Privacy Policy

1. Introduction

SolvIQ India Pvt. Ltd. ("Company," "we," "us," or "our"), a company incorporated under the Companies Act, 2013, with its registered office in Gandhinagar, Gujarat, India, operates PrepOne — an AI-powered adaptive mock test and exam preparation platform for students.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the PrepOne mobile application ("App"). By accessing or using PrepOne, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the App immediately.

This policy complies with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

2. Information We Collect

2.1 Personal Information You Provide

• Account Registration: Full name, email address, mobile number, date of birth, gender
• Academic Profile: Class/grade, target examination (e.g., JEE, NEET, UPSC), preferred subjects, institution name (if applicable)
• Profile Picture: Optionally uploaded by the user

2.2 Test & Performance Data

• Mock test responses, selected answers, subjective answer text or images
• AI-evaluated scores, partial marks, and detailed feedback generated by our Gemini API-powered evaluator
• Time spent per question, skipped questions, and attempt history
• Adaptive learning data generated by our IRT (Item Response Theory) algorithm, including estimated ability levels (θ scores) and item difficulty calibrations

2.3 Usage & Behavioral Data

• App navigation events, features accessed, and session duration
• Device information: device model, OS version, unique device identifiers
• App version and crash/error reports
• Push notification interaction logs

2.4 Payment Information

• Subscription plan details (Free/Pro/Premium)
• Payment transaction IDs processed through third-party gateways (Razorpay/PhonePe)
• We do not store full card numbers, UPI PINs, or banking credentials. All payment processing is handled by PCI-DSS compliant third-party processors.

2.5 Content You Submit

• Subjective answer text, images of handwritten answers uploaded for AI grading
• Doubt queries submitted to the platform

2.6 Automatically Collected Data

• IP address, approximate location (city/state level only, via IP)
• Firebase Analytics events and crash reports (Crashlytics)
• Session timestamps and app lifecycle data

3. How We Use Your Information

We do not use your personal data for targeted third-party advertising.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

• Cloud Infrastructure Providers: Microsoft Azure, Google Firebase, Cloudflare R2 — for hosting, storage, and CDN delivery
• AI Services: Google Gemini API — for processing and evaluating subjective answers; responses are not retained by Google for model training under our enterprise agreement
• Payment Processors: Razorpay / PhonePe — solely for payment processing
• Analytics Services: Firebase Analytics, Google Crashlytics — for app performance and crash analysis
• Legal Authorities: Law enforcement or government authorities when required by applicable Indian law, court order, or to protect the safety of users

All third-party service providers are contractually bound to process data only as instructed and to maintain appropriate security standards.

5. Data Retention

6. Your Rights Under DPDPA 2023

As a data principal under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access: Request a summary of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal retention obligations)
• Grievance Redressal: File a complaint with our Data Protection Officer (DPO)
• Nomination: Nominate another individual to exercise your rights in case of death or incapacity
• Withdraw Consent: Withdraw consent for any processing activity at any time; withdrawal will not affect prior lawful processing

To exercise any of these rights, contact us at: privacy@solviq.in

7. Children's Privacy

PrepOne is intended for users aged 13 years and above. For users under 18, we require verifiable parental or guardian consent before account creation, in compliance with DPDPA 2023. We do not knowingly collect data from children under 13. If we discover such data has been collected, it will be deleted immediately.

8. Data Security

We implement industry-standard security measures including:

• AES-256 encryption for data at rest on cloud storage
• TLS 1.3 for all data in transit
• Firebase Authentication with secure token management
• Role-based access controls for internal systems
• Regular security audits and vulnerability assessments

Despite these measures, no system is 100% secure. Users are responsible for keeping their login credentials confidential.

9. Cross-Border Data Transfers

Your data may be processed on servers located outside India (e.g., Google and Microsoft cloud infrastructure). All such transfers are subject to Standard Contractual Clauses or equivalent protections as required by DPDPA 2023.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via in-app notification or email at least 15 days before taking effect. Continued use of PrepOne after the effective date constitutes acceptance of the revised policy.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and DPDPA 2023, the details of the Grievance Officer are: