Privacy Policy

This Privacy Policy explains how answersheet™ (“answersheet”, “answersheet.in”, “app.answersheet.in”, “we”, “us”, or “our”) collects, uses, stores, shares and protects personal data when you access or use our website, application and related services (the “Services”).

answersheet is at present operated by an individual founder and provides competitive-exam preparation and personalised learning services, currently focused on JEE Main and JEE Advanced, with other exams planned in the future.

By creating an account or using the Services, you confirm that you have read and understood this Privacy Policy. If you do not agree with this Policy, please do not use the Services.

1. Information We Collect

1.1 Account Information

When you create an account, we may collect your name, email address, mobile number, authentication information, email-verification status, referral code (if used), and exam/learning preferences linked to your account.

Your password is handled by our authentication infrastructure (Supabase). We do not intentionally store passwords in plain text in our application database.

Email verification is required before you can access practice and learning features. Until your email is verified, your account may remain restricted.

1.2 Learning and Practice Information

When you use our practice, diagnostic and mock-test features, we process information such as:

• Questions attempted, answers selected, and whether they were correct, incorrect, or skipped
• Time taken per question and per attempt
• Subject, chapter, concept and difficulty metadata linked to each question
• Mistake classification — silly mistake, conceptual confusion, or prerequisite gap
• Mastery, accuracy and progress indicators derived from your attempts
• Recommendations generated for you and the reasoning behind them

This information is used to diagnose learning gaps and personalise your practice. Past attempts may remain stored even after your mastery improves, so that your progress over time can be shown to you accurately.

1.3 Technical and Infrastructure Information

We do not deliberately store IP addresses, device fingerprints, or browser/OS details in our own application database. However, our hosting and infrastructure providers (see Section 4) may record such information — including IP address, User-Agent, request path and time — in their own infrastructure logs for security, abuse-prevention and diagnostic purposes.

1.4 Feedback and Support Information

If you contact us or submit in-app feedback, we may collect your email address, the content of your message, feedback category, rating, and any other information you choose to share.

1.5 Referral Information

If you use our referral program, we process referral codes, referrer/referred-account relationships, referral status, qualification checks (used to prevent fraudulent or fake referrals), and reward/unlock status.

1.6 Payment Information

Paid plans are not yet active on answersheet. When enabled, payments will be processed through a third-party payment gateway (such as Razorpay or Cashfree or etc). We do not intend to store complete card, UPI, or bank-account credentials on our own servers — these will be handled directly by the payment gateway under its own security and compliance standards.

2. How We Use Personal Data

We use personal data to: create and secure your account; verify your email; provide personalised questions, diagnostics and recommendations; operate referrals; provide support; detect fraud, misuse and security threats; maintain and improve the Services; process payments once enabled; and comply with applicable law.

Where consent is the legal basis for a particular use, we obtain it in the manner required by applicable law. Where another legal basis applies, we rely on that basis instead.

3. Personalised Learning — No Advertising or General AI Training Use

Your answers, response times, mastery data and identified gaps are used only to personalise your own practice experience on answersheet. We do not use student personal data for targeted advertising, and we do not currently use student personal data to train general-purpose AI models.

4. Sharing of Personal Data

We do not sell, rent or trade your personal data. We share data only with service providers who help us operate the Services, strictly for that purpose:

• Supabase — database, authentication and storage
• Vercel — web application hosting
• Render — backend/API hosting
• Cloudflare — DNS, CDN, security and email routing
• Google Search Console — website indexing/SEO monitoring (no student activity data)
• Razorpay / Cashfree — planned payment processing once enabled

Some of these providers operate infrastructure outside India, meaning personal data may be processed on servers located outside India. We select providers we consider appropriate and require them to maintain reasonable security safeguards. We do not currently use Google Analytics or any third-party advertising/analytics tracker for student activity.

5. Users Under 18 and Parental/Guardian Responsibility

Many of our users are preparing for JEE/NEET and may be under 18 years of age. Because of this, we treat this section as a firm commitment, not a general disclaimer.

• Consent at signup: before an account can be created, the user must affirmatively check a box confirming that they have read and agree to this Privacy Policy and our Terms & Conditions. Signup is technically blocked until this box is checked.
• Where the user is under 18, this consent must be provided by, or with the involvement of, a parent or lawful guardian, and by checking the box the person completing signup confirms they are authorised to do so on the student’s behalf.
• We do not use under-18 users’ personal data for behavioural or targeted advertising, and we do not sell it.
• A parent or guardian may contact us at support@answersheet.in at any time to review, correct, or request deletion of a child’s personal data, or to withdraw consent, and we will act on that request as described in Section 9.

We do not independently verify age or guardianship beyond this checkbox declaration. If you become aware that a child has provided us data without appropriate consent, please contact us and we will investigate and delete the data where required.

6. Cookies and Browser Storage

The application uses essential browser storage — localStorage for login/session persistence and certain account state, and sessionStorage for temporary session data — required for the Services to function. We do not currently use analytics or advertising cookies. Our marketing website may receive security-related cookies set by Cloudflare when its bot-protection features are active. You may block or clear browser storage through your browser settings, though this may log you out or limit functionality.

7. Data Retention

We retain personal data only for as long as reasonably necessary to provide the Services, maintain your account and progress history, operate referrals, meet security/fraud-prevention needs, and comply with legal obligations. Learning and practice history is generally retained while your account remains active. On account deletion, data in our primary application database is deleted subject to Section 8; encrypted backups and infrastructure logs held by our service providers age out according to those providers’ own retention cycles and are not indefinitely retained.

8. Account Deletion

You may request deletion of your account by emailing support@answersheet.in. For your security, we may ask you to verify ownership of the account before acting on the request. We aim to acknowledge deletion requests within 24 hours and complete deletion from our primary application database within 15 days, subject to Section 7 for backups/logs and any legal retention requirement that overrides deletion (for example, an unresolved payment dispute or a legal notice).

9. Your Rights and How to Exercise Them

Subject to applicable law (including the Digital Personal Data Protection Act, 2023), you may request:

• Access to the personal data we hold about you
• Correction or updating of inaccurate or incomplete data
• Erasure of your account and associated personal data
• Withdrawal of consent, where our processing is based on consent
• A summary of the third parties with whom your data has been shared

To exercise any of these rights, email support@answersheet.in with the subject line “Privacy Request”. Withdrawing consent is exactly as simple as giving it — a request by email is sufficient, and we do not impose extra steps beyond identity verification. Withdrawal does not affect processing already carried out before the withdrawal, and may result in your account being restricted or closed if the consent withdrawn was necessary to operate it. We aim to acknowledge every request within 24 hours and resolve it within 15 days.

10. Grievance Redressal

If you have a complaint about how your personal data has been handled, you may write to our Grievance & Privacy Contact below. We will acknowledge your complaint within 24 hours of receipt and endeavour to resolve it within 15 days, in line with the Information Technology Rules, 2021.

Grievance & Privacy Contact
Email: support@answersheet.in
Location: Surat, Gujarat, India

At present this role is handled directly through the above support email rather than by a named Grievance Officer; we will publish a named Grievance Officer as the team grows. If you are not satisfied with our resolution, you have the right to approach the Data Protection Board of India, or such other authority as may be constituted under the Digital Personal Data Protection Act, 2023, or other applicable law.

11. Verification of Requests

To protect your account, we may verify your identity or account ownership before acting on access, correction, deletion or other sensitive requests. We will never ask you to email us your password.

12. Data Security

We apply reasonable technical and organisational safeguards, including HTTPS/TLS encryption, Supabase-managed authentication, mandatory email verification, access-control restrictions, Row Level Security (RLS) on core database tables, environment-variable-based secret management, a private source-code repository, and ongoing monitoring. No system can be guaranteed completely secure, and we continue to improve these measures over time.

13. Security Incidents

If we become aware of a data breach or security incident affecting your personal data, we will investigate, take reasonable steps to contain and mitigate it, and notify affected users and, where legally required, the relevant regulatory authority, within the time and manner required by applicable law.

14. International Processing

Some service providers we rely on (Section 4) operate infrastructure outside India. Where applicable law places conditions on transferring personal data outside India, we intend to comply with those conditions.

15. Disclosure for Legal Reasons

We may disclose personal data where reasonably necessary to comply with applicable law or a valid legal process, respond to lawful government or law-enforcement requests, protect the rights, safety or property of answersheet or our users, or investigate fraud, abuse or security incidents — limited to what is legally required.

16. Third-Party Links

Our Services may link to third-party websites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies separately.

17. Educational Content and Copyright

Questions and educational material on answersheet may be sourced from or based on publicly available examination material. We do not claim ownership of third-party content we do not own, and such material remains subject to the rights of its respective owners.

18. Limitation on Use of This Policy

This Privacy Policy describes our data practices and does not itself create any warranty, guarantee, or contractual promise beyond what is stated in our Terms & Conditions, which govern your use of the Services.

19. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or applicable law. Material changes will be notified through the website or application, and the “Last updated” date will be revised accordingly. Continued use of the Services after such changes constitutes acceptance of the updated Policy.

20. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000, rules made thereunder, and the Digital Personal Data Protection Act, 2023, to the extent applicable. Subject to Section 10 above, courts at Surat, Gujarat shall have exclusive jurisdiction over any dispute arising from this Policy.

Contact Us

answersheet
Privacy & Grievance Contact
Email: support@answersheet.in
Location: Surat, Gujarat, India

Please include enough information for us to identify and verify your request. Do not send your password or other authentication credentials by email.