Privacy policy

PrepPilot is an independent, free exam-preparation website run by an individual developer in India, who is the Data Fiduciary for your personal data. You can reach us through the Contact page.

• Account data: your name, email address and profile picture from Google sign-in.
• Study settings: chosen exams, target dates and language.
• Content you upload: notes, papers and photos, and the text we extract from them.
• Study activity: questions you ask, quiz and mock test answers, time taken, flashcard reviews and study plans.
• Technical data: basic logs (time, error codes, IP address for rate limiting) kept for security. We never log the text of your documents, your questions or your API keys.
• If you add your own Gemini API key, it is stored encrypted and is never shown back to you or written to logs.

To read your scanned pages, answer your questions and create quizzes, relevant text and page images from your uploads are sent to third-party AI services (for example Google Gemini, Groq or OpenRouter). On free tiers these providers may keep inputs and may use them to improve their models, and their staff may review them.

Please do not upload personal documents such as ID cards, mark sheets or anything with private details. Upload only study material you have the right to use.

We use your data only to provide the service: to show your library, answer your questions from your own notes, score your tests, track your progress and keep the site secure. We do not sell your personal data. We do not use your uploads to train our own models.

Many students preparing for JEE, NEET and similar exams are under 18. If you are under 18, please use PrepPilot with the knowledge and consent of a parent or guardian, as the DPDP Act requires verifiable parental consent for children's data. We do not knowingly track children for advertising: for signed-in users we only show non-personalised ads, and never on study pages. A parent or guardian can ask us to delete a child's account at any time.

We use essential browser storage to keep you signed in and remember your language and consent choice. Some public pages may show Google AdSense ads. By default these are non-personalised ads, which use cookies only for frequency capping, aggregated reporting and fraud prevention. Personalised ads are shown only if you choose them in Cookie settings, which you can change at any time from the footer. Ads are never shown inside tests, the tutor, quizzes, flashcards or the solver.

• Supabase (database, file storage and sign-in) to store your account and files.
• The AI providers listed above, only for the processing you ask for.
• Our hosting providers (for example Vercel and Render or Google Cloud) to run the website.
• Google AdSense on pages that show ads, as described above.
• Authorities, only when Indian law requires it.

We keep your data while your account is active. When you delete your account, your uploads, extracted text, test history and settings are deleted from the live database and file storage at once (a failed file deletion is retried automatically), and from backups within 30 days. Security logs without content (sign-ins, IP address, browser) are kept for 180 days, as Indian cyber-security rules require, and then deleted.

Under the DPDP Act you can access a summary of your data, correct it, withdraw consent, and ask us to erase it. You can download a copy of your data from Settings → Download my data, and delete your account and all your data yourself from Settings → Delete account. You can also nominate another person to exercise these rights for you. For any request, write to us from the Contact page.

Your files are stored in a private bucket and opened only through short-lived signed links. Every database row is protected by row-level security so that only you can read your data. Connections use HTTPS. No system is perfectly secure; if a breach affects you, we will inform you and the Data Protection Board as the law requires.

If you have a complaint about how your data is handled, contact us first through the Contact page; we aim to reply within 7 days. If you are not satisfied, you may complain to the Data Protection Board of India.

If we change this policy we will update the date above and, for important changes, show a notice in the app.