Privacy policy | Examyfi

This policy explains how Examyfi ("Examyfi", "we", "us"), operated by Pyzon, Mumbai, Maharashtra, India, handles personal data on this website (examyfi.com) and in the Examyfi application (app.examyfi.com). It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

If anything here is unclear, write to contact@examyfi.com. A person will answer.

1. Who is responsible for your data

It depends on how you use Examyfi.

You signed up yourself (as a student, a teacher, or the administrator of an institute), or you wrote to us through this website. Examyfi decides why and how your data is used and is responsible for it.
Your coaching institute or teacher added you as a student. Your institute or teacher decides what data about you is entered and how it is used. Examyfi stores and processes it on their instructions. Please contact them first about your record; we will help them respond.

2. What we collect

On this website

Contact form: your name, mobile number and/or email address, institute name, who you are (institute, teacher, student), your message, the page you wrote from, campaign tags in the link that brought you here, and your IP address.
Visits: we use Cloudflare Web Analytics, which counts page views without cookies and without building a profile of you.
Spam protection: forms are protected by Cloudflare Turnstile, which checks that a request comes from a person. It does not use advertising cookies.

This website sets no cookies. Campaign tags are kept in your browser's session storage until you close the tab, so that they can be passed to the sign-up page.

In the app

Account: name, mobile number, email address if you give one, your role, the institute or workspace you belong to, and a securely hashed password. We record the time you accepted these terms and the campaign that brought you.
Verification: one-time codes are sent to your mobile number on WhatsApp, or to your email address. We keep a record that a code was sent and used, not the code itself in readable form.
Students added by an institute or teacher: name, roll number, batch, and optionally contact details, as entered by them.
Academic activity: tests assigned and attempted, answers, time taken, scores, ranks and reports. For paper tests, the scanned images of OMR answer sheets.
Content you create: questions, papers, batches and settings.
Payments: what you bought, the amount, tax, status, and the payment and order references from Razorpay. We never see or store your card number, UPI PIN or net-banking password; those are handled entirely by Razorpay.
Security logs: sign-in times, IP address and session identifiers.

The app uses one essential cookie to keep you signed in. It is limited to app.examyfi.com, is not readable by this website and is not used for advertising or tracking.

3. Why we use it

To create and secure your account, and to keep a session tied to the device and network it started on.
To provide the service: generating papers, delivering and scoring tests, reading OMR sheets and producing reports.
To take payments, issue receipts and tax invoices, process refunds and meet tax and accounting law.
To send service messages: verification codes, receipts, reminders that a plan is about to end, and notices about your tests. These are not marketing.
To answer you when you write to us.
To keep the service reliable and to prevent abuse, fraud and spam.

We rely on your consent, given when you sign up or send the form, and on the uses the law permits without consent, such as meeting a legal obligation. We do not sell personal data, and we do not use student data for advertising.

4. Who we share it with

Only service providers that need it to run Examyfi, under contracts that limit what they may do with it:

Razorpay, to process payments and refunds.
Meta (WhatsApp Business Platform), to deliver verification codes, receipts and reminders to your mobile number.
Our email delivery provider, to send email.
Amazon Web Services and our server hosting provider, to store files such as generated papers and OMR scans and to run the application.
Cloudflare, to host this website, protect forms and count visits.

Within an institute, administrators, staff and teachers can see the students and results of that institute according to the permissions their administrator gives them. One institute can never see another institute's data.

We may disclose data when the law requires it, for example in response to a valid order from a court or authority.

5. How long we keep it

Account and academic data: for as long as the account or the institute's workspace exists. When a plan ends the workspace becomes read-only; it is not deleted, so that you can renew or download your records.
Invoices and payment records: for the period required by tax and accounting law, currently at least eight years.
Contact form messages: up to 24 months after our last conversation.
Security logs: up to 12 months.

After these periods, or when you ask us to erase your data and no law requires us to keep it, we delete it or make it anonymous.

6. Your rights

You can ask us to:

tell you what personal data we hold about you and how it is used;
correct, complete or update it;
erase it, and close your account;
withdraw consent you gave earlier. This does not affect what was done before, and some features will stop working without the data they need;
nominate another person to exercise these rights if you die or become unable to.

Write to contact@examyfi.com from the email address or mobile number on your account. We will confirm it is you and respond within 30 days. If your institute added you, we will route the request through them.

7. Children and students under 18

Many NEET aspirants are under 18. If you are under 18, create an account or send us your details only with the consent of a parent or guardian, who may contact us at any time to see, correct or delete your data. Institutes and teachers who add students under 18 are responsible for having the consent of their parents or guardians. We do not track or profile children, and we do not show them targeted advertising.

8. Security

Data travels over encrypted connections. Passwords are stored as salted hashes. Sessions are tied to the network they began on and expire on their own. Access to production systems is limited to the people who operate the service. Each institute's data is kept logically separate, and access inside the app is controlled by role. No system is perfectly secure; if a breach affects your data we will tell you and the Data Protection Board as the law requires.

9. Grievance officer

Complaints about how your data is handled go to the Grievance Officer, Examyfi, Mumbai, Maharashtra, India.
Email: contact@examyfi.com · Phone: +91 95944 97691

We acknowledge complaints within 48 hours and resolve them within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.

10. Changes to this policy

We will post any change on this page and update the date at the top. If a change materially affects how your data is used, we will tell account holders by email or WhatsApp before it takes effect.