Privacy Policy

Welcome to TestprepKart ("we", "our", "us"). We operate the TestprepKart NEET NRI Prep mobile application ("App") and the website at www.testprepkart.com (collectively, the "Services"). We are committed to protecting your personal information and your right to privacy.

This Privacy Policy applies to all users of our Services, including students, parents, guardians, and NRI families who access our NEET coaching, eligibility tools, course content, and counselling services from anywhere in the world.

TestprepKart is incorporated under the laws of India. Our registered address is TestprepKart Pvt. Ltd., Noida, Uttar Pradesh, India. For privacy-related concerns, please contact our Data Protection Officer at privacy@testprepkart.com.

We collect information you provide directly to us, information collected automatically through your use of the App, and information from third-party sources. The categories of personal data we collect include:

• Account Registration: Full name, email address, mobile phone number, password, and profile photo when you create an account.
• Student Profile: Student name, class/grade (e.g., Class 11 or 12), target exam year, current school name, and country of residence.
• NRI Information: Country of residence, passport nationality, visa type (e.g., dependent visa, work permit), NRI sponsor details, and OCI/PIO card status used for our NRI Eligibility Checker.
• Parent/Guardian Information: Parent or guardian name, relationship to student, email address, and contact number when provided during account setup.
• Payment Information: Billing name, billing address, and payment method details (we use third-party payment processors and do not store full card numbers on our servers).
• Communications: Messages you send to our academic team or counsellors through the in-app messaging feature, feedback, and support requests.
• Academic Data: Self-reported marks, mock test scores, chapter completion status, and responses to the Expected NEET Score assessment questionnaire.
• Documents: Copies of documents you voluntarily upload for eligibility verification, such as passport copies, school certificates, or visa documents. These are used solely for the purposes you upload them.

• Device Information: Device model, operating system version, unique device identifiers (UDID / Android ID), mobile network carrier, and screen resolution.
• Usage Data: Pages and features accessed, time spent on each section, courses viewed, content bookmarked, notifications opened, and session duration.
• Log Data: IP address, browser type (for web access), crash reports, error logs, and timestamps of all actions.
• Location Data: Approximate country/region-level location inferred from your IP address. We do not collect precise GPS location unless you grant explicit permission.
• Analytics Data: Aggregated behavioural data used to understand how users interact with features, including funnel analysis, retention rates, and feature adoption.

• Social Login: If you sign in via Google, we receive your name, email address, and profile picture as authorised by you through that platform.
• Payment Processors: Transaction confirmation details from Razorpay, Stripe, or other payment gateways — not full card details.
• Analytics Providers: Aggregated and anonymised data from Firebase Analytics and similar tools.

We use the information we collect for the following purposes, always based on a lawful basis under applicable data protection laws including India's Digital Personal Data Protection Act 2023 (DPDPA) and, where applicable, GDPR:

• Creating and managing your account and student profile.
• Delivering NEET coaching content, live classes, recorded sessions, and mock tests as per your enrolled course.
• Operating the NEET Exam Day Countdown tracker, subject-wise progress tracking, and phase-based study planner.
• Running the NRI Eligibility Checker and generating your eligibility verdict and PDF report.
• Facilitating communication between students, parents, and our academic counselling team.
• Processing course enrollments, payments, and issuing digital receipts.
• Sending session confirmations, reschedule notifications, and booking reminders via push notifications, SMS, and email.

• Personalising your study dashboard with phase-appropriate recommendations based on your days remaining and chapter completion data.
• Generating your Expected NEET Score analysis and improvement roadmap.
• Recommending relevant courses, content articles, and videos based on your grade and preparation level.
• Improving our App features, fixing bugs, and developing new tools based on aggregated usage analytics.

• Sending transactional emails about your account, bookings, and course access.
• Sending promotional communications about new courses, offers, and NEET updates — only with your consent, which you can withdraw at any time.
• Sending push notifications for session reminders, new content, and app updates.

• Detecting, preventing, and addressing fraud, abuse, or security incidents.
• Complying with applicable laws, regulations, and government orders.
• Enforcing our Terms of Service and other legal agreements.
• Protecting the rights and safety of our users, staff, and third parties.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your data only in the following limited circumstances:

We engage trusted third-party companies to perform functions on our behalf. These partners are contractually obligated to handle your data only for the specified purpose and in compliance with applicable laws:

Your academic profile, NRI eligibility results, Expected NEET Score assessment, and in-app messages are accessible to our internal academic counsellors and team members who need this information to provide you with coaching and guidance. All staff are bound by confidentiality agreements.

We may disclose your information if required to do so by law, regulation, court order, or government authority — including regulatory bodies in India such as the NCPCR or MCI-equivalent authorities in the context of medical education compliance.

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice in the App before your data is transferred and becomes subject to a different privacy policy.

Your data is stored on secure cloud infrastructure provided by Amazon Web Services (AWS) and/or Google Cloud Platform, with primary servers located in India (Mumbai region) in compliance with India's data localisation requirements. Certain non-sensitive analytics data may be processed on servers in the United States or European Union through our third-party service providers, subject to appropriate data transfer safeguards.

We implement industry-standard security measures to protect your personal data against unauthorised access, loss, misuse, or alteration:

• Encryption at Rest: All personal data stored in our databases is encrypted using AES-256 encryption.
• Encryption in Transit: All data transmitted between your device and our servers uses TLS 1.2 or higher (HTTPS).
• Access Controls: Strict role-based access controls ensure only authorised personnel can access sensitive user data.
• Authentication: We support multi-factor authentication (MFA) for account security.
• Penetration Testing: Regular third-party security audits and penetration testing of our infrastructure.
• Data Minimisation: We collect only the minimum data necessary for the stated purpose.
• Incident Response: We maintain an incident response plan and will notify affected users within 72 hours of becoming aware of a material data breach, as required by DPDPA 2023.

Our website and web-based features of the App use cookies and similar tracking technologies to enhance your experience, analyse usage patterns, and improve our services.

You can control cookies through your browser settings or through our cookie preference centre on the website. Disabling essential cookies may prevent certain features from functioning correctly. The TestprepKart mobile App uses Firebase SDK analytics — you can opt out of analytics tracking through your device settings (iOS: Settings > Privacy > Analytics; Android: Settings > Google > Ads).

TestprepKart is primarily designed for students preparing for NEET, who are typically between 14 and 19 years of age. We recognise our heightened responsibility when collecting data from minors.

For users under the age of 18, we require verifiable parental or guardian consent before account creation and before collecting any sensitive information. During registration, users below 18 must confirm that a parent or guardian has reviewed and agreed to this Privacy Policy on their behalf.

• Parents or guardians may request to review, correct, or delete their child's personal information at any time by contacting us at privacy@testprepkart.com.
• Parents may withdraw consent for data processing for their child's account. Note that withdrawing consent may limit or terminate access to the Services.
• We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided data without parental consent, we will promptly delete that data.

Depending on your location, you have the following rights regarding your personal data. We will respond to all verified requests within 30 days (or as required by applicable law).

TestprepKart serves NRI students residing across the globe, including the United States, United Arab Emirates, United Kingdom, Saudi Arabia, Canada, Australia, and other countries. If you are accessing our Services from outside India, please be aware of the following:

Your personal information may be transferred to and processed in countries other than the country in which you reside. These countries may have different data protection laws. When transferring data internationally, we rely on appropriate safeguards including:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to/from the EU/EEA.
• The UK International Data Transfer Agreement (IDTA) for transfers involving UK residents.
• Adequacy decisions where applicable.
• Binding Corporate Rules or equivalent transfer mechanisms for other jurisdictions.

Our App and website may contain links to third-party websites, videos, and resources (such as YouTube content, external college websites, and NTA/NMC official pages). This Privacy Policy does not apply to third-party services.

• We are not responsible for the privacy practices of third-party websites or services linked from within our App.
• Live classes may be conducted via Zoom or Google Meet. Please review Zoom's Privacy Policy and Google's Privacy Policy before participating, as these platforms have their own data practices.
• Payment processing is handled by Razorpay and/or Stripe. Your financial data is governed by their respective privacy policies and PCI-DSS compliance standards.
• We use YouTube embeds for educational video content. YouTube's privacy policy (governed by Google) applies to any video playback.
• If you use the "Sign in with Google" option, Google's Privacy Policy governs the data shared during that authentication process.

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When your data is no longer needed, we will securely delete or anonymise it so that it can no longer be associated with you. You may request early deletion of your account and associated data at any time, subject to our legal retention obligations.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page and in the App's legal section.
• Send you an in-app notification and/or email to your registered address at least 14 days before the changes take effect.
• For material changes affecting your rights, ask for your renewed consent where legally required.
• Maintain a version history so you can review previous versions of this policy.

Your continued use of the Services after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using the Services and may request account deletion.

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us through any of the following channels. We are committed to resolving all privacy-related concerns promptly and fairly.

This Privacy Policy was last updated on June 1, 2026 and is effective from that date.
© 2026 TestprepKart Pvt. Ltd. All rights reserved.