Privacy Policy

This Privacy Policy explains how BattleExam (“we”, “us”, “our”) collects, uses, shares, and protects information about you when you use the BattleExam website at battleexam.com and the BattleExam Android application (collectively, the “Service”). By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

1. Who we are

BattleExam is an AI-assisted exam preparation platform for Indian competitive examinations including GATE, JEE Main, JEE Advanced, NEET UG, and UGC NET. The Service is operated from India. For privacy-related questions or requests, contact us at support@battleexam.com. We aim to respond within 7 business days.

2. Information we collect

2.1 Information you provide

• Account information. When you sign in with Google, our authentication provider Clerk receives your email address, display name, and profile picture URL from your Google account and shares them with us. We never see or receive your Google password.
• Preferences. Your selected exam (e.g., GATE) and branch (e.g., CSE).
• User-generated content. Notes you write, bookmarks you create, flashcards you save, mistakes you flag, questions you report, and any feedback you submit.

2.2 Information generated by your use of the Service

• Activity data. Questions you attempt, your answers, scores, time spent per question, mock-test sessions, review grades, and progress statistics. We use this to power personalized practice and progress tracking.
• Device and log data. IP address, browser type and version, device model, operating system, app version, screen size, referring URL, and timestamps of activity. This is collected automatically when you use the Service.
• Cookies and similar technologies. Strictly necessary cookies set by Clerk to keep you signed in; functional cookies to remember your theme and preferences; analytics cookies set by Google Analytics 4 and Microsoft Clarity (see Section 3).

2.3 What we do not collect

We do not collect precise location, contacts, calendar, microphone, camera, SMS, or call-log data. The Android app declares only the INTERNET permission required to load content. We do not process payments and do not collect payment-card information.

3. Analytics and product measurement

We use the following analytics services on the website and inside the Android app:

• Google Analytics 4 (Google LLC). Tracks pageviews, referrers, device/browser type, approximate location derived from IP, and in-app navigation events. Google may use this data subject to its own privacy policy. You can opt out using the Google Analytics opt-out browser add-on or by blocking analytics cookies in your browser.
• Microsoft Clarity (Microsoft Corporation). Records pseudonymized sessions including mouse movements, clicks, scrolls, and page interactions to help us understand usability problems. Clarity automatically masks input fields and other sensitive content. Data is processed under Microsoft's privacy statement.

We use these tools only to improve the Service. We do not use them for cross-site advertising or to build advertising profiles.

4. How we use your information

• To authenticate you and keep your account secure.
• To provide and personalize the Service: deliver questions, track progress, generate AI explanations, surface practice recommendations, and remember your preferences.
• To operate real-time features such as mock-test leaderboards.
• To analyze aggregate usage so we can improve features, performance, and accuracy.
• To communicate with you about your account, security issues, or material changes to the Service.
• To detect, prevent, and respond to fraud, abuse, scraping, or violations of our terms.
• To comply with legal obligations.

5. Service providers and third parties we share with

We do not sell your personal information and we do not share it for third-party advertising. We share limited data with the following processors, strictly for the purposes described:

5.1 Authentication and identity

• Clerk, Inc. — sign-in, session management, and user records. clerk.com/privacy
• Google LLC — OAuth provider for sign-in. policies.google.com/privacy

5.2 Hosting, database, and storage

• Vercel Inc. — web application hosting and edge delivery.
• Supabase / PostgreSQL — primary database storing user accounts, attempts, bookmarks, notes, flashcards, and question reports.
• Upstash, Inc. — Redis cache used for leaderboards, rate limiting, and short-lived session state.
• Cloudinary, Ltd. and ImageKit IO Pvt. Ltd. — storage and delivery of images embedded in questions and explanations.

5.3 Real-time features

• Pusher Channels (Pusher Ltd.) — real-time mock-test leaderboard updates. Pusher receives a non-identifying channel name and the leaderboard payload (display name and score) it must broadcast to other participants of the same mock.

5.4 AI explanation and content generation

To generate or improve explanations and practice content, we may send question text (and, where relevant, associated images) to one or more of the following AI providers. The exact provider used depends on availability, cost, and content type, and may change over time. We do not send your name, email, account identifier, or activity history as part of these requests:

• Google (Gemini API / Vertex AI) — privacy policy
• OpenAI, L.L.C. — privacy policy
• DeepSeek — privacy policy
• OpenRouter (router that may route requests to other underlying model providers) — privacy policy

5.5 Legal, safety, and corporate changes

We may disclose information to comply with a lawful request from a competent authority, to enforce our terms, to protect our rights, property, or safety (or those of our users), or to investigate fraud or abuse. If BattleExam is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will notify you of any change in ownership or materially different uses of your data.

6. Legal bases for processing

Where applicable laws require us to identify a legal basis (for example, EU/UK GDPR or India's Digital Personal Data Protection Act, 2023), we rely on:

• Performance of a contract — to provide the Service you have signed up for.
• Legitimate interests — to secure the Service, prevent abuse, improve features, and analyze aggregate usage.
• Consent — for non-essential analytics cookies (where required by your jurisdiction). You can withdraw consent at any time by clearing your browser cookies or using browser-level opt-out tools.
• Legal obligation — to comply with applicable laws, court orders, or regulatory requests.

7. Data retention

We retain your account information and activity data for as long as your account is active. If you delete your account (see Section 8), we permanently delete your personal data and associated content (attempts, bookmarks, notes, flashcards, reports, preferences) from our primary database immediately, and from routine backups within 30 days. Aggregated or de-identified data that cannot reasonably be linked back to you may be retained for analytics and product improvement. Server access logs are retained for up to 90 days for security and abuse-investigation purposes.

8. Your rights and choices

You can, at any time:

• Delete your account and data. Sign in and visit battleexam.com/account, or open the Android app, tap your profile, and choose “Account & deletion”. Deletion is immediate and irreversible. The same URL works from any browser, including after you have uninstalled the app.
• Access or correct your information. Most account details can be updated by signing in. For anything else, email support@battleexam.com.
• Export your data. Email us and we will provide a machine-readable copy of your account data within 30 days, at no cost.
• Object or restrict processing. You may object to specific uses (for example, analytics) by blocking cookies or emailing us. Some processing is necessary to provide the Service — if you object to all processing, we may not be able to continue providing the Service to you.
• Withdraw consent. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing. Deleting your account revokes consent to all processing under this policy.
• Lodge a complaint. If you are in a jurisdiction with a supervisory authority (for example the Data Protection Board of India under the DPDP Act, 2023, or a Data Protection Authority in the EU/UK), you have the right to complain to that authority in addition to contacting us.

9. Children's privacy

The Service is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please email support@battleexam.com and we will delete it promptly.

10. Security

We use industry-standard measures to protect your information, including HTTPS for data in transit, encrypted database connections, hashed and salted credentials at our authentication provider, role-based access controls for internal systems, and audited third-party processors. Authentication credentials are managed by Clerk — we never see or store your Google password. No system is perfectly secure; please use a strong, unique password on your Google account and report any suspected compromise to support@battleexam.com.

11. International data transfers

BattleExam operates primarily in India. Several of our processors (including Clerk, Vercel, Google, Cloudinary, ImageKit, Pusher, Upstash, Microsoft Clarity, OpenAI, DeepSeek, and OpenRouter) may process data in jurisdictions outside India, including the United States, the European Union, and other regions. Where required, we rely on the standard contractual terms or equivalent safeguards published by those providers. By using the Service, you understand and consent to such transfers.

12. Your choices on the Android app

• You can revoke Google sign-in access at any time from your Google Account permissions page.
• You can clear local app data and cache through Android Settings → Apps → BattleExam → Storage. This does not delete your server-side account; use the in-app deletion flow for that.
• Uninstalling the app does not delete your account. To delete your account after uninstall, visit battleexam.com/account from any browser.

13. Do Not Track and Global Privacy Control

Browser “Do Not Track” signals are not currently standardized, and the Service does not change its behavior based on them. We honor cookie blocking and the analytics opt-out mechanisms described in Sections 3 and 8.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date at the top and, where appropriate, notify you in-app or by email. Continued use of the Service after a change constitutes acceptance of the revised policy.

15. Grievance officer / Contact

For privacy questions, data-subject requests, complaints, or notices under India's DPDP Act, 2023, contact our grievance officer at support@battleexam.com with the subject line “Privacy request”. We aim to acknowledge within 72 hours and substantively respond within 30 days.