Your data, handled honestly.
This policy explains what personal data PrepHere collects, why we collect it, how we protect it, and the rights you have over it under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).
Last updated: 24 September 2026
1. What data we collect
We collect only what we need to run and improve PrepHere:
- Identity & contact data — your name, email address and phone number, when you join the waitlist, sign up, or contact us.
- Exam & study preferences — the exam you’re preparing for, your target date and daily study hours, so we can build your plan.
- Usage data — pages visited, test attempts and time spent, collected automatically to improve the product.
- Cookies & similar technologies — small files stored in your browser for essential site functions and, with your consent, analytics and marketing. See our cookie banner to manage your preferences at any time.
- Device & technical data — IP address, browser type and device information, collected automatically for security and diagnostics.
2. Why we collect it (purpose)
We only process personal data for clear, specific purposes:
- To create and manage your account and waitlist spot.
- To build and adapt your personalised study roadmap.
- To respond to your questions, requests and grievances.
- To send important updates about your account or our service.
- To analyse and improve site performance and content (only with your cookie consent).
- To meet legal, regulatory and security obligations.
3. How we store and protect it
Your data is stored on secured, access-controlled infrastructure. We apply reasonable technical and organisational safeguards — including encryption in transit, restricted internal access, and regular review of our systems — to protect it against unauthorised access, alteration, disclosure or loss.
We retain personal data only for as long as necessary to fulfil the purposes described above, or as required by law, after which it is securely deleted or anonymised.
4. Who we share it with
We do not sell your personal data. We may share it only with:
- Service providers who help us operate the platform (e.g. hosting and database providers), bound by confidentiality obligations.
- Legal & regulatory authorities, where required by law or to protect our rights, users or the public.
- Successors, in the event of a merger, acquisition or restructuring — with notice to you where required.
5. Your rights
Under the DPDP Act, you have the right to:
- Access the personal data we hold about you.
- Correct or update inaccurate or incomplete data.
- Erase your data, where it’s no longer needed for the purpose it was collected.
- Withdraw consent at any time, without affecting processing carried out before withdrawal.
- Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
- Grievance redressal — raise a complaint if you’re unhappy with how we’ve handled your data.
You can exercise these rights any time from our Data Rights page.
6. How to contact us
For any questions about this policy or your data, write to us at privacy@prephere.in.
7. Grievance Officer
In accordance with the DPDP Act, 2023, the following Grievance Officer has been appointed to address your concerns about how your personal data is processed:
You can also submit a grievance directly through our Data Rights page.