Privacy Policy
Last updated: February 2026
JoyOfExams ("we", "us", "our") is committed to protecting the privacy of our users, including students and their parents or guardians. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use joyofexams.in ("the Service").
This policy complies with the Digital Personal Data Protection Act, 2023 (DPDPA) of India and other applicable data protection laws.
1. Information We Collect
1.1 Information You Provide
- Registration data: Full name, mobile number, board, class. Parent/guardian name and email if provided.
- Profile data: School name, city/town, username.
- Payment data: Payment transactions are processed by Razorpay. We do not store credit card or bank account numbers on our servers. We retain transaction IDs, plan details, and payment status for billing records.
- User-generated content: Study notes, bookmarks, content reports, and feedback you submit.
- Communication data: Messages to our support team.
1.2 Information Collected Automatically
- Learning data: Quiz scores, study time, module progress, question attempts, mastery levels, and achievement data.
- Usage data: Pages visited, features used, session duration, and interaction patterns.
- Device data: Browser type, operating system, device type, screen resolution, and IP address.
- JOE AI interactions: Questions asked and responses received for quality improvement and safety monitoring.
2. How We Use Your Information
We use your information for the following purposes:
- Provide the Service: Deliver study materials, practice questions, AI tutoring, and progress tracking.
- Personalise learning: Adapt content difficulty, generate study plans, and recommend revision based on your mastery data.
- Communicate: Send OTP for login, subscription reminders, study nudges, and important updates via SMS and email.
- Process payments: Handle subscription billing, refunds, and coupon redemptions via Razorpay.
- Improve the Service: Analyse anonymised usage data to improve our content, features, and AI models.
- Safety & security: Detect abuse, enforce usage quotas, and maintain platform integrity.
- Parent reporting: Provide progress reports and analytics to linked parent accounts.
3. Data Sharing & Third Parties
We do not sell your personal information. We share data only with the following service providers, strictly for operating the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Razorpay | Payment processing | Transaction details, email |
| MSG91 | SMS / OTP delivery | Mobile number |
| Microsoft Azure | Cloud hosting & storage | All service data (encrypted) |
| Sentry | Error monitoring | Error logs, device info |
| Azure Application Insights | Performance monitoring | Usage telemetry (anonymised) |
We may also share information if required by Indian law, court order, or government authority.
4. Cookies & Local Storage
We use cookies and browser local storage for:
- Essential cookies: Authentication tokens, session management. Required for the Service to function.
- Preference cookies: Theme selection (Balance/Hype/Focus), UI preferences.
- Analytics: Anonymised usage patterns to improve the Service.
We do not use third-party advertising cookies or tracking pixels. You can clear cookies via your browser settings, but this will require you to log in again.
5. Data Security
We implement industry-standard security measures to protect your data:
- All data in transit is encrypted using HTTPS/TLS.
- Passwords are hashed using bcrypt with salt rounds.
- Database access is restricted and monitored.
- OTP codes expire after 10 minutes and are limited to 3 per day per phone number.
- Payment processing is handled entirely by Razorpay (PCI DSS compliant); we never store card details.
While we take every reasonable measure to protect your information, no internet transmission is 100% secure. You are responsible for keeping your login credentials confidential.
6. Data Retention
We retain your personal data for as long as your account is active. If you request account deletion:
- Your personal information (name, email, phone) is deleted or anonymised within 30 days.
- Anonymised learning data (for aggregate analytics) may be retained indefinitely.
- Payment records are retained for 1 year after account deletion for tax and legal compliance.
- Audit logs and security records are retained for 1 year.
7. Children's Privacy
JoyOfExams is designed for CBSE Class 10 students, typically aged 14-16. We take children's privacy seriously and comply with the DPDPA 2023 provisions for minors.
- We collect only the minimum data necessary to provide the educational Service.
- We do not display targeted advertising to users.
- Parents or guardians can review their child's data, request corrections, or request deletion at any time.
- JOE AI is bounded to educational content and will not engage with non-academic topics.
8. Your Rights (Under DPDPA 2023)
As a data principal under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access: Request a summary of your personal data held by us.
- Correction: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data (subject to retention requirements).
- Grievance redressal: Contact our Grievance Officer for data-related concerns.
- Nomination: Nominate an individual to exercise your data rights in case of death or incapacity.
To exercise these rights, email us at support@joyofexams.in with the subject line "Data Rights Request." We will respond within 30 days.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 15 days before taking effect. The "Last updated" date at the top reflects the most recent revision.
10. Contact Us
For privacy-related questions or to exercise your data rights:
- Email: support@joyofexams.in
- Website: joyofexams.in