Privacy Policy
Last updated: 31 October 2026
Who we are
Abhyas is an exam-preparation app for the Madhya Pradesh Public Service Commission (MPPSC) State Service Preliminary Examination, operated by SidGuru Labs (proprietor: Siddant Vardey), Ganesh Chowk, near Chandsi Davakhana, Vardey Family, Chhindwara, Madhya Pradesh 480001, India ("we", "us").
Abhyas is an independent app. It is not affiliated with, endorsed by or connected to the Madhya Pradesh Public Service Commission or any government body.
This policy explains what personal data we process, why, and your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
Data we collect
- Account: your email address or mobile number, and your password (stored only as a secure hash by our authentication provider).
- Profile: the name you give us, target exam and year, preparation stage, education status, district, and your language choices.
- Practice and exams: the tests you start, your answers, when you saved them, scores, results, analytics, bookmarks, error notebook and revision progress.
- Cohort exams: your registration, rank, score, time taken and percentile.
- Purchases: the product, store order ID, purchase status and dates. Payment details (card, UPI, bank) are handled by Google Play; we never receive them.
- Support: messages you send us and our replies, and any purchase or question you link to a request.
- Settings and notifications: reminder preferences and the notifications we create for you.
We do not collect your location, contacts, photos or advertising ID, and the app has no third-party advertising or analytics trackers.
Why we use it
- To create and secure your account and verify your email or mobile number.
- To run tests, enforce exam deadlines, score attempts and show your results and analytics.
- To give you the features you are entitled to (free tests, purchases, Premium).
- To run cohort exams and publish their results and leaderboards (see below).
- To send the reminders and notifications you have chosen, and service messages about your account and purchases.
- To answer support requests and fix errors in questions.
- To meet legal obligations such as tax and accounting records.
We process your data on the basis of your consent, which you give when you create an account and accept this policy, and where the law allows processing for legitimate uses (for example, a purchase you asked for, or a legal requirement).
Cohort exam leaderboards: your full name is shown
When you register for a cohort (live) exam and results are published by our team, the leaderboard shows the top 50 participants with their full name (the name in your profile), rank, score and time taken. Any signed-in Abhyas user can see a published leaderboard.
Only you can see your own percentile and detailed breakdown. If your profile has no name, you are shown as "Aspirant".
If you do not want your name shown, change the name in your profile before results are published, or do not register for cohort exams. There is currently no separate option to hide your name.
Who we share it with
We do not sell your personal data. We share it only with service providers who process it for us under contract:
- Supabase: database, authentication and hosting (India (Mumbai)).
- Google Play: payments and subscriptions.
- Our email and SMS providers: to send verification and password-reset codes.
- Expo: delivering app updates and, when enabled, push notifications.
We may disclose data when required by law, a court order or a government authority with legal power to ask for it.
How long we keep it
We keep your data while your account exists. When you delete your account (Profile → Delete account), we delete your profile, attempts, results, notebook, notifications, support requests, cohort registrations and leaderboard entries straight away.
Purchase records are kept for 8 years for tax and accounting law, with your identity removed (no link to you, your email or your number). After that they are deleted.
Copies in our providers' backups are overwritten on their normal backup cycle.
Your rights
Under the DPDP Act you can:
- see a summary of the personal data we hold about you and how we use it;
- correct or update it (most of it you can change in the app);
- delete it, by deleting your account in the app or by asking us;
- withdraw consent at any time (this means closing your account, because we cannot run it without the data above);
- nominate someone to exercise these rights if you die or become unable to;
- raise a grievance with us, and, if not resolved, complain to the Data Protection Board of India.
To use these rights, email our Grievance Officer at [email protected] (Siddant Vardey). We will reply within the time the law requires.
Security
Data is encrypted in transit. Passwords are stored as secure hashes. Database access is restricted by row-level security so each student can read only their own data. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board as the law requires.
Age
Abhyas is for people aged 18 or older. We do not knowingly process data of anyone under 18. If you believe a child has created an account, contact us and we will delete it.
Changes and contact
If we change this policy we will update the date above and ask you to accept the new version in the app.
Questions: [email protected]. Grievances: [email protected] (Grievance Officer: Siddant Vardey).
This policy is available in English and Hindi. If the two differ, the English version applies.