Legal
Privacy Policy
Last updated: 17 October 2026
1. Who We Are
2. Information We Collect
- Account data — name, email address, password (hashed), and selected exam preference when you register.
- Usage data — pages visited, questions attempted, answers submitted, time spent, and performance analytics.
- Device data — IP address, browser type, operating system, and device identifiers collected automatically.
- OAuth data — if you sign in via Google, we receive your name, email, and profile picture as permitted by your Google account settings.
- Payment data — for premium subscriptions, payment is processed by our payment partners; we do not store card numbers.
- Content you post — comments, replies, community solutions (text and any photos you attach), likes and reports you file. Your name and profile picture are shown publicly next to comments and solutions you post.
- Photos you choose — only when you tap “Add photo” or “Camera” while writing a solution; we do not access your gallery or camera at any other time.
- Notification token (mobile app) — if you allow notifications, a Firebase Cloud Messaging token that identifies your app installation, so we can deliver notifications. You can switch notifications off in Profile → Push notifications in the app, or in your phone's settings.
3. How We Use Your Information
- Provide and personalise the platform — show relevant questions, track progress, and generate analytics.
- Process payments and manage subscriptions.
- Send transactional emails (account verification, password reset, purchase confirmations).
- Send product updates and educational content — you may opt out at any time.
- Improve our services through aggregated, anonymised usage analysis.
- Comply with applicable law and resolve disputes.
- Send the notifications you have allowed (for example practice reminders and important updates).
- Run community features (comments, solutions, likes) and review reports.
4. Cookies and Tracking
5. Sharing Your Data
- Service providers — hosting, payment processing, email delivery, and Google Firebase Cloud Messaging, which delivers push notifications to the mobile app — bound by confidentiality agreements.
- Law enforcement — when required by a valid legal order.
- Business transfers — in the event of a merger or acquisition, subject to the same privacy commitments.
6. Data Retention
We keep your data while your account is active. You can delete your account at any time from Profile → Delete account in the app. When you confirm, all your data is erased immediately and permanently: your account details, practice history and analytics, bookmarks, comments and replies, community solutions (including any photos), likes, reports you filed, and your notification token. We do not keep a copy and cannot restore a deleted account. If you cannot use the app, email hr-ops@iitiansquad.com from your registered address and we will delete your account and data on request.
Routine server logs and system backups that may still contain traces of your data are deleted on their regular schedule. We may keep limited information only where the law requires us to.
7. Your Rights
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and all associated data yourself at any time (in the app: Profile → Delete account), or by emailing hr-ops@iitiansquad.com.
- Withdraw consent for optional processing (e.g., marketing emails).
- Nominate a representative for your data rights.