Privacy Policy

App: SSC Mock Test Adda  |  Effective Date: 1 June 2025  |  Last Updated: 5 June 2026

SSC Mock Test Adda ("we," "our," or "us") is committed to protecting the privacy of every user who installs or uses our mobile application ("App"). This Privacy Policy describes the categories of data we collect, the purposes for which we use that data, with whom we share it, how we secure it, and the rights you have as a user under applicable Indian and international data protection laws.

By installing, accessing, or using the App, you signify your acceptance of this Policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Information you provide directly

• Account information: Your full name and email address (collected when you create an account).
• Authentication credentials: Your password is never stored in plain text — only a one-way bcrypt hash is stored on our secure servers.
• Preferred language: The interface language you select (English, Hindi, or any of 12 other Indian languages).

1.2 Information collected automatically

• Test activity data: Mock tests attempted, answers chosen, time taken per question, scores, and section-wise performance — used solely to show your personal performance history and analytics inside the App.
• Device and technical data: Device model, operating system version, app version, language settings, and approximate timezone — collected anonymously to diagnose crashes and improve app stability.
• Crash logs: Automatically collected and shared only with our developers to help fix bugs. Contains no personal identifiers.

1.3 Information from third parties

• Google Play Billing: When you upgrade to Premium, Google Play processes your payment. We receive only an anonymous purchase confirmation token and the product ID purchased. We never receive your debit/credit card, UPI, bank account, or any other financial information.

2. How We Use Your Information

• To create and authenticate your account and keep it secure.
• To deliver mock tests, save your progress and results, and show your performance analytics.
• To send transactional emails such as account-verification links and password-reset links (via our delivery partner Resend).
• To verify your one-time Premium purchase via Google Play and unlock all 100 mock tests per category.
• To improve the quality of questions, app performance, language translations, and user experience.
• To respond to support requests and address policy violations.
• To comply with applicable laws and to enforce our Terms of Service.

3. Sharing of Information

We do not sell, rent, or trade your personal data. We share minimum-necessary data only with the following carefully-selected service providers, each governed by strict confidentiality and data-processing agreements:

Service Provider	Purpose	Data Shared
Google Play Billing (Google LLC)	Processing your premium purchase	Purchase token, product ID
Resend (Resend Inc.)	Sending verification and password-reset emails	Your email address, your name
MongoDB Atlas (MongoDB Inc.)	Secure cloud database hosting	Your account and test-history data, encrypted at rest and in transit
Render (Render Services Inc.)	Application server hosting	API request data, transient logs

We may also disclose your information when required by law, valid legal process, or to protect the rights, property, or safety of our users or others.

4. Data Security

We use industry-standard safeguards to protect your data:

• All network traffic between the App and our servers is encrypted using HTTPS / TLS 1.2+.
• Passwords are hashed using bcrypt with per-user salts — they cannot be reversed even by us.
• JSON Web Tokens (JWT) are used for session authentication and are signed with a secret known only to our servers.
• Our database (MongoDB Atlas) encrypts data at rest using AES-256.
• Access to production systems is limited to the developer account holder with multi-factor authentication.

While we follow best practices, no electronic transmission or storage system is 100% secure. We cannot guarantee absolute security but commit to notifying you within 72 hours of confirming any breach affecting your data.

5. Data Retention

We retain your account and test-history data for as long as your account remains active. If you delete your account, we permanently remove your personal data from active systems within 30 days. Anonymous aggregate statistics (e.g., "X users took CGL test 5 last week") may be retained indefinitely as they cannot be linked back to you.

Legal records (such as purchase receipts) may be retained for up to 7 years to comply with Indian tax and accounting regulations.

6. Children's Privacy

The App is intended for users aged 13 years and older, as the SSC examinations served are for candidates who have completed Class 10 or above. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@sscmocktestadda.online and we will delete it immediately.

7. Your Rights

Under the Digital Personal Data Protection Act, 2023 (India), GDPR (EU), and other applicable laws, you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Correct any inaccurate or outdated information.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your account and all associated data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Withdraw Consent: Withdraw any consent previously given. This will not affect the lawfulness of processing before withdrawal.
• Right to Object: Object to certain types of processing.
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 11) or the Data Protection Board of India.

To exercise any of these rights, email us at support@sscmocktestadda.online. We will respond within 30 days.

8. Permissions Used by the App

The App requests only the minimum permissions necessary to function:

• Internet (INTERNET): To fetch mock tests, sync your results, and process Premium purchases.
• Billing (com.android.vending.BILLING): To process your Premium upgrade via Google Play Billing.
• Access Network State (ACCESS_NETWORK_STATE): To detect when your device loses internet connectivity so we can show an appropriate message.

The App does not request access to your camera, microphone, location, contacts, photos, calendar, SMS, call logs, or any other sensitive permission.

9. Cookies and Similar Technologies

The App is a native mobile application and does not use browser cookies. We use local secure storage (AsyncStorage on Android) to remember your login session and language preference. This data never leaves your device unless explicitly synced with our servers.

10. Third-Party Links and Services

The App does not contain any third-party advertising networks, social media trackers, or analytics SDKs that share data with external parties. The only third-party service embedded in the App is Google Play Billing, governed by Google's Privacy Policy.

11. Grievance Officer

12. International Data Transfers

Our primary servers and database are located in cloud regions selected to comply with applicable data-protection laws. By using the App, you consent to your data being processed in these jurisdictions, which may differ from your country of residence. We apply the same protection standards regardless of where data is processed.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The "Last Updated" date at the top reflects the most recent revision. Material changes will be notified to you via:

• An in-app notification on the next launch after the change, and/or
• An email to your registered address.

Your continued use of the App after such changes constitutes acceptance of the updated Policy.

14. Contact Us