What we keep, and what we refuse to

You tell us your age band when you sign up. If it is under 18, we ask for a parent or guardian's email address and write to them. Until they agree, the account does not start.

We record how and when that consent was given — not just a tick in a box — so it can be shown later. A guardian can withdraw it at any time.

Agreeing to let us process a child's data is a separate thing from agreeing to receive progress updates about them. They are asked for separately and either can be withdrawn on its own.

A parent link has to be asked for by one side and confirmed by the other. An unconfirmed link shows a parent nothing at all.

Once it is active, a parent sees a readiness figure, chapter and topic mastery, recent test scores and the current recommendation. They never see question wording, answer keys, or which option you picked — a parent who can read the paper their child is about to sit is a leak, not a feature.

A parent is never shown a number the student is not shown. Where a figure is withheld for want of evidence, it is withheld from them too.

A student can cut the link at any time, on their own. A parent cannot stop them.

Google, only if you choose to sign in with Google. We ask them for your name, email address and account identifier — nothing else. No Drive, no contacts, no calendar.

Our email provider, to deliver the messages this product sends: verification, password reset, and guardian consent.

A payment provider, when you buy something. Card details go to them and never reach us; we keep a record that a payment happened.

That is the list. No advertisers, no data brokers, no analytics company.

Someone on our team can look at an identified account only with a written reason, and doing so leaves a permanent record of who looked, at whom, and why. Everyday work is done against pseudonymous data with no names in it.

You can delete your account from your settings. When you do, your email address, name and password are removed and your tests are detached from you, so what is left points at nobody. Your sessions are ended immediately rather than at the next expiry.

One thing survives, and we would rather say so than hide it: the aggregate statistics each question has built up — how often it is answered correctly, how long it tends to take. Those are facts about the question, not about you, and they are what keeps the bank honest for everyone else. They carry nothing that identifies you.

Backups are kept for fourteen days and then deleted, so a copy of your data can persist in a backup for up to that long after you delete it.

Under the DPDP Act you can ask what we hold about you, ask us to correct it, ask us to erase it, and withdraw a consent you gave. If you are under 18, your parent or guardian can do these on your behalf.

Write to admin@innocorelabs.com and we will answer. If you are not satisfied with how we handle it, you can complain to the Data Protection Board of India.

Traffic is encrypted in transit. Passwords are stored as one-way hashes. Sign-in cookies cannot be read by scripts and are only sent over a secure connection. The database is not reachable from the internet.

No system is perfect, and anyone claiming otherwise is selling something. If you find a problem, please tell us at the address above.