Privacy Policy
This Privacy Policy describes how {{LEGAL_ENTITY_NAME}}("we", "us", or "our"), operating the Apna Rank platform ("Platform"), collects, uses, stores, and protects your personal data. Our registered address is {{REGISTERED_ADDRESS}}.
1. Data We Collect
We collect the following categories of personal data when you register for and use the Platform:
| Category | Data Points | Purpose |
|---|---|---|
| Identity | Name, date of birth (DOB), username | Account creation, age verification, personalisation |
| Contact | Phone number, email address | Login identifier, transactional communications |
| Exam-prep activity | Test responses, scores, mistake classifications, analytics, exam selections, daily action plan progress | Diagnostic analytics (Mistake DNA, Strategy Score), personalised action plans |
| Technical | Device type, browser type, IP address, session data | Security, debugging, service improvement |
2. How We Use Your Data
- Providing the service: Authenticating your account, generating diagnostic analytics (Mistake DNA, Strategy Score), and delivering personalised daily action plans.
- Communication: Sending transactional messages (OTPs, account notifications) via email.
- Improvement: Analysing aggregated, anonymised usage patterns to improve the Platform.
- Legal compliance: Fulfilling obligations under applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act).
3. Consent Basis & Withdrawal
- We process your personal data on the basis of your informed consent, provided when you create your account and agree to our Terms & Conditions. For Minors, consent is provided by their parent or guardian via our verified consent flow.
- You may withdraw your consent at any time by requesting account deletion via our support channel (see Section 7 below). Withdrawal of consent does not have its own automated path; it is handled by the account deletion process. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
- Upon consent withdrawal (via account deletion), we will cease processing your personal data and delete it in accordance with our retention policy, subject to any legal obligations requiring continued retention.
4. Children's & Minors' Data
In accordance with the DPDP Act, 2023:
- Users under 18 years of age require verifiable parental or guardian consent before their account is activated. Our platform implements an OTP-based guardian consent flow for this purpose.
- We do not engage in behavioural tracking, profiling, or targeted advertising directed at children.
- We do not undertake any processing of a child's personal data that is likely to cause any detrimental effect on the well-being of the child.
- We collect only the minimum data necessary to provide exam-preparation services to Minors.
- A parent or guardian may request access to, correction of, or deletion of their child's data at any time (see Section 8 below).
5. Third-Party Data Processors
We share your data with the following categories of third-party service providers, solely for the purposes described:
| Category | Purpose |
|---|---|
| Transactional email provider | Sending account-related emails |
| Cloud hosting / database provider | Hosting the Platform and storing data securely |
| Error monitoring service | Detecting and diagnosing application errors to maintain service quality |
We do not sell, rent, or trade your personal data to any third party.
Cross-border data transfer: Some of our third-party processors may process or store data on servers located outside India. Where this occurs, we ensure appropriate safeguards are in place, consistent with the requirements of the DPDP Act and any rules notified by the Central Government regarding permissible jurisdictions.
6. Cookies & Session Data
- We use essential cookies and session tokens to authenticate you, remember your theme preference, and maintain your login session.
- We do not use advertising cookies or third-party tracking cookies.
- You can clear cookies through your browser settings, but doing so may require you to log in again.
7. Data Retention & Deletion
- We retain your personal data for as long as your account is active or as needed to provide you with the Platform's services.
- Account deletion: You may request deletion of your account by emailing support@apnarank.com. Deletion is a manual process; upon receiving a valid request, we will delete or anonymise your personal data within 30 days, except where retention is required by law or for resolving disputes. Once processed, changes may take up to 15 minutes to fully propagate.
- Aggregated, anonymised data (which cannot identify you) may be retained indefinitely for analytics and improvement purposes.
8. Your Rights Under the DPDP Act
Under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to access — Request a summary of the personal data we hold about you and the processing activities we perform.
- Right to correction — Request correction of inaccurate, incomplete, or misleading data, and request erasure of data no longer necessary for the purpose for which it was collected.
- Right to erasure — Request deletion of your personal data, subject to legal retention requirements.
- Right to grievance redressal — File a complaint with our Grievance Officer (see Section 9 below) if you believe your data has been mishandled.
- Right to nominate — Nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
How to exercise your rights:
All DPDP exit paths (access, correction, erasure, and withdrawal of consent) are manual processes. Email us at support@apnarank.com or contact the Grievance Officer below to initiate a request. We will acknowledge your request within 48 hours and respond substantively within 30 days of receipt. Once processed, changes may take up to 15 minutes to fully propagate.
9. Grievance Officer
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the details of the designated Grievance Officer are:
If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India as established under the DPDP Act, 2023.
10. Security & Breach Handling
- We implement industry-standard technical and organisational measures to protect your data, including encrypted data transmission (HTTPS/TLS), secure server infrastructure, and access controls.
- However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
- Breach notification: In the event of a personal data breach that is likely to cause harm to you, we will notify the Data Protection Board of India and affected users without unreasonable delay, in accordance with the DPDP Act.
11. Automated Decision-Making
The Platform uses algorithms to generate diagnostic analytics including Mistake DNA, Strategy Score, Confidence Calibration, readiness percentage, and public readiness rank. These are informational tools only and do not produce any decision that has a legal or similarly significant effect on you. Note that readiness rank is published under your name, but no automated decision-making process on the Platform restricts your access, determines eligibility, or creates legally binding consequences based on these metrics.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will make reasonable efforts to notify you (e.g. via a banner on the Platform or an email notification). Continued use of the Platform after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.
13. Contact
If you have questions about this Privacy Policy, contact us at support@apnarank.com or visit our Support page.