TestCraft-ai — Privacy Policy

When you use the TestCraft-ai app and website, we collect the following categories of personal and sensitive data:

• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.
• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.
• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.
• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).
• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.

TestCraft-ai processes your information only for these purposes:

• To deliver the courses, live classes, notes and mock tests you have access to.
• To create, secure and maintain your account.
• To meet our legal, tax and accounting obligations.
• To detect and prevent fraud, abuse and policy violations.
• To respond to your support requests and doubts.
• To process payments and issue invoices and receipts.
• To send you course-related notifications — only after you opt in.

TestCraft-ai does not sell or rent your information. We share it only with the following parties, and only as far as needed:

• Razorpay — our payment processor, to take payments and issue refunds.
• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.
• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.
• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.

Each provider is bound to use the data only to perform its service for us, not for its own purposes.

This app is meant for people aged 13 and above. If you are a minor (under 18), a parent or legal guardian must approve your use of the app and any payments. We never knowingly collect personal data from children under 13.

Security is built in: passwords are stored only as bcrypt hashes, every connection is protected with TLS 1.2 or above, and backups are kept encrypted. We review our security posture regularly and remediate critical vulnerabilities within 72 hours.

Under the DPDP Act and Google Play’s policies, you have the right to:

• Delete your data, subject to legal retention requirements.
• Access a copy of the personal data we hold about you.
• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.
• Correct information that is inaccurate or out of date.
• Withdraw consent for any non-essential processing at any time.

Write to us at support@igniterapp.com to use any of these rights; we reply within the legally required period.

Your data is retained while your account is active. You may delete your account whenever you wish — either through the in-app “Delete my account” control or by writing to support@igniterapp.com. Once requested, we erase your personal data within 30 days, apart from records we must keep for legal, tax or accounting purposes (usually up to 7 years).

Should we materially change our data practices, we will post an in-app notice and refresh the “Last updated” date shown above. By continuing to use TestCraft-ai after the update, you agree to the new policy.

For any privacy question, concern or grievance, reach our team at support@igniterapp.com. Grievances are acknowledged quickly and resolved within the periods required under India’s DPDP Act.