Privacy Policy

Last updated: July 2026

1. Who We Are

PYQBase ("we", "us", "our") is an educational platform helping students prepare for competitive examinations. Our registered email for privacy matters is privacy@pyqbase.com.

2. What We Collect

  • Account data: Email address, hashed password (managed by Supabase Auth).
  • Usage data: Questions attempted, answers selected, time taken, SRS review history.
  • Device data: Browser fingerprint (anonymous canvas hash) used solely for free-tier quota enforcement. Not linked to identity.
  • Payment data: Handled entirely by our payment processor. We do not store card details.

3. Why We Use It

  • To personalise your study experience (SRS, ELO-based difficulty).
  • To enforce fair-use quotas under the freemium model.
  • To send you daily SRS reminder emails (you may unsubscribe at any time).
  • To diagnose errors via Sentry (anonymised stack traces).

4. Retention

We retain your data for the duration of your account. If you delete your account, your data is soft-deleted and permanently erased after 30 days. You may request immediate erasure by emailing us.

5. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, you have the right to:

  • Access your data — use the "Export My Data" button in Settings.
  • Correct inaccurate data — contact us at privacy@pyqbase.com.
  • Erase your data — use "Delete Account" in Settings (30-day reactivation window applies).
  • Withdraw consent — you may delete your account at any time.

6. Data Export

You can request a full JSON export of your attempts, SRS state, and mock tests from the Settings page. The export will be emailed to your registered address within 72 hours.

7. Cookies & Tracking

We use only strictly necessary cookies (Supabase Auth session). We do not use advertising cookies or third-party tracking pixels.

8. Third-Party Services

  • Supabase — authentication and database (EU/US data residency).
  • Resend — transactional email delivery.
  • Sentry — error monitoring (anonymised).
  • Vercel — frontend hosting.
  • Railway — backend hosting.

9. Changes

We will notify you of material changes to this policy via email at least 14 days before they take effect.

10. Contact

For any privacy queries, write to privacy@pyqbase.com.