Pointcircle Labs Private Limited ("Testley," "we," "us," or "our") operates the Testley mobile application and website (collectively, the "Platform"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Platform.
By using Testley, you agree to the practices described in this Privacy Policy. If you are under 18 years of age, please ensure your parent or legal guardian has reviewed this Privacy Policy before you use the Platform.
Testley is an adaptive practice platform for JEE and NEET exam preparation, operated by Pointcircle Labs Private Limited, a company incorporated under the laws of India with its registered office in Bangalore, Karnataka.
Data Protection Contact:
Email: privacy@testley.com
Address: Pointcircle Labs Private Limited, Bangalore, Karnataka, India
| Data | When collected | Why |
|---|---|---|
| Full name | During registration | To personalise your experience and display on your profile |
| Phone number | During registration | To verify your identity via OTP |
| Email address | During registration or Google Sign-In | For account authentication and important communications |
| State (location) | During onboarding | To provide regionally relevant content |
| Class / grade | During onboarding | To show age-appropriate content and syllabus |
| Exam target (JEE / NEET) | During onboarding | To customise your practice experience |
| Target exam date | During onboarding | To help you plan your preparation |
| Data | How generated | Why |
|---|---|---|
| Question responses | When you answer questions | To power the adaptive difficulty algorithm and track your progress |
| Time per question | Measured during practice | To optimise difficulty and identify areas needing more time |
| Session history | When you complete sessions | To show your progress over time |
| Difficulty levels | Calculated by our algorithm | To adapt questions to your current level |
| Streaks and XP | Tracked daily | For gamification and motivation features |
| Daily usage counts | Tracked per day | To enforce free tier limits |
When you subscribe to Testley Pro, your payment is processed by Razorpay, our payment gateway. We store your subscription status, plan type, and Razorpay transaction identifiers. We do not store your credit/debit card number, UPI ID, or bank account details — these are handled entirely by Razorpay under their own privacy policy.
If you sign in with Google, we receive your name and email address from your Google account. We do not access your Google contacts, calendar, or any other Google data.
We collect basic technical data required for the Platform to function, including authentication tokens and session identifiers.
The Testley app also includes the following third-party software development kits (SDKs), which run on your device and automatically collect certain technical data:
| SDK | Data collected | Purpose |
|---|---|---|
| Mixpanel (product analytics) | In-app events (e.g. sessions started, questions answered, features used, subscription events), your account identifier, device model, operating system and app version | Understanding how the app is used so we can improve it and fix problems |
| AppsFlyer (install attribution) | App installation and conversion events (sign-up, trial, purchase), your account identifier, device identifiers (subject to your device's advertising/tracking settings), IP address, device model and OS version | Measuring which advertising campaigns lead to installs and subscriptions |
| Sentry (crash reporting) | Crash and error reports, device model, OS and app version, your account identifier | Detecting and fixing crashes and bugs |
On iOS, the collection of the device advertising identifier is subject to Apple's App Tracking Transparency prompt; on Android you can reset or delete your advertising ID in device settings.
We use your personal data for the following purposes:
We do not use your data for:
Advertising and performance measurement: We use advertising platforms (such as Meta/Facebook and Google) to reach potential users. To measure the effectiveness of our advertising campaigns, limited data (such as app installation events and subscription events, together with device identifiers where permitted by your device settings) is shared with these platforms through the AppsFlyer SDK described in Section 2.5. This data is used to measure ad performance and optimise our campaigns — not to show you ads within the Testley app. You can opt out of personalised advertising through your device settings (App Tracking Transparency on iOS; advertising ID settings on Android) or the advertising platform's settings.
Important — children's data and advertising: We do not send any data of users identified as under 18 to advertising platforms for targeting purposes. Conversion signals sent to advertising platforms are limited to anonymised, aggregated events where technically feasible.
Testley is designed for students preparing for JEE, NEET, and similar competitive examinations. We are aware that many of our users may be under 18 years of age.
For users under 18: By registering on Testley, it is deemed that the parent or legal guardian of the user has reviewed and consented to this Privacy Policy and the processing of their child's personal data as described herein.
Our commitments regarding children's data:
We share your personal data only with the following parties, and only to the extent necessary:
| Service Provider | Data Shared | Purpose |
|---|---|---|
| Supabase (database hosting) | All user data stored in our database | Cloud infrastructure and database hosting (servers in Singapore) |
| Razorpay (payment gateway) | Name, email, subscription details | Payment processing |
| Google (OAuth) | Email (during sign-in flow only) | Authentication |
| SMS Provider | Phone number | Sending OTP codes for authentication |
| Mixpanel (product analytics) | In-app usage events, account identifier, device/app metadata | Product analytics (see Section 2.5) |
| AppsFlyer (attribution) | Install and conversion events, device identifiers (subject to device settings), account identifier | Advertising attribution and campaign measurement |
| Sentry (crash reporting) | Crash/error reports, device/app metadata, account identifier | Error monitoring and stability |
| Meta / Facebook (advertising) | App events (install, signup, purchase) via AppsFlyer | Advertising campaign measurement and optimisation |
We may also share similar event data with other advertising platforms (such as Google Ads) in the future. We will update this section accordingly.
We do not share your detailed learning data (question responses, scores, session history) with any advertising platform.
We may disclose your information if required by law, court order, or government authority, or if necessary to protect the rights, safety, or property of Testley, our users, or the public.
While we implement reasonable security measures, no system is completely secure. We cannot guarantee the absolute security of your data.
We retain your personal data for as long as your account is active. When you delete your account:
Deletion is typically completed within minutes of your request.
Tax and billing records: If you purchased a subscription, the GST tax invoices and credit notes we issued (which record the name and Indian state you provided, the amount paid, and the tax charged) are retained even after account deletion, because Section 36 of the Central Goods and Services Tax Act, 2017 requires us to preserve tax records for at least 72 months (six years). These records are unlinked from your deleted account and are used solely for tax compliance, audit, and dispute resolution.
Analytics and crash data: Usage events and crash reports already sent to the providers listed in Section 2.5 are retained under those providers' schedules and are deleted or de-identified over time. You may request expedited erasure of your identified analytics profile by emailing privacy@testley.com.
Certain other data may be retained for a limited period if required for legal compliance, fraud prevention, or to resolve disputes.
Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the right to:
To exercise any of these rights:
We will respond to your request within 30 days.
Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party service you interact with.
We may update this Privacy Policy from time to time. When we make significant changes, we will:
Your continued use of Testley after any changes constitutes acceptance of the updated Privacy Policy.
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Any disputes shall be subject to the exclusive jurisdiction of the courts in Bangalore, Karnataka.
Email us at privacy@testley.com
Pointcircle Labs Private Limited
Bangalore, Karnataka, India