Prep with Nidhi is an online IELTS preparation platform operated by [LEGAL BUSINESS NAME] (“we”, “us”), registered at [REGISTERED ADDRESS, CITY, STATE, PIN]. This policy explains, in plain language, what personal data we collect when you use the platform, why, who we share it with, how long we keep it and the rights you have over it.
We process personal data in line with India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Information Technology Act, 2000. If you have a question at any point, write to [SUPPORT EMAIL].
1. Who is responsible for your data
How we handle your data depends on how you came to use the platform:
- Through a coaching institute. If your institute gave you access, the institute decides why and how your data is used for your coaching (it is the “Data Fiduciary” under the DPDP Act). We process that data on the institute's behalf and on its instructions, as its “Data Processor”. For most requests about your data, you can contact your institute or us — we will help either way.
- On your own. If you signed up directly (including the free mock or a paid pack bought on our pricing page), we are the Data Fiduciary for your data.
2. What we collect
- Account details: your email address (we sign you in with a one-time code, so we never hold a password), your name, and the institute you belong to, if any.
- Test answers and results: your Listening and Reading answers, your Writing essays, scores, band estimates and the feedback written by teachers and examiners.
- Speaking voice recordings: when you take a Speaking test, your browser records your spoken answers through your microphone, with your permission, and uploads them to our secure storage. We only record while you are actively answering — never in the background.
- Test activity: when you start and submit a test, time taken, and whether you switched away from the test tab during a timed test (shown to your teacher as an “interruption”).
- Payment records: if you buy a pack, the plan, amount, date and the order/payment reference. Card, UPI and bank details are entered directly with our payment processor, Razorpay — we never see or store them.
- Enquiries: if you fill in a form on our website, the name, phone number, email and city you give us.
- Technical data: sign-in cookies that keep you logged in, and basic server logs (such as IP address, browser type and error reports) kept by our hosting providers for security and troubleshooting. We do not use advertising or tracking cookies.
3. Why we use it
- To create and secure your account and sign you in.
- To deliver tests, save your answers and show you your results and progress over time.
- To let human teachers and examiners — from your institute, or engaged by us for individual learners — listen to your Speaking recordings and read your Writing so they can mark them and give feedback.
- To show your institute your progress, if you study through one.
- To process payments, issue receipts and handle refunds.
- To send you service emails (sign-in codes, results ready, account notices).
- To keep the platform secure, prevent misuse and fix problems.
- To meet our legal obligations, such as tax and accounting records.
We rely on your consent (which you give when you create an account, and again for microphone access), on the instructions of your institute where it is the Data Fiduciary, and on the legitimate uses the DPDP Act allows. We do not sell your personal data, and we do not use it for advertising.
No AI marking of your work. Your Writing and Speaking are marked by people, not algorithms. We use AI tools only to help author practice test content (questions and passages); your answers, essays and recordings are never sent to AI providers.
4. Who we share it with
We share personal data only as needed to run the platform:
- Your institute (if you study through one) and the teachers and examiners who mark your work.
- Service providers who process data for us under contract and only on our instructions:
- Supabase — database, sign-in and file storage (including voice recordings).
- Vercel — website and application hosting (Mumbai, India region).
- Resend — sending service emails such as sign-in codes.
- Razorpay — payment processing for individual purchases.
- Authorities, where the law requires it or to protect the rights and safety of our users.
Our application runs in India, but some providers may store or process data on servers outside India (for example, backups or email delivery). Where that happens, it is done as permitted under the DPDP Act and with safeguards in our contracts with them.
We are not affiliated with IDP, the British Council or Cambridge University Press & Assessment, and we do not share your data with them.
5. How long we keep it
- Speaking voice recordings: kept for [12 MONTHS — TO BE CONFIRMED] from the date of the test, so you and your teachers can review them, and then permanently deleted. You can ask us to delete them sooner.
- Account, answers and results: kept while your account is active, so you can see your progress. If you or your institute close your account, we delete or anonymise this data within 90 days, unless we must keep something longer by law.
- Payment records: kept for up to 8 years, as required by Indian tax and accounting law.
- Enquiries: kept for up to 12 months if you don't sign up.
6. How we protect it
Data is encrypted in transit (HTTPS) and at rest with our providers. Voice recordings are kept in private storage and are played only through short-lived secure links shown to you and to the teachers and examiners marking your work. Access is limited by role — a teacher sees only their own institute's students. No system is perfectly secure; if a personal data breach affects you, we will inform you and the Data Protection Board of India as the DPDP Act requires.
7. Your rights
Under the DPDP Act you have the right to:
- get a summary of the personal data we hold about you and how it is used;
- have inaccurate or incomplete data corrected and updated;
- have your data deleted — including your voice recordings — when it is no longer needed or when you withdraw consent (withdrawing consent means we can no longer provide the parts of the service that rely on it);
- have a grievance about our handling of your data addressed;
- nominate another person to exercise these rights if you die or become unable to.
To use any of these rights, email [SUPPORT EMAIL] from the email address on your account. We will reply within 30 days. If you study through an institute, we may involve it, since it controls your coaching records.
8. Children
The platform is meant for people preparing for IELTS, who are usually 18 or older. If you are under 18, you may use it only with the verifiable consent of a parent or lawful guardian — normally collected by your institute when you enrol, or given to us directly if you sign up on your own. We do not track, profile or target advertising at children.
9. Grievance Officer and contact
If you have a complaint about how your personal data is handled, contact our Grievance Officer:
[GRIEVANCE OFFICER NAME]
Grievance Officer, [LEGAL BUSINESS NAME]
[REGISTERED ADDRESS, CITY, STATE, PIN]
Email: [GRIEVANCE OFFICER EMAIL]
Phone: [SUPPORT PHONE]
We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Changes to this policy
We may update this policy as the platform or the law changes. We will change the “last updated” date above and, for significant changes, tell you by email or in the app. See also our Terms of Service and Refund Policy.