Privacy Policy

This policy explains what personal data PYQShala (PYQShala) collects and why. It is written to meet India's Digital Personal Data Protection Act, 2023, and the IT Rules. We keep the data we collect to a minimum.

1. What we collect

• Account: your name and mobile number, or your name and email if you use Google sign-in.
• Study data: questions you attempt, whether you got them right, bookmarks and your progress.
• Posts: solutions, comments, votes and reports you submit.
• Usage: anonymous, aggregated page-view statistics (Vercel Web Analytics, which uses no cookies), plus standard server logs for security.

We do not collect payment details, and we never sell or rent your data.

2. Why we use it

• To log you in. Your mobile number receives one-time passwords on WhatsApp.
• To save your progress, bookmarks and revision lists.
• To show your posts, with a short display name such as "Riya S.". Your number is never shown.
• To prevent abuse, fix errors and improve the site.

We will not send you promotional WhatsApp messages unless you separately opt in.

3. Who processes it for us

• Supabase: database and login.
• Meta (WhatsApp Business Platform): delivering your OTP.
• Google: only if you choose "Continue with Google".
• Vercel: hosting and anonymous analytics.

These providers may store data outside India, under their own security and privacy terms.

4. Cookies

We use only essential cookies to keep you logged in. Your theme choice is stored in your browser. There are no advertising cookies.

5. How long we keep it

We keep account and study data while your account exists. If you delete your account, we erase it within 30 days, except where the law requires us to keep it longer. Posts you made are removed or anonymised.

6. Your rights

You can ask to see, correct or erase your data, withdraw consent, or nominate someone to act for you. Email [contact email not set] from your registered details, or mention your registered mobile number. We reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.

7. Children

The site is meant for users aged 18 and over. Users under 18 should use it only with a parent's or guardian's consent. We do not knowingly track or target children.

8. Security and changes

Data is encrypted in transit, and access is restricted by row-level security, so each user can read only their own records. If this policy changes, the date at the top changes too.