Privacy policy

Who this service is for

This free practice service is currently for approved friends aged 18+. Student profiles and attempts are not public. There is no public leaderboard.

Data collected

Registration asks for a username, name, address, parents' names, date of birth and consent timestamp. No email or phone is requested. A technical identifier derived from the username is used for login. Firebase Authentication handles passwords.

We store test answers, flags, time, paper IDs, bookmarks, question reports and support messages. Language settings are saved with your account preferences.

Storage and service providers

Firebase stores profiles, approvals, attempts, bookmarks and reports to provide account access and practice. Firestore is in asia-south2. This does not mean all authentication or hosting processing stays in that region. Cloudflare Pages delivers the website. These providers may process technical request information, such as IP addresses and browser/device details.

Local browser storage holds unfinished tests, language settings and local copies of attempts/bookmarks. Remember me can keep login on this device. Log out on shared devices.

Who can access it

Other students cannot read your profile, attempts or bookmarks. The allowlisted admin can view usernames, profile data and private practice attempts in the admin panel to approve access, help students and manage the service. Service operators can also access data through the database console. Only you and the admin can read your reports and support messages. Firebase and Cloudflare process data to provide their services. The app has no public-sharing or data-sale feature.

Advertising

No AdSense, AdMob, ads or Google Analytics are installed. Before any future advertising, the policy and required consent setup will be updated. This policy is not advertising approval.

Retention and deletion

Data is retained until you delete your account or the admin deletes app data. Admin deletion removes app data and blocks access but cannot delete the Firebase authentication login; self-deletion or the secure console is needed for that. Account deletion removes the profile, approval/request, cloud attempts, bookmarks, your reports/support messages and authentication account, plus account-local copies on this device. Clear local copies on other devices yourself. Provider technical logs/backups may follow separate retention rules; immediate deletion of every copy is not promised.

Help and limitations

Use the private in-app Contact form. Automatic password recovery is unavailable without email/phone. Keep your password safe. If you lose access, contact the operator through your existing private route; no new public email or phone is supplied. External source links have their own privacy policies.