Digital Personal Data Protection (DPDP) Notice

In accordance with Section 5 of the Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023), this notice informs you of the personal data collected, processing purposes, manner of exercising Data Principal rights, and grievance mechanisms prior to obtaining your consent.

Itemized Schedule of Personal Data Processing

Data Element	Specific Purpose of Processing	Lawful Basis	Retention Period
Email & Username	Account provisioning, secure login, password reset, and session generation	Section 6(1) Consent	Until account deletion by user
Test Attempt Logs	Calculating scores, topic accuracy, time analytics, and test history	Section 6(1) Consent	Until account deletion by user
Pomodoro & Study Logs	Generating the GitHub-style study heatmap & study tracking	Section 6(1) Consent	Until account deletion by user
IP Address & User Agent	Rate limiting, DDoS prevention, and securing candidate test integrity	Legitimate Uses (Section 4)	Transient (Ephemeral memory cache)

How to Exercise Your Statutory Rights

Under Chapter III of the DPDP Act 2023, you may at any time:

• Request a copy or summary of your digital personal data.
• Request correction or completion of your registered email/username.
• Withdraw your consent or request complete erasure of your profile and test history.

Designated Grievance Redressal Officer

For any inquiries, requests, or grievances under the DPDP Act 2023, please contact our Data Protection Officer: