Skip to main content
Legal & Privacy Disclosure

TaiyariBook Privacy Policy

Designed around the Digital Personal Data Protection Act, 2023, the draft DPDP Rules, 2025, and the Information Technology Act, 2000.

Effective Date: 15 September 2026Last Updated: 15 September 2026Jurisdiction: Aligarh, Uttar Pradesh, India (Subject to applicable law)

Compliance Status & Phased DPDP Implementation Disclosure

TaiyariBook is committed to lawful and transparent personal data protection under Indian law. We do not make blanket claims of full statutory compliance. This policy clearly distinguishes between provisions currently in force under the Information Technology Act, 2000 and applicable IT Rules, provisions subject to phased commencement under the Digital Personal Data Protection Act, 2023 (DPDP Act) and DPDP Rules, 2025, and security measures currently implemented by TaiyariBook alongside future compliance preparation.

Section 1

1. Privacy Policy & Scope

This Privacy Policy governs the collection, processing, storage, and protection of personal data by TaiyariBook (“TaiyariBook”, “we”, “our”, or “us”) operating through the website https://www.taiyaribook.in.

TaiyariBook is an Indian competitive examination preparation platform designed for serious aspirants preparing for national and state-level examinations including NEET UG, UPSC CSE, SSC CGL, CUET UG, Banking, and Railways. This policy applies to all visitors, registered learners, and users of our web application (“Data Principals” or “Users”).

By accessing, browsing, registering for an account, or attempting test materials on TaiyariBook, you acknowledge that you have read and understood this Privacy Policy.

Section 2

2. Last Updated & Effective Date

Effective Date15 September 2026
Last Updated Date15 September 2026

This Privacy Policy is effective as of 15 September 2026 and governs all active and ongoing data processing operations on TaiyariBook.

Section 3

3. Quick Summary (Executive Overview)

We believe in total transparency regarding your study data. Here is the brief summary of how your information is treated:

Zero Advertising Trackers

We do not deploy Meta Pixel, Google Analytics, ad networks, or behavioral ad brokers.

Zero Commercial Data Sales

Your test scores, mock attempts, and profile details are never rented or sold.

Essential Cookies Only

Only secure authentication cookies and local caching of your in-progress mock tests are used.

Minor & Child Data Notice

We do not currently operate a signup age gate. Read Section 9 for full child data disclosures.

Section 4

4. Who We Are (Data Fiduciary Identity)

Under the Digital Personal Data Protection Act, 2023, the entity determining the purpose and means of processing your personal data is the Data Fiduciary:

Platform / Operating Name:TaiyariBook
Platform Brand & Website:TaiyariBook (https://www.taiyaribook.in)
Public Address:Aligarh, Uttar Pradesh – 202002, India
Privacy & Grievance Contact:Grievance & Privacy Contact — TaiyariBook
Privacy / Grievance Email:support@taiyaribook.in

TaiyariBook operates as an independent educational examination preparation platform. References in this policy to “TaiyariBook”, “we”, “us”, or “our” refer to the operators and platform administration of TaiyariBook.

Section 5

5. What Personal Data We Collect

We adhere strictly to the data minimisation principle. We only collect personal data directly necessary for account creation, exam practice, CBT simulation, and student assistance. Based on our codebase audit, the specific personal data categories stored in our database comprise:

Data CategorySpecific Fields CollectedPurpose & Context
User Profilesname, email, avatar_url, role, preferred_language, target_exams[], preparation_level, streak_count, last_active_date, date_of_birth (optional), gender (optional)Account identification, personalized preparation dashboard, daily practice streaks.
Exam Preferencesselected exam IDsMatching relevant syllabus, PYQ feeds, and test series.
Bookmarkscontent_type, content_id, metadataSaving questions and study materials for later revision.
Test Attempts & Answersmock test scores, timings, selected optionsReal-time CBT mock test evaluation, section analysis, rank estimation.
Question Practice Historyquestion_attempts, correctness, timing, subject/topic/exam associationsTracking practice drill performance and accuracy metrics.
Performance Summaryaggregated accuracy, topic-level scores, weak topic IDsDiagnostic insights to help candidates identify weak areas.
Revision Statespaced-repetition intervals and memory stateScheduling spaced-repetition revision for difficult questions.
Daily Study Plansdaily task completion statusTracking syllabus progress against target exam deadlines.
Support Requestsname, email, query_type, message, admin_notesStudent issue resolution and technical support inquiries.
Question Reportsuser_id, report_type, error detailsCommunity error flagging for question correction and editorial quality.
Internal Staff & Administrative Data: Internal staff audit logs (admin_activity_logs, admin_users) record admin email addresses, role configurations, and audit timestamps. These records are strictly restricted to staff and do not form part of student personal data.
Section 6

6. How We Use Personal Data

We process your personal data solely for the following defined, specified, and legitimate educational purposes:

  • Account Provision & Authentication: Creating, maintaining, and securing your profile via password or Google OAuth.
  • Exam Simulation & Scoring: Recording question choices, calculating percentile scores, timing accuracy, and rendering CBT answer keys.
  • Study Guidance & Spaced Repetition: Highlighting weak topics and surfacing spaced repetition prompts based on past incorrect attempts.
  • Platform Security: Detecting suspicious logins, brute-force attempts, automated question scraping, and enforcing role-based permissions.
  • Support & Communication: Responding to user support inquiries, technical trouble tickets, and question discrepancy reports.
  • Platform Quality: Aggregated, anonymized performance metrics across test series to calibrate question difficulty indices.
Section 7

7. Legal Basis & Grounds for Processing

Under Indian law, including Section 4 and Section 7 of the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000, we process personal data under the following lawful grounds:

A. Consent (Section 6, DPDP Act 2023)

Freely given, specific, informed, and unconditional consent provided by you when registering an account, completing optional onboarding questions (DOB, gender), or submitting a support request.

B. Certain Legitimate Uses (Section 7, DPDP Act 2023)

For responding to medical emergencies, safety concerns, enforcing legal rights, or complying with applicable judicial orders and statutory government disclosures under Indian law.

C. Contractual Necessity

Processing necessary to deliver requested educational services, evaluate mock test attempts, and maintain persistent study progress across sessions.

Section 8

8. Consent & Consent Withdrawal

Where processing is based on consent, you have the right to withdraw your consent at any time. Under the DPDP Act, withdrawing consent must be as simple as giving it.

How to Withdraw Consent:

You may withdraw consent for optional profile data (such as Date of Birth or Gender) directly by modifying or clearing your profile settings at any time.

To withdraw consent for the overall processing of your account data, you may submit a formal withdrawal request to our privacy desk at support@taiyaribook.in.

Please note that withdrawing consent for fundamental service data (email/account identifier) will prevent us from continuing to provide account-dependent features, including saved mock test records, bookmarks, and performance summaries.

Statutory Assessment
Section 9

9. Children & Minor Users (DPDP Section 9 Compliance Notice)

Because TaiyariBook provides competitive examination prep (e.g. CUET UG, NEET UG, SSC CHSL) that students often take at age 16–18, a significant portion of our candidate community may be individuals under eighteen (18) years of age (“children” under Section 2(f) of the DPDP Act, 2023).

Current Technical Reality & Transparent Gaps

  • No Signup Age Gate: Account creation currently requires only an email, password, and name (or Google OAuth). No age gate or mandatory Date of Birth is enforced at initial signup.
  • Optional Onboarding DOB: In onboarding, Date of Birth is optional (validated between 10 and 90 years if provided).
  • No Parental Consent Mechanism Yet: There is currently no verifiable parental or guardian consent workflow implemented on the platform.

Inherent Protective Defaults Already Built Into TaiyariBook

  • Prohibition of Behavioral Advertising: In strict compliance with the spirit of Section 9(3) of the DPDP Act, TaiyariBook does not engage in targeted advertising, behavioral tracking, or profiling directed at minors (or any other user).
  • No Harmful Processing: We do not conduct processing that causes detrimental effects on the well-being of a child (Section 9(2)).
  • Explicit Preferences Only: Content customization is driven strictly by explicit candidate exam choices (e.g., choosing “SSC CGL” or “NEET UG”), never by covert behavioral surveillance.

Roadmap Notice: As the Central Government formally notifies the commencement of Section 9 and the detailed rules for verifiable parental consent under the DPDP Rules, 2025, TaiyariBook is actively preparing an age-verification and guardian-consent workflow to achieve full statutory compliance.

Section 10

10. Educational Personalisation vs Behavioral Tracking

We draw a strict distinction between educational personalization and commercial tracking:

What We Do (Educational)

  • Display PYQs and mocks matching your chosen target exam.
  • Highlight topics where your mock test accuracy is low.
  • Schedule spaced repetition for questions you answered incorrectly.

What We Never Do (Commercial)

  • No cross-site tracking across other websites or apps.
  • No inference of psychometric or commercial purchasing profiles.
  • No selling of candidate performance profiles to third-party advertisers.
Section 11

11. Cookies & Similar Technologies

TaiyariBook uses only strictly necessary cookies and local browser storage essential for delivering the application. We do not use third-party advertising or cross-site tracking cookies.

Item / KeyTypePurpose & Function
sb-*-auth-tokenHTTP Cookie (Essential)Maintains your authenticated session securely via Supabase SSR and Next.js middleware.
taiyari_target_exam_*Browser localStorageCaches your active target exam selection client-side for rapid page rendering.
taiyari_test_attempt_*Browser localStorageAuto-saves unsubmitted test answers locally during a live mock test to protect against accidental browser refreshes.
taiyari_last_result_*Browser localStorageTemporarily caches your latest scorecard for instant display without re-querying the database.
Absence of Cookie Banner: Under applicable privacy standards, strictly necessary session cookies do not require prior consent banners because the service cannot function without them. If any optional analytics or non-essential cookies are introduced in the future, a consent banner will be deployed beforehand.
Section 12

12. How We Share Personal Data

We do not sell, rent, trade, or commercially transfer personal data. Your personal data is shared strictly with infrastructure service providers (“Data Processors”) operating under confidentiality obligations to support platform hosting, database operations, and authentication:

  • Cloud database and authentication provider (Supabase Inc.)
  • Hosting infrastructure and edge distribution (Vercel Inc.)
  • Identity provider where you elect single sign-on (Google LLC)
  • Law enforcement authorities solely when required under binding Indian judicial process.
Section 13

13. Third-Party Services & Processors

Based on a verified codebase audit of all dependencies and network routes, the following third-party services are engaged in platform operations:

Third-Party ServiceRole / PurposePersonal Data Involved
SupabaseDatabase hosting, user authentication, file storageAccount profiles, credentials, mock attempts, study records
VercelWeb application hosting, edge CDN, cookieless page traffic telemetryTechnical request logs, IP addresses (aggregated, no user tracking)
Google OAuthOptional single sign-in authenticationName, email, and Google profile picture metadata (only if selected)
Google Gemini / OpenAIAdmin-only OCR: Digitizing public exam cut-off tables from public PDF notificationsNone. Admin-internal OCR only; no user PII or student data is passed.

Services Explicitly Ruled Out:

Our audit confirmed that TaiyariBook does not use: Meta (Facebook) Pixel, Google Tag Manager, Google Analytics, Hotjar, Microsoft Clarity, PostHog, Sentry, external email marketing tools (e.g. Mailchimp), WhatsApp Business APIs, or payment gateways (Razorpay, Stripe, etc.). All mock tests and materials are currently accessible without commercial transaction gateways.

Section 14

14. Cross-Border Data Processing

Under Section 16 of the Digital Personal Data Protection Act, 2023, personal data may be transferred outside India for processing unless explicitly restricted or blacklisted by the Central Government.

TaiyariBook uses cloud services provided by Supabase and Vercel. While these providers utilize global infrastructure networks, data processing agreements require adherence to standard contractual protections, encryption during transit and rest, and strict access controls.

Audit Note: Verification of the exact physical cloud region (e.g. AWS Mumbai ap-south-1 vs other regions) is flagged as an active engineering review task. We do not transfer personal data to any foreign jurisdiction restricted by the Government of India.

Section 15

15. Data Retention & Storage Limitation

In accordance with the storage limitation principle of the DPDP Act, personal data is retained only for as long as is reasonably necessary to fulfill the educational purposes for which it was collected, or as required by applicable statutory record-keeping obligations.

Active Accounts:Personal data, mock test records, and revision bookmarks are retained as long as your account remains active so that you can review past scores across multi-year exam cycles.
Support Records:Support queries and discrepancy reports are maintained to ensure content quality and audit question corrections. When user accounts are deleted, support requests are dissociated (ON DELETE SET NULL) and anonymized.
Engineering Roadmap on Retention Schedules:The platform does not currently run automated scheduled database purge jobs for inactive accounts. Formalizing automated purge windows (e.g. 90-day technical log retention) is part of our scheduled engineering roadmap.
Section 16

16. Data Security Measures

In accordance with reasonable security standards under Rule 5 of the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011, and in preparation for applicable standards under Section 8(5) of the DPDP Act, 2023 as provisions commence, the following are security measures currently implemented by TaiyariBook:

Row Level Security (RLS)

Database-level isolation ensures candidates can strictly query only their own profile, attempts, and bookmarks.

Admin MFA / TOTP (AAL2)

Admin dashboard access mandates multi-factor TOTP authentication enforced via Next.js middleware.

Role Escalation Guard

Database trigger prevent_role_self_escalation blocks unauthorized elevation of privileges.

Encryption in Transit (TLS)

All web traffic is strictly served over modern HTTPS with automated canonical domain redirects.

Security Disclaimer: While we enforce robust security controls, no internet transmission or electronic storage method is 100% infallible. We continuously monitor and improve our defenses to mitigate emerging risks.

Section 17

17. Personal Data Breaches

As the breach notification provisions of the DPDP Act, 2023 commence in phased rollout, in the event of a confirmed personal data breach affecting your data, TaiyariBook will notify the Data Protection Board of India (DPBI) and affected Data Principals in the form and manner prescribed by applicable statutory rules.

Incident Response Workflow:

Upon detecting an incident, our engineering team executes containment measures, conducts impact assessments, notifies relevant authorities including the Indian Computer Emergency Response Team (CERT-In) under applicable cyber security guidelines, and publishes guidance to candidates regarding protective actions.

Section 18

18. Your Privacy Rights (DPDP Chapter III)

As the statutory rights under Chapter III of the Digital Personal Data Protection Act, 2023 commence under the official phased rollout, Data Principals will be entitled to exercise the rights outlined below. TaiyariBook currently facilitates access, correction, and account deletion requests under applicable law and existing platform procedures:

1. Right to Access Information (Sec 11):Obtain a summary of personal data being processed and identity of third-party processors.
2. Right to Correction & Updating (Sec 12):Correct inaccurate or misleading data, complete incomplete records, and update details.
3. Right to Erasure (Sec 12):Request erasure of personal data that is no longer necessary for the specified purpose.
4. Right of Grievance Redressal (Sec 13):Readily accessible means of grievance redressal regarding platform obligations.
5. Right to Nominate (Sec 14):Nominate another individual to exercise your rights in the event of death or incapacity.
6. Right to Withdraw Consent:Withdraw previously provided consent at any time through our documented procedures.
Section 19

19. How to Exercise Your Rights

To exercise any of your statutory rights, you may contact our designated privacy desk:

Email Address:support@taiyaribook.in
Subject Line Format:DPDP Rights Request — [Your Name / Account Email]
Identity Verification:Requests must originate from the registered account email to protect against unauthorized disclosures.
Section 20 (Statutory Redressal)

20. Grievance Redressal Mechanism

In compliance with the Information Technology Act, 2000, IT (Intermediary Guidelines) Rules, 2021, and the Digital Personal Data Protection Act, 2023, TaiyariBook maintains an official grievance channel.

Grievance Officer Contact Details:

Designation / Contact:Grievance & Privacy Contact — TaiyariBook
Official Grievance Email:support@taiyaribook.in
Postal / Physical Address:Aligarh, Uttar Pradesh – 202002, India
Redressal Timeline & Escalation:

We will acknowledge receipt of your grievance and endeavor to resolve complaints within the period mandated by applicable statutory rules.

If you do not receive a resolution within the statutory timeframe, or are dissatisfied with the outcome, the Data Protection Board of India (DPBI) has been established under the DPDP Act, 2023, and applicable statutory grievance and escalation mechanisms will apply as the relevant provisions commence.

Section 21

21. Account Deletion Process

We respect your right to erasure. When an account is permanently deleted, all personal records in our database cascade automatically per our schema constraints:

What Happens Upon Deletion:

  • Completely Erased (ON DELETE CASCADE): Your profile, test attempts, individual answers, practice question attempts, bookmarks, revision memory states, and daily study plans are permanently purged from the database.
  • Anonymized (ON DELETE SET NULL): Any error reports or support inquiries you submitted have your personal user identifier removed, preserving only the technical correction for question quality without linking to your identity.
Current Deletion Workflow:

A self-service “Delete My Account” button is currently undergoing security validation and is slated for upcoming engineering release. Today, you can request account deletion by emailingsupport@taiyaribook.in with the subject “Delete My Account” from your registered email address.

Section 22

22. Third-Party Links & External Portals

Our platform provides convenience links to external official government portals (such as SSC, UPSC, NTA, and State PSC application links in our Live Forms section) and social media channels (YouTube, Instagram).

These external sites are operated by independent third parties governed by their own privacy policies. TaiyariBook is not responsible for the privacy practices, content, or security of external websites. Candidates are advised to review the privacy disclosures of government portals before entering sensitive data.

Section 23

23. Government & Legal Disclosures

We may disclose personal data to law enforcement, statutory bodies, or government agencies strictly when legally mandated to do so under:

  • Valid court orders or summons issued by an Indian court of competent jurisdiction.
  • Statutory requests under the Code of Criminal Procedure, 1973 (CrPC) / Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS).
  • Directives from the Indian Computer Emergency Response Team (CERT-In) under Section 70B of the IT Act.
Governing Law & Jurisdiction:

Subject to applicable law, matters relating to this Privacy Policy and the operation of the Platform may be addressed through the competent courts/authorities having jurisdiction in Aligarh, Uttar Pradesh, India.

Section 24

24. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect technical improvements, platform updates, or statutory rules notified under the DPDP Act, 2023.

When material changes occur, we will update the “Last Updated” date at the top of this document and, where legally required, notify registered users via an in-app banner or account notification. Continued use of the platform after the effective date of an updated policy constitutes acknowledgment of the revised terms.

Section 25

25. Contact Us

For privacy questions, clarification on our DPDP compliance roadmap, or general inquiries:

Platform / Operating Name: TaiyariBook
Privacy & Grievance Contact: Grievance & Privacy Contact — TaiyariBook
Email: support@taiyaribook.in
Address: Aligarh, Uttar Pradesh – 202002, India

Candidates with general academic or platform issues may also use our standard Help & Support Desk.