control marketing messages.
• Measure performance, fix bugs, and improve reliability.
• Prevent fraud, abuse, and cheating (including proctoring and anomaly detection if enabled).
• Comply with law and enforce our Terms.

Legal bases (EU/UK): consent, contract performance, legitimate interests (product improvement, security), and legal obligations.

3. Cookies, SDKs, and similar tech

On web we use cookies and local storage. In the app we use SDKs for analytics, crash reporting, notifications, in-app purchases, and optional advertising.

Typical providers include: Firebase Analytics, Firebase Crashlytics, Google AdMob (if ads are shown), RevenueCat or app-store billing, and push notification services. The exact list may change. See Section 11 for managing choices.

4. When we share information

We do not sell your personal information.

We share only as needed:

• Service providers/processors: hosting, analytics, crash reporting, payments, email/SMS, push notifications, customer support, and proctoring vendors.
• Business transfers: in a merger, acquisition, or asset sale, data may transfer under this Policy.
• Legal and safety: to comply with law, respond to lawful requests, or protect rights, safety, and integrity.
• With your direction: for example, linking your account with a school, program, or scholarship.

If we use advertising networks, they may receive limited identifiers and event data to show or measure ads. You can opt out of "sharing" for cross-context ads where laws apply.

5. Children's privacy

The Services are not intended for children under 13, or under the minimum age required by your country without parental consent. If you believe a child provided us personal information, contact us and we will delete it.

6. Data retention

We keep personal information only as long as needed for the purposes above:

• Account data: for the life of the account.
• Learning history and app activity: until you delete your account or as needed for the service.
• Transaction records: kept for tax and accounting (typically 7–8 years, depending on law).
• Logs and diagnostics: typically 30–180 days, unless needed to investigate issues or abuse.

When retention ends, we delete or anonymize data.

7. Security

We use administrative, technical, and physical safeguards such as encryption in transit, access controls, and logging. No method of transmission or storage is fully secure. If we detect a security incident that affects you, we will notify you as required by law.

8. International data transfers

We may process and store information in India and other countries where we or our providers operate. When data moves across borders, we use safeguards like Standard Contractual Clauses where required.

9. Your rights and choices

A. Global

• Access/Correct/Delete: request a copy, fix inaccuracies, or delete your data.
• Portability: request your data in a portable format.
• Consent: withdraw consent for optional processing at any time.
• Marketing: unsubscribe via email footer or in-app settings.
• Push notifications: disable in your device settings.
• Precise location, camera, microphone: enable or disable in device settings.

B. European Economic Area/UK

You have the rights above plus restriction and objection where applicable. You can lodge a complaint with your data protection authority.

Controller: ExamProApp
EU/UK representative (if applicable): support@examproapp.com

C. California (CCPA/CPRA)

Residents can request to know, access, correct, or delete personal information, and opt out of "sale" or "sharing" for cross-context behavioral advertising. We do not knowingly sell personal information. To exercise rights, use the contact in Section 13.

D. India (DPDP Act, 2023)

You may withdraw consent, access, correct, delete, and nominate a person to exercise rights. You may raise grievances with our Grievance Officer below.

10. Proctoring and integrity features (if enabled)

If your course or exam uses proctoring, we may ask for camera, microphone, screen, or device checks to confirm identity and prevent cheating. We only collect what is necessary for that session. Details will be shown before the session starts. Where required, we will ask for your consent.

11. Managing preferences

• Analytics and ads in the app: use the in-app Privacy or Settings page to adjust analytics and ad personalization where available. You can also reset your device's advertising ID.
• Ad choices: Android and iOS provide system-level settings to limit ad tracking.
• Browser cookies (web): adjust cookie preferences via our cookie banner or your browser.

12. Third-party links

The Services may link to third-party sites or apps. Their practices are governed by their own policies.

13. Contact us

14. Changes to this Policy

We may update this Policy from time to time. If changes are material, we will notify you in the app, by email, or on our site. The "Effective date" shows when the latest version took effect.

15. How to exercise your rights

Send a request from your registered email to privacy@examproapp.com or use the in-app Privacy page. We may ask for information to verify your identity. If we cannot honor a request due to legal obligations or legitimate interests, we will explain why.