Privacy Policy

• From Google Sign-In: your name, email address, and profile picture (only fields you authorize).
• You generate inside the app: study sets, notes, questions, mock test answers, chat messages in PadhAI Rooms, focus sessions.
• Technical logs: device type, browser, approximate location (city-level via IP), timestamps, and feature usage — to keep the service healthy and improve UX.
• Payment data: handled entirely by Cashfree (PCI-DSS certified). We never see or store your full card number.

• To deliver the features you use (study plans, AI tutor, mock tests, Rooms).
• To send essential account emails (sign-in alerts, payment receipts).
• To prevent abuse and spam in community Rooms (anti-spam + content moderation).
• To measure aggregate, anonymous usage so we know which features matter most.

• We do not sell your data to anyone.
• We do not show third-party ads inside the app.
• We do not train public AI models on your private uploads, notes, or chats.
• We do not share your data with your school, college, or employer.

To run ExamTwin we use a small set of trusted vendors. Each is contractually bound to protect your data:

• MongoDB Atlas / Google Cloud — encrypted storage of your account and content.
• Cashfree — payment processing (India). They handle card numbers; we just see "paid: yes/no".
• OpenAI / Anthropic / Google — AI providers we route prompts to when you use AI features. They process the prompt and return an answer; they don't store it for training under our enterprise agreements.
• Google OAuth — used only for sign-in (no extended scopes).

• Account & content: as long as your account is active.
• Backups: up to 30 days after deletion.
• Payment records: 7 years (Indian tax law).
• System logs: 90 days.

• Export — request a copy of your data anytime.
• Correct — update your name and profile from Settings.
• Delete — delete your account from Settings; we wipe content within 30 days.
• Object — to any specific processing by emailing support.

ExamTwin is intended for students 13 and older. Children under 13 should not sign up. If you believe a child has registered, contact us and we'll remove the account.

All traffic is encrypted in transit (HTTPS / WSS). Passwords are not stored — we use Google OAuth. Sessions are cryptographically signed cookies that expire after 7 days. We follow OWASP best practices for app security.

We'll announce material changes inside the app at least 14 days before they take effect.

Privacy questions? support@examtwin.tech