PrepFly

Privacy Policy

Last updated: 18 June 2026

This Privacy Policy explains how PrepFly, operated by [LEGAL ENTITY NAME] ("we"), collects, uses, and protects your personal data when you use our Service. We process data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023.

1. Data we collect

  • Account data: name, email, phone, password (hashed), role, and centre association.
  • Practice data: your attempts, responses (including audio recordings you submit for scoring), scores, and progress.
  • Payment data: handled by Razorpay; we store transaction status and identifiers, not your full card details.
  • Technical data: IP address, device/browser information, and usage logs for security and reliability.

2. How we use your data

  • to provide practice content, AI scoring, and progress tracking;
  • to process payments and manage subscriptions/seats;
  • to secure the Service (rate limiting, single-session enforcement, fraud prevention);
  • to send transactional emails (verification, password reset, invitations) and, where permitted, important notices.

3. Third-party processors

We share data with service providers only as needed to run the Service:

  • OpenAI — audio/text you submit for AI scoring is sent for processing.
  • Razorpay — payment processing.
  • Hosting & storage — [HOSTING PROVIDER, e.g. Vercel], blob/object storage for media.
  • Email — our transactional email provider.

4. Data retention

We retain account and practice data for as long as your account is active and as required for legal/accounting purposes. You may request deletion (see below).

5. Your rights

You may access, correct, or request deletion of your personal data, and withdraw consent, by contacting us. We will respond within the timeframes required by law.

6. Security

We use industry-standard measures including password hashing, encrypted transport (HTTPS), access controls, and rate limiting. No method is 100% secure, but we work to protect your data.

7. Children

The Service is intended for users aged 16 and above. If you believe a child has provided us personal data without consent, contact us for removal.

8. Changes & contact

We may update this policy; material changes will be notified in-app or by email. For privacy requests, see our Contact page.