Privacy Policy

Last updated: 12 October 2026

This policy explains what PYQBox collects, why, who processes it on our behalf, how long it is kept and how to delete it. It is written to meet the Digital Personal Data Protection Act, 2023 and the Google Play User Data policy.

PYQBox is operated by PYQBox ("we"). For anything in this policy, write to [email protected].

What we collect

Only what the app needs to work. We do not sell personal data, and we do not use location, contacts, photos, the camera or the microphone.

Sign-in details. With Google: your name, email address, profile photo address and a Google account identifier. With Apple (iPhone): your name and email address, or an Apple relay address, if you allow it. With your phone number or Truecaller: your mobile number, and with Truecaller your name if you allow it. We never see a password.
Profile details you enter: a display name and a short bio.
Your test activity: the papers you start, the answers you choose, your time, scores and per-subject results. This is what the Progress tab charts.
A notification token for this installation, so reminders and updates can reach the device, and your notification preferences.
Advertising data. Google AdMob may collect the device advertising ID, IP address and ad interactions to serve, measure and limit ads. Where consent is required you are asked first, and you can change the choice in Settings.

Why we use it

Each item is used only for the purpose it was collected for.

To sign you in and keep your account secure.
To save your attempts, score them against the answer key and show your results and progress.
To send the notifications you have switched on.
To show ads that keep the app free.

Who processes it

These providers act on our instructions and hold only what their function requires. Data is encrypted in transit (HTTPS).

Google Firebase Authentication: sign-in (Google, Apple, phone number).
Firebase Cloud Messaging: notification delivery.
Supabase: the database holding your profile and test activity.
Truecaller: one-tap phone verification, only if you choose it.
Google AdMob and the Google User Messaging Platform: ads and ad consent.

How long we keep it

Your profile and test activity are kept while your account exists. When you delete your account they are deleted immediately from our live database, together with your sign-in record. Copies in our database provider’s backups are overwritten on its normal backup cycle.

Advertising data is kept by Google under its own policies.

Deleting your account

In the app: Profile, then Settings, then Delete account. This permanently deletes your account, profile, every test attempt and score, and your notification tokens. It cannot be undone.

Without the app: follow the steps at https://pyqbox.netlify.app/delete-account, or email [email protected] from the address or number you signed in with. We delete within 30 days and confirm by reply.

Your rights

Under the DPDP Act you can ask for a summary of the personal data we hold about you, have it corrected or erased, withdraw consent, and nominate someone to exercise these rights for you. Write to [email protected]; we reply within 30 days.

Grievance officer: PYQBox, [email protected]. If you are not satisfied with our response you may complain to the Data Protection Board of India.

You can switch notifications off in Settings or in your device settings, and change your ad consent in Settings at any time.

Children

PYQBox is meant for adults preparing for recruitment exams and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

Changes

If this policy changes materially we will tell you in the app before the change takes effect. The date at the top is the version you are reading.