Play To Prepare is a product of MSAE. The short version: your Google login is the personal data we keep, your gameplay lives mostly on your device, we sell nothing to anyone, and every right India's data-protection law gives you works from one email address.
Exactly what we collect
From Google, when you sign in: your name, email address and profile photo. That is your account. From play: the exam you chose, what you answer and how long you take, and the devices you sign in from. From the exam list: which exam you ask us to add, and the words you search for there (never anything that looks like an email address or a phone number), so we know what to build next. From a purchase: what you bought, when, and whether your pass is live. If you email us, we keep the conversation so we can help you.
We take no phone number, no postal address, no documents, and no location. We never hold your password (sign-in is Google's, so there is nothing for us to store), and we never see your card or banking details, which stay with the payment provider.
What stays on your device
Your progress, stars, streak, mistakes, activity history and preferences live on your device, with a compact progress checkpoint synced so your account works across your devices. Deleting your data from Settings erases them.
Why we hold each thing
Your account: to run the game and keep your pass working across devices. Your email: to send your weekly progress report, product updates and offers; every such email has an unsubscribe link, and opting out never affects your game. Your answers and timing: so the game can adapt to how you actually perform, which is the product. Purchase records: to honour what you paid for and to meet tax law. Usage counts, aggregated: to see what works and improve the game.
Automated processing
We use automated processing to decide what the game shows you next and to detect misuse of the service. Decisions that end an account or keep money are made by a person, and you can always ask for one.
To protect the question bank we look at how play happens, not at who you are: the time between your answers as our own servers record it, how many questions an account opens against how many it answers, and the hours of the day it plays. A pattern no person produces can pause the account, and the app tells you what was seen. These timings are kept for 30 days and used for nothing else: not for advertising and not for marketing.
What we never do
We do not sell your personal data. We do not share it with anyone for their marketing. We do not read your gameplay to build an advertising profile of you.
Ads
The free game shows ads: short ones between some rounds, and ones you choose to watch for a reward. A pass removes ads entirely. In the browser the ads come from Google; in the phone apps they come from Google's AdMob. We give the ad provider nothing about your answers, your progress or your account.
Google, and the ad companies it works with, use cookies (small files a website leaves in your browser) to choose which ads to show, including ads based on your earlier visits to this site and to other sites. You can turn off personalised ads from Google at adssettings.google.com, and from many other ad companies at aboutads.info. On a phone, the same switch is in your device's ad settings. How Google uses information from sites that show its ads: policies.google.com/technologies/partner-sites.
Age
PTP is for people aged 18 and over, and we do not knowingly collect a minor's data. We say this honestly rather than theatrically: we do not run age verification, because there is no check of this kind that a determined person cannot pass, and pretending otherwise would be a promise we cannot keep. What we can promise is that the service is built for adults, described as for adults, and that if we learn an account belongs to a minor we will delete it and its data.
Your rights
Under India's Digital Personal Data Protection Act you can see what we hold about you, have it corrected or completed, have it erased, withdraw consent (which may end the service, since we cannot run an account without an account), nominate someone to act for you if you cannot act yourself, and complain to us and to the Data Protection Board.
The fastest way to erase everything is Delete my data in Settings: it signs you out everywhere at once and deletes your account 30 days later, and signing in again before then cancels it and keeps your progress (a pass ended by the request comes back until the date it was due to end). For any of these rights, write to us at the address under Contact below. A rights request is acknowledged within 24 hours and resolved within 15 days.
How long we keep things
Play history is kept for 90 days and then becomes anonymous counts. An account untouched for 24 months is deleted, after the same 30-day wait. Purchase records are kept longer because tax law requires it, in a form that no longer identifies you. When you delete your account, we delete your data. Three things remain, and none of them names you: the purchase records above; a note that a deletion happened, kept for 60 days so we can answer a question about it (or, if a pass ended with the deletion, kept with the purchase records, because it is the record of what you agreed to); and a one-way code of your Google id, which only stops a deleted account being created again to claim a once-per-person offer twice.
Letters you write to us are kept for a year after they are resolved, then deleted, and sooner if you delete your account. A report you make about a question stays with the question after your account is deleted, with nothing that links it to you.
One more thing is kept if an account is closed for misuse: a one-way fingerprint of the Google account, the email address and the devices it used, so the same person cannot open a new account to do it again. It cannot be turned back into your details, it is kept even if deletion is asked for, since that is its whole purpose, and it is deleted after three years.
Who else sees your data
Google, for sign-in, and for the ads in the free game (see Ads above). The payment provider of the platform you buy on: Google Play on Android, Apple on iOS, Cashfree Payments, our payment gateway on the web, which takes your payment details itself (we never see them). Brevo, the email provider that delivers our mail. Cloudflare, which delivers our pages and counts visits to them for us (how many, from which country, how fast the page loaded) without cookies and without identifying you. YouTube, which plays the film on our home page: the page loads nothing from YouTube until you press play, and from then on YouTube's own policy applies. Each receives only what it needs to do its job, under its own published policy. Nobody is sold anything, ever.
Your data is stored on cloud infrastructure and may be processed outside India, with the protections the law requires travelling with it.
If Play To Prepare is sold, merges, or takes investment, your data may be transferred to the new owner under this policy, and you will be told.
If something goes wrong
If a breach affects your personal data, we tell you without delay and file the reports the law requires. We keep the logs that make that answer honest.
Cookies and local storage
Our own cookies and local storage keep you signed in and remember your progress and preferences. None of ours is used for advertising or to follow you around the internet. In the free game, Google's ads set Google's own advertising cookies, as described under Ads above, and you can turn personalised ads off there.
Changes to this policy
When a new feature changes what we collect or how we use it, we update this policy and the effective date, and we announce material changes in the app or by email.
Contact
Questions about this policy, and every request about your data, go to support@playtoprepare.com. Our Grievance Officer is Jackson, at the same address; a request is acknowledged within 24 hours and resolved within 15 days.