Privacy Policy

This policy explains how Govind Dev, trading as YoExam (“we”, “us”), handles personal data collected through https://yoexam.com. It is our notice under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and our privacy policy under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. By creating an account, you consent to the processing described here.

Who is responsible for your data

The Data Fiduciary under the Digital Personal Data Protection Act, 2023 is:

• Name: Govind Dev, trading as YoExam
• Address: Katihar, Bihar 854105, India
• Phone: +91 91353 98057
• Email: contact@yoexam.com

1. What we collect

When you create an account:

• Your name and email address.
• Your target exam (NEET, JEE or CUET) and target year.
• Your password, if you set one. It is stored only as a one-way cryptographic hash, so nobody, including us, can read it. A password counts as sensitive personal data under the 2011 Rules.
• If you choose Sign in with Google, Google shares your name, email address and profile photo with us instead, and we do not receive a password.

As you use the Service:

• The questions you answer, the option you choose, and whether it was right.
• How long your practice sessions and tests take.
• Practice sessions you save to resume later, and tests you build or attempt.
• Questions you bookmark and questions you report.
• Your leaderboard totals and your streak.

Payments: handled entirely by Razorpay. We receive a payment confirmation and reference, and record which plan you bought and when it ends. We never receive or store your card number, UPI PIN, CVV or bank credentials.

If you write to us: the name, email address and message you send through the contact form, linked to your account if you were signed in, so we can answer you and keep a record of the conversation.

Technical data: your IP address, browser and device type, and records of requests to our servers, kept by our hosting and database providers for security and troubleshooting.

What we do not collect: your phone number, postal address, Aadhaar or any other government ID, your location or your contacts. The Service does not need them.

2. Why we use it

• To create and secure your account, and to sign you in.
• To show your progress, accuracy, streak and rank. The Service does not work without this.
• To unlock what your plan includes, and to know when it ends.
• To answer your messages and act on your question reports.
• To keep the Service secure, fix problems and improve the question bank.
• To meet our legal obligations, such as keeping tax records.

We process your data on the basis of the consent you give when you create an account, and for the uses the Act allows without consent, such as complying with the law or a court order. If we ever want to use your data for a new purpose, we will ask you first.

3. Who else handles it

These service providers process data for us, only to provide their service:

• Supabase: our database, sign-in and file storage, hosted in the Asia Pacific (Tokyo) region.
• Razorpay: payment processing, under its own privacy policy and RBI regulation.
• Hostinger: hosts and delivers the website.
• Resend: delivers contact form messages to our support inbox.
• Google: Sign in with Google, if you choose it. NCERT Highlights chapters also open in Google Drive’s viewer, so when you open one, Google receives your IP address and may set its own cookies, under Google’s privacy policy.

Some of these providers store or process data outside India: Supabase in Japan, and Resend and Google in the United States and elsewhere. The Digital Personal Data Protection Act, 2023 permits this except to countries the Government of India restricts, and we will stop any transfer that it restricts. We may also disclose data where the law requires it, or to establish or defend a legal claim.

4. What other students can see

5. How long we keep it

• Account and progress data is kept while your account is open. When you delete your account in Settings, your profile, progress, saved sessions, tests, bookmarks and leaderboard entries are removed from our live database straight away. Copies in our providers’ routine backups expire on their own schedule, and we never restore a deleted account from them.
• Question reports are kept so the question bank can be corrected, but they are unlinked from you when you delete your account.
• Contact form messages are kept for up to 24 months, then deleted. They are the record of our conversation, so deleting your account does not delete them automatically. Ask us and we will delete yours sooner, unless we must keep them, for example for an open payment dispute.
• Payment and tax records are kept for the period Indian tax law requires.
• Technical logs are kept for a limited period for security, and for as long as the law requires.

6. Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

• Ask for a summary of the personal data we hold about you, how we use it, and who we have shared it with.
• Correct, complete or update it. You can edit most of it yourself in Profile.
• Have it erased. Deleting your account in Settings does this straight away.
• Withdraw your consent at any time, as easily as you gave it. Because the Service cannot run without this data, withdrawing consent means deleting your account. It does not affect what we did lawfully before you withdrew.
• Have a complaint handled by our Grievance Officer.
• Nominate someone to exercise these rights for you if you die or become unable to.
• Complain to the Data Protection Board of India, after first raising the matter with our Grievance Officer.

To use any of these rights, email contact@yoexam.com from the address on your account, so we can confirm it is you. We reply within 30 days. If you would like this policy in Hindi or another language listed in the Eighth Schedule to the Constitution of India, ask us and we will provide it.

7. Security

We follow reasonable security practices, as the Information Technology Act, 2000 requires. Traffic is encrypted with HTTPS, passwords are hashed, and access to your data is enforced by rules in the database itself, so one student’s account cannot read another’s. No system is perfectly secure. If a breach affects your data, we will tell you, the Data Protection Board of India and CERT-In as the law requires.

8. Students under 18

Many exam aspirants are under 18, and the law treats anyone under 18 as a child whose data may be processed only with the consent of a parent or lawful guardian. If you are under 18, your parent or guardian must agree to this policy on your behalf before you create an account, and must make any payment.

We use a student’s data only to run the Service and to show them their own progress. We do not show them advertising, target advertising at them, or sell their data. A parent or guardian can write to us at any time to see, correct or delete their child’s data. If we learn that an account belongs to a child whose parent or guardian has not agreed, we may ask for that consent or close the account.

9. Cookies and browser storage

We do not use advertising, analytics or cross-site tracking cookies. We use your browser’s storage only for things the Service needs: keeping you signed in, remembering your light or dark theme, keeping a copy of your profile so the app opens quickly, holding an in-progress test so a refresh does not lose your answers, and storing the app’s own files so it loads fast. Clearing this storage signs you out. Google’s viewer may set its own cookies when you open an NCERT chapter, as section 3 explains.

10. Changes to this policy

We may update this policy, and the date at the top shows the current version. We will announce material changes on the site before they take effect, and by email where they change how we use your data. If a change needs your consent, we will ask for it.

11. Grievance Officer

Questions and complaints about your data go to our Grievance Officer, who acknowledges them within 48 hours and resolves them within one month:

• Name: Govind Dev, Proprietor and Grievance Officer
• Email: contact@yoexam.com
• Phone: +91 91353 98057
• Address: Katihar, Bihar 854105, India