This notice explains what personal data PaperYodha (“we”) collects when you use this website, why, and the choices and rights you have. We are the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Digital Personal Data Protection Rules, 2025. The service is offered to people in India.
1. What we collect
- Account details: your name, email address and, if you sign in with Google, your profile photo. If you sign up with email, your password is handled by our sign-in provider and never seen or stored by us.
- Test data: the answers you save in mock and live tests, whether you marked a question for review, the time spent on each question, when you started and submitted, and your scores and results.
- Live-test entries: the live tests you register for or join, and the display name you choose.
- Consent record: the version of this notice you accepted and when, whether you are under 18, and, if so, your parent's or guardian's name and email address.
- Technical data: your IP address, browser and device type, and the pages and services you request, which our hosting provider records in security logs.
We do not ask for, and you should not give us, any government ID numbers, financial details or other sensitive information.
2. Why we use it
- To create and secure your account and sign you in.
- To run your mock and live tests, score them, and show you your results and analysis.
- To rank live tests: your display name, score, accuracy and rank are shown to other students who took the same live test.
- To sell and activate the PaperYodha Pass: we record the payment id, order id, amount and date against your account, and keep these records for as long as tax and accounting law requires, even after you delete your account.
- To keep the service secure, prevent cheating and misuse, and meet our legal obligations.
- To improve our questions using combined, de-identified statistics (for example, how many students answered a question correctly).
We use your data only for these purposes and only on the basis of your consent or as the law permits. We do not sell your data or use analytics trackers. We do not show advertising.
3. Children (under 18)
If you are under 18, you may use PaperYodha only with the consent of your parent or legal guardian, which we record when you sign up. We do not track, monitor the behaviour of, or target advertising at children: we show no advertising. We use a child's data only to provide the tests and results described above.
4. Who processes your data and where
- Our sign-in, database and hosting are provided by Google (Firebase Authentication, Cloud Firestore and Firebase App Hosting), who process data on our behalf under contract.
- Your test data is stored in Google's Mumbai (India) data centre. Our web servers run in Google's Singapore region, so your data passes through them while you use the site.
- Payments are processed by Razorpay (Razorpay Software Private Limited). Your card, UPI or bank details go to Razorpay only and never reach us; we receive the payment id, order id, amount and status. Razorpay acts under its own privacy policy for the payment itself.
- We may disclose data where required by law, for example in response to a valid order from a court or government authority in India.
5. How long we keep it
We keep your account and test data for as long as your account exists, because you use it to see your results and progress. When you delete your account, we erase your account, test data, live-test entries and consent record from our database straight away. Security logs are kept for one year, as the DPDP Rules require, and then deleted.
6. How we protect it
- All connections use HTTPS encryption; data is also encrypted where it is stored.
- Our database cannot be reached from browsers at all; only our own server, after checking your sign-in, can read or change your data, and only your own.
- We limit what we collect, apply security protections to every page, and keep logs to detect and investigate misuse.
- If a personal data breach occurs, we will inform the Data Protection Board of India and the affected users as the law requires.
7. Your rights
- Access: see and download the personal data we hold about you from Your data in the account menu.
- Correction and completion: ask us to correct or update inaccurate data.
- Erasure: delete your account and data at any time from Your data.
- Withdraw consent: as easily as you gave it, by deleting your account. Withdrawal does not affect processing that took place before it.
- Nominate: name a person who may exercise these rights for you in the event of your death or incapacity.
- Grievance redressal: raise any concern with us; we will respond within 30 days.
- Complaint to the Board: if you are not satisfied with our response, you may complain to the Data Protection Board of India.
When using the service you must give accurate information and must not impersonate anyone or make false complaints (DPDP Act, section 15).
8. Cookies and browser storage
We use one essential cookie that keeps you signed in, and your browser's local storage to remember preferences such as your theme and recent tests on that device. We do not use analytics cookies. If you choose to see ads, our advertising partner may set its own cookies in the advertisement frame; turn ads off in Your data to stop that.
9. Contact and grievances
- Grievance Officer: Raj Bagri
- Email: rajbagri3214@gmail.com
10. Changes to this notice
If we change this notice in a way that affects how we use your data, we will ask for your consent again before you continue using the service. This version is dated 12 November 2026. This notice is available in English; if you would like it in Hindi or another language listed in the Eighth Schedule to the Constitution, please contact us.