Privacy policy
Last updated
This policy explains what personal data Kalvikarai collects when you use our website or app, why we collect it, who we share it with, and the rights you have. Kalvikarai is responsible for your personal data under India’s Digital Personal Data Protection Act, 2023.
The short version
- We collect only what we need to run Kalvikarai and help you prepare.
- We don’t sell your data. We don’t show ads, and we don’t use analytics or tracking tools.
- Your OMR sheet photos are used only to score that sheet, and we delete them within days.
- You can see, correct or delete your data at any time.
What we collect
When you create an account
- Your name, email address and password. We store your password in encrypted form and can never see it.
- If you sign in with Google: your name and email address from your Google account. We don’t get your Google password.
- Your language settings.
When you practise as a guest
We create a guest profile linked to a random ID stored in your browser. It holds your practice history, bookmarks and stats until you sign up. It doesn’t include your name or email. If a guest profile isn’t used for 60 days, we delete it.
When you use Kalvikarai
- Your study activity: the questions you answer, your practice sessions, mock tests, scores, bookmarks, stats and daily challenge results
- OMR sheets you upload: photos or a PDF of your shaded answer sheet, and the answers you confirm
- Question reports: the reason you choose and any note you write
To keep your account safe
- Device information: a random device ID, your browser type, your IP address and when each device was last active
We use this to show you which devices are signed in, to let you sign them out, and to spot unusual activity such as a shared or stolen account.
When you buy a plan
- Payment records: the plan, the amount, the date, and the order and payment IDs from Razorpay
We never see or store your card, UPI or bank details. You enter them directly with Razorpay.
Why we use your data
| What we do | Data we use |
|---|---|
| Run your account and sign you in | Account details, device information |
| Save your progress and show your history, stats and results | Study activity |
| Read and score your OMR sheets | OMR uploads |
| Fix problems with questions | Question reports |
| Take payments and activate your plan | Payment records |
| Keep accounts secure and enforce our terms of use | Device information |
| Send emails you need, such as password resets, payment confirmations and important notices | Email address |
| Meet legal duties, such as tax and accounting records | Payment records |
We only send emails that you need in order to use the service. We don’t send marketing emails.
Your OMR sheets
- We use your OMR sheet only to read and score that sheet. We don’t use it to train or improve any system.
- The sheet is read by Sarvam AI, an Indian AI company. Sarvam AI processes the image only to read your answers for us, and doesn’t use it to train its AI models.
- We delete your OMR photos and PDFs:
- 7 days after you submit the mock test
- 30 days after upload, if the mock test is never submitted
- Your confirmed answers and score stay in your history.
Who we share your data with
We share your data only with these service providers, and only what each one needs to do its job for us:
| Provider | What it does | What it gets |
|---|---|---|
| Razorpay | Processes payments | Payment details you enter with Razorpay, the amount, your email |
| “Continue with Google” sign-in | Only what’s needed to confirm it’s you | |
| Sarvam AI | Reads OMR sheets | Your OMR photos or PDF |
| Our hosting provider | Runs our servers and stores our data | All the data described in this policy |
| Our email service | Sends password resets and service emails | Your name and email address |
We may also share data if the law requires us to, for example with a court or government authority, or to protect Kalvikarai, our users or the public from fraud or harm.
If Kalvikarai is ever sold or merged with another company, your data may move to the new owner, and this policy will keep protecting it.
We never sell your personal data.
Data stored in your browser
We don’t use cookies to track you. We use your browser’s own storage to keep:
- Your sign-in, so you stay signed in
- A random device ID
- Your language and display settings
- Which banners you’ve dismissed
You can clear this at any time in your browser settings. You’ll then be signed out, and a guest’s progress on that device will be lost.
How long we keep your data
| Data | How long |
|---|---|
| Account details and study activity | Until you delete your account |
| Guest profiles | Deleted after 60 days without use |
| Device information, including IP addresses | Until that device is signed out |
| OMR photos and PDFs | 7 days after you submit the mock test, or 30 days after upload if it’s never submitted |
| Payment records | At least 8 years, as Indian tax and accounting law requires, even after you delete your account |
When you delete your account, we erase your personal data after 30 days. Signing in again before then cancels the deletion. The exception is payment records, which we must keep by law. Copies in our backups are deleted automatically as the backups expire.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- See what personal data we hold about you and how we use it
- Correct or update your data. You can change your name and password in Profile.
- Delete your data. You can delete your account from Profile at any time, or ask us to delete it.
- Withdraw your consent. We then stop using your data, which means closing your account.
- Nominate someone to use these rights for you if you die or can’t act for yourself
- Complain to our grievance officer. If you’re not happy with the answer, you can complain to the Data Protection Board of India.
To use any of these rights, email support@kalvikarai.com from the email address on your account.
Age
Kalvikarai is for people 18 or older. If we find out that someone under 18 has created an account, we will delete it.
Keeping your data safe
All data travels over encrypted connections (HTTPS). Passwords are stored in encrypted form, and only people who need it to run Kalvikarai can access your data. No system is perfectly secure, but if a breach affects your data, we will tell you and the Data Protection Board as the law requires.
Changes to this policy
We may update this policy. The date at the top shows when it last changed. If a change is important, we will tell you in the app or by email before it applies.
Contact and grievance officer
For any question about your privacy, email support@kalvikarai.com.
Grievance officer: Sahaya Jenith Lizy, support@kalvikarai.com. We acknowledge complaints within 48 hours and aim to resolve them within one month.