Privacy policy
Last updated 14 October 2026
This Privacy Policy (the "Policy") sets out how Rank Guard EdTech collects, receives, stores, uses, discloses, transfers and otherwise processes the personal data of persons who access or use Exam with Me. It is published in accordance with the Information Technology Act, 2000, the rules framed under it and the Digital Personal Data Protection Act, 2023. By creating an account or otherwise using the Platform, you confirm that you have read and understood this Policy.
1. Definitions and scope
1.1 In this Policy, "Platform" means the website and web application known as Exam with Me, together with every feature, page and service offered through it. "We", "us" and "our" refer to Rank Guard EdTech (rankguard.in), Jhunjhunu, Rajasthan - 333022, India, which owns and operates the Platform. "You", "your" and "User" refer to any natural person who accesses or uses the Platform.
1.2 "Personal data" has the meaning given to it in the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), that is, any data about an individual who is identifiable by or in relation to that data. "Processing" includes collection, recording, storage, use, sharing, restriction, erasure and destruction.
1.3 For the purposes of the DPDP Act, we are the Data Fiduciary for personal data processed through the Platform, and you are the Data Principal.
1.4 This Policy applies only to the Platform. It does not govern any third-party website or service that may be linked from the Platform, and you should read the privacy terms of any such service before using it.
2. Personal data we collect
2.1 We collect only such personal data as is reasonably necessary for the purposes set out in Section 3. It falls into the following categories:
- (a) Account data: your email address, your name, your date of birth, the date and time on which you declared that you are eighteen years of age or older, and whether your email address has been verified. If you sign in with a Google account, we receive your name and email address from Google.
- (b) Profile data: your gender and your home town. Gender is used only to give effect to women-only and same-gender visibility settings. Neither is ever displayed to another User.
- (c) Post data: the examination, date, shift, examination city and examination center that you select, or the name of a center that you type in. Posts made under earlier versions of the Platform may also contain the city you were travelling from, what you were looking for and a short note.
- (d) Connection and communication data: connection requests you send or receive and any message attached to them, chats and the messages exchanged in them, Users you block, examinations you ask us to add, and reports or appeals you submit.
- (e) Notification data: where you allow notifications, the push subscription that your browser issues for the Platform.
- (f) Analytics data: only where you select "Accept all" on the cookie banner, information about how you use the Platform and how quickly its pages load, collected through Google Analytics.
- (g) Security data: counts of actions taken from your account and from your network, kept to prevent abuse, and signals processed by Google reCAPTCHA to confirm that requests come from the genuine application. Your IP address is not stored in readable form; it is converted into a one-way hash that is deleted within two days.
2.2 We do not ask for, and you should not provide, your telephone number, examination roll number, admit card or any government identifier. Telephone numbers, email addresses and web links typed into notes, center names and connection messages are removed automatically before they are stored or shown.
2.3 If you sign up with an email address and password, your password is handled directly by Google Firebase Authentication in hashed form. We never receive or store it.
3. Purposes and basis of processing
3.1 We process your personal data for the following purposes, and for no purpose incompatible with them:
- (a) to create and maintain your account and to confirm that you are eighteen years of age or older;
- (b) to show your post to Users sitting the same examination and to apply the visibility settings you choose;
- (c) to let you send and answer connection requests and to provide chat between connected Users;
- (d) to notify you of requests and messages by push notification and, where you allow it, by email;
- (e) to keep the Platform safe, including rate limits, bot checks, review of reports, moderation and the enforcement of our Terms of Use;
- (f) to comply with our obligations under applicable law, including the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021; and
- (g) where you have accepted analytics, to understand how the Platform is used and to improve it.
3.2 We process your personal data on the basis of the consent you give when you create your account and accept this Policy and, for analytics data, the separate consent you give through the cookie banner. We may also process personal data without consent for the legitimate uses permitted under Section 7 of the DPDP Act, including compliance with any law, judgment or order, and responding to a medical emergency or a threat to life.
3.3 We do not sell your personal data. We do not use it for advertising or marketing, and we do not subject you to any decision based solely on automated processing that has legal or similarly significant effects on you.
4. Visibility to other Users
4.1 When you create a post, Users who are eligible to see it can view your first name and the initial of your last name, an avatar generated from your name, and the details of your post.
4.2 Your full name becomes visible to another User only within a chat that both of you have accepted.
4.3 Your email address, date of birth, gender and home town are never displayed to other Users.
4.4 Our moderators may access such personal data as is necessary to review reports, appeals and suspected breaches of the Terms of Use, and for no other purpose.
6. Transfer outside India
6.1 Some of our service providers store or process personal data on servers located outside India, including in Singapore and the United States of America. By using the Platform, you acknowledge such transfer.
6.2 Any such transfer is made in accordance with Section 16 of the DPDP Act. We will not transfer personal data to any country or territory that the Central Government restricts by notification.
7. Retention of personal data
7.1 We retain personal data only for as long as the purpose for which it was collected remains served, or as long as applicable law requires, whichever is later. In particular:
- (a) posts are removed from the feed once the examination date has passed and are deleted ninety days after that date, together with the connection requests sent on them;
- (b) chats become read-only thirty days after the examination, and their messages are deleted ninety days after it, or immediately if either participant deletes their account;
- (c) reports are retained for twelve months after they are resolved, and moderation logs for twenty-four months;
- (d) notification subscriptions are deleted when you sign out, when your browser withdraws them, or when you delete your account;
- (e) network hashes used for rate limits are deleted within two days; and
- (f) account and profile data are retained until you delete your account, subject to Section 8.
8. Deletion of your account
8.1 You may delete your account at any time from the You tab by choosing Delete account. Your account stops working immediately. Your profile, posts, chats, messages, connection requests, blocks and notification subscriptions are then erased, ordinarily within minutes and in any event within one day.
8.2 Rule 3(1)(h) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 requires us to retain the information collected for your registration for one hundred and eighty days after your account is deleted. We therefore keep a record of your name, email address, date of birth and the dates of your registration and age declaration for that period, solely for the purposes of investigation, and erase it at the end of the period.
8.3 Reports that you filed are retained for the period stated in Section 7 but are no longer linked to your name.
9. Your rights and duties
9.1 Subject to the DPDP Act and the rules made under it, you have the right to obtain a summary of the personal data we process about you and of the processing activities undertaken; to have inaccurate or incomplete personal data corrected, completed or updated; to have personal data erased where it is no longer necessary for the purpose for which it was collected; to have your grievances redressed; and to nominate another person to exercise these rights in the event of your death or incapacity.
9.2 You may view and correct your profile at any time from the You tab. To exercise any other right, write to our Grievance Officer at the address given in Section 14. We shall respond within the period prescribed under applicable law.
9.3 You may withdraw your consent at any time. Withdrawal of consent to analytics can be made by clearing this site's data in your browser, after which the cookie banner will ask you again. Since the core service cannot be provided without the account data described in Section 2, withdrawal of consent to that processing can be given effect only by deleting your account. Withdrawal does not affect the lawfulness of processing carried out before it.
9.4 If you are not satisfied with our response to your grievance, you may file a complaint with the Data Protection Board of India after exhausting the grievance redressal mechanism described in this Policy.
9.5 Under Section 15 of the DPDP Act, you in turn must not impersonate another person, suppress any material information, furnish any information that is false, or register a false or frivolous grievance or complaint.
11. Security practices
11.1 We maintain reasonable security practices and procedures appropriate to the nature of the personal data we hold. All communication with the Platform is encrypted using HTTPS, our service providers encrypt stored data, and access to personal data is restricted to the persons who operate and moderate the Platform, to the extent their work requires.
11.2 No method of transmission or storage is entirely secure, and we cannot guarantee absolute security. In the event of a personal data breach, we shall inform the Data Protection Board of India and each affected User in the form and manner prescribed under the DPDP Act.
12. Children
12.1 The Platform is meant only for persons who have completed eighteen years of age. We do not knowingly process the personal data of any child within the meaning of the DPDP Act. If we learn that an account belongs to a person under eighteen, we shall delete it.
13. Changes to this Policy
13.1 We may amend this Policy from time to time to reflect changes in the Platform or in the law. The date at the top of this page shows when it was last amended. Where an amendment materially affects the manner in which we process your personal data, we shall seek your consent afresh where applicable law requires us to do so.
14. Grievance Officer
14.1 In accordance with the Information Technology Act, 2000, the rules made under it and the DPDP Act, the name and contact details of our Grievance Officer are as follows:
Sunil Kumar, Grievance Officer, Rank Guard EdTech, Jhunjhunu, Rajasthan - 333022, India. Email: sunil@rankguard.in
14.2 The Grievance Officer shall acknowledge every complaint within twenty-four hours and resolve it within seven days of receipt.