Privacy Policy

This privacy policy explains what data Kerala PSC Prep ("we", "us", "the service") collects, how it is used, and the third-party services we rely on. The policy applies to:

• The website at keralapscstudymaterialandexam.com
• The Android app distributed via Google Play (which is a wrapper around the website)
• Any subdomain or short-link we operate (e.g. keralaprep.com)

1. What we collect

1.1 If you do not sign in

You can browse the site, take topic quizzes, preview the first 8 questions of any mock test, and read all current-affairs and study notes without creating an account. In that case, no personal data is collected by us. We do not use cookies for tracking.

1.2 If you sign in

Sign-in is optional and can be done through Google or email/password. When you sign in we store, in our Firebase backend:

• Your email address
• Your display name (from Google profile, if you used Google sign-in)
• Quiz attempts and scores (so you can see your progress)
• Mocks you have unlocked or earned (free unlocks via the 3-quizzes-per-credit flow)
• Date your account was created and last activity timestamps

We do not collect your phone number, address, location, contacts, photos, or any other on-device data. The Android app requests no special permissions.

1.3 If you make a payment

Premium access (₹500 / 2 years) is processed by Razorpay. We never see or store your card number, UPI ID, or banking credentials — those are handled entirely on Razorpay's PCI-DSS-compliant servers. We receive only:

• A confirmation that payment succeeded
• The Razorpay payment ID (so we can support refund / dispute requests if needed)
• The amount paid and the date

This data is stored in your Firebase user record and used only to keep your premium status active.

2. How we use the data

• To provide the service: show your scores, track which mocks you've unlocked, recognise you across sessions.
• To improve the service: identify which study material is helping aspirants (anonymised aggregate stats only).
• To process payments: activate your premium access after Razorpay confirms a successful payment.
• To respond to support requests: if you email us, we'll use your email solely to reply.

We do not sell or rent your data to anyone. We do not serve ads inside the app or on the website to logged-in users.

3. Third-party services we use

Service	Purpose	Data shared
Google Firebase (Auth + Firestore)	User accounts and progress storage	Email, display name, scores
Razorpay	Payment processing	Email + amount only — never card details
Cloudflare	Website hosting and CDN	IP address (transient, for security and rate-limiting)
Google Analytics 4	Aggregate site usage (page views, sources)	Anonymised — no personal identification
Google Search Console	SEO performance tracking	Aggregate impressions and clicks only

4. Children's privacy

The service is intended for Kerala PSC aspirants, who are typically 18 years of age or older. We do not knowingly collect data from children under 13. If you believe a child has created an account, please contact us and we will delete it.

5. Data retention

• Your account data is kept as long as your account exists.
• If you delete your account (request via email), we delete your record within 30 days, except where law requires us to retain payment records (Razorpay's standard retention applies — typically 7 years for tax compliance).
• Anonymous analytics data is retained per the third-party service's standard policy.

6. Your rights

• Access: see what data we hold about you — email [email protected] and we'll respond within 30 days.
• Correction: ask us to fix any incorrect information.
• Deletion: ask us to delete your account and associated data.
• Refund: see our refund policy on the refund page.

7. Security

All data in transit is encrypted via HTTPS. Firebase databases are protected by security rules that prevent users from reading other users' data. Payment data is handled entirely by Razorpay's PCI-DSS-compliant infrastructure.

8. Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected on this page with a new "Last updated" date. Continuing to use the service after a policy change means you accept the updated terms.

9. Contact

Questions, requests, or complaints: [email protected]

10. Android app — Google Play data safety declarations

For the Google Play data safety form, the Kerala PSC Prep Android app:

• Collects: email address, name (if provided), app activity (quiz scores, mocks unlocked), purchase history (only confirmation that you paid).
• Does NOT collect: location, contacts, files, photos, microphone audio, camera images, calendar, SMS, call logs, or any on-device sensor data.
• Does NOT share user data with third parties for advertising, analytics outside Google's own services, or any other purpose.
• Encrypts all data in transit (HTTPS).
• Provides account deletion on request.