Privacy Policy

Last updated: February 2026

JoyOfExams ("we", "us", "our") is committed to protecting the privacy of our users, including students and their parents or guardians. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use joyofexams.in ("the Service").

This policy complies with the Digital Personal Data Protection Act, 2023 (DPDPA) of India and other applicable data protection laws.

1. Information We Collect

1.1 Information You Provide

  • Registration data: Full name, mobile number, board, class. Parent/guardian name and email if provided.
  • Profile data: School name, city/town, username.
  • Payment data: Payment transactions are processed by Razorpay. We do not store credit card or bank account numbers on our servers. We retain transaction IDs, plan details, and payment status for billing records.
  • User-generated content: Study notes, bookmarks, content reports, and feedback you submit.
  • Communication data: Messages to our support team.

1.2 Information Collected Automatically

  • Learning data: Quiz scores, study time, module progress, question attempts, mastery levels, and achievement data.
  • Usage data: Pages visited, features used, session duration, and interaction patterns.
  • Device data: Browser type, operating system, device type, screen resolution, and IP address.
  • JOE AI interactions: Questions asked and responses received for quality improvement and safety monitoring.

2. How We Use Your Information

We use your information for the following purposes:

  • Provide the Service: Deliver study materials, practice questions, AI tutoring, and progress tracking.
  • Personalise learning: Adapt content difficulty, generate study plans, and recommend revision based on your mastery data.
  • Communicate: Send OTP for login, subscription reminders, study nudges, and important updates via SMS and email.
  • Process payments: Handle subscription billing, refunds, and coupon redemptions via Razorpay.
  • Improve the Service: Analyse anonymised usage data to improve our content, features, and AI models.
  • Safety & security: Detect abuse, enforce usage quotas, and maintain platform integrity.
  • Parent reporting: Provide progress reports and analytics to linked parent accounts.

3. Data Sharing & Third Parties

We do not sell your personal information. We share data only with the following service providers, strictly for operating the Service:

ProviderPurposeData Shared
RazorpayPayment processingTransaction details, email
MSG91SMS / OTP deliveryMobile number
Microsoft AzureCloud hosting & storageAll service data (encrypted)
SentryError monitoringError logs, device info
Azure Application InsightsPerformance monitoringUsage telemetry (anonymised)

We may also share information if required by Indian law, court order, or government authority.

4. Cookies & Local Storage

We use cookies and browser local storage for:

  • Essential cookies: Authentication tokens, session management. Required for the Service to function.
  • Preference cookies: Theme selection (Balance/Hype/Focus), UI preferences.
  • Analytics: Anonymised usage patterns to improve the Service.

We do not use third-party advertising cookies or tracking pixels. You can clear cookies via your browser settings, but this will require you to log in again.

5. Data Security

We implement industry-standard security measures to protect your data:

  • All data in transit is encrypted using HTTPS/TLS.
  • Passwords are hashed using bcrypt with salt rounds.
  • Database access is restricted and monitored.
  • OTP codes expire after 10 minutes and are limited to 3 per day per phone number.
  • Payment processing is handled entirely by Razorpay (PCI DSS compliant); we never store card details.

While we take every reasonable measure to protect your information, no internet transmission is 100% secure. You are responsible for keeping your login credentials confidential.

6. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion:

  • Your personal information (name, email, phone) is deleted or anonymised within 30 days.
  • Anonymised learning data (for aggregate analytics) may be retained indefinitely.
  • Payment records are retained for 1 year after account deletion for tax and legal compliance.
  • Audit logs and security records are retained for 1 year.

7. Children's Privacy

JoyOfExams is designed for CBSE Class 10 students, typically aged 14-16. We take children's privacy seriously and comply with the DPDPA 2023 provisions for minors.

  • We collect only the minimum data necessary to provide the educational Service.
  • We do not display targeted advertising to users.
  • Parents or guardians can review their child's data, request corrections, or request deletion at any time.
  • JOE AI is bounded to educational content and will not engage with non-academic topics.

8. Your Rights (Under DPDPA 2023)

As a data principal under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Access: Request a summary of your personal data held by us.
  • Correction: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data (subject to retention requirements).
  • Grievance redressal: Contact our Grievance Officer for data-related concerns.
  • Nomination: Nominate an individual to exercise your data rights in case of death or incapacity.

To exercise these rights, email us at support@joyofexams.in with the subject line "Data Rights Request." We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 15 days before taking effect. The "Last updated" date at the top reflects the most recent revision.

10. Contact Us

For privacy-related questions or to exercise your data rights: