Privacy Policy
This Privacy Policy explains how Percentyle ("we", "us" or "our") collects, uses, stores, shares and protects your personal data when you use the Percentyle website and Service at percentyle.in and its subdomains. We act as the data fiduciary for the personal data we process about you, and we collect only what we need to run the Service.
By using the Service, you consent to this Policy. If you do not agree, please do not use the Service. This Policy forms part of our Terms of Use.
1. Who we are
Percentyle is an independent, personally operated study tool. For any privacy question or request, contact us at hello@percentyle.in. This address also serves as the point of contact for grievances under the Digital Personal Data Protection Act, 2023 (the "DPDP Act").
2. What we collect
2.1 Account information. When you sign in, we receive and store your email address, and, where you use Google sign-in, the basic profile information Google provides to identify your account. Sign-in and account management are handled by our authentication provider, Supabase.
2.2 Study data. So your progress can follow you across devices, we store the data you generate in the app, including your error log, test and mock history, practice results, saved words, bookmarks, notes, target percentile and study settings. This data is linked to your account.
2.3 AI assistant messages. If you use the AI assistant, the text of your message is processed to generate a reply, as described in section 5.
2.4 Local data. We use your browser's local storage to keep you signed in, remember your preferences and hold work in progress. Much of your study data lives first in local storage on your device, with a copy synced to your account when you are signed in.
2.5 Limited technical data. As with most websites, our hosting and infrastructure providers may process basic technical information such as IP address, browser type and request logs, for security, reliability and abuse-prevention. We do not use advertising or cross-site tracking cookies, and we do not build advertising profiles about you.
3. How we use your data
We use your data only to: create and secure your account; provide, sync and personalise the Service; remember your progress and preferences; operate the AI assistant when you choose to use it; maintain the security, integrity and reliability of the Service and prevent abuse; respond to your requests and grievances; and comply with applicable law.
4. Legal basis and consent
Under the DPDP Act, we process your personal data on the basis of the consent you give by signing in and using the Service for the purposes stated in this Policy, and on the basis of certain legitimate uses permitted by law, such as security and the prevention of fraud or abuse. You may withdraw your consent at any time as described in section 9, though this will not affect processing already carried out before withdrawal.
5. The AI assistant
When you send a message to the AI assistant, that message is transmitted to a third-party AI provider (currently Groq) to generate a response. Please do not include sensitive personal information in assistant messages. The provider processes the message to return a reply, subject to its own terms and privacy practices. We do not use your assistant messages to identify you or to advertise to you.
6. Cookies and local storage
We use only the storage necessary for the Service to work: a session token to keep you signed in, and local storage for your preferences and study data. We do not use third-party advertising or analytics cookies that track you across other websites. You can clear this data at any time through your browser settings, though doing so will sign you out and remove locally held work.
7. Service providers and data sharing
7.1 We share data only with the service providers that help us run the Service, acting as our data processors:
- Supabase, for authentication and database storage of your account and study data;
- Groq, for generating AI assistant responses from the messages you send;
- Vercel, for website hosting and delivery;
- Google, when you choose to sign in with Google;
- public dictionary and word-lookup services (such as dictionaryapi.dev and the Datamuse API), which receive only the individual word you look up and no account information.
7.2 We do not sell, rent or trade your personal data, and we do not share it for advertising.
7.3 We may disclose data if required to do so by law, court order or a lawful government request, or where reasonably necessary to protect our rights, our users or the Service.
8. International transfers
Some of our providers process and store data on servers located outside India. Where this happens, we rely on providers that offer appropriate safeguards, and any such transfer is made in accordance with applicable law.
9. Your rights
Subject to applicable law, including the DPDP Act, you may:
- access the personal data we hold about you and request a summary of how it is processed;
- correct or update inaccurate or incomplete data;
- request erasure of your account and its associated data;
- withdraw your consent to further processing;
- nominate another individual to exercise your rights in the event of your death or incapacity;
- raise a grievance with us.
To exercise any of these, email hello@percentyle.in. You can also view and edit much of your study data directly in the app, and you can clear local data by signing out and clearing your browser storage. We will respond within a reasonable time and as required by law.
10. Data retention
We keep your account and study data for as long as your account is active or as needed to provide the Service. When you ask us to delete your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it to comply with law, resolve disputes or enforce our agreements.
11. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and the access controls offered by our providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your own sign-in secure.
12. Children
The Service is intended for adults (18 and over) preparing for the CAT and similar examinations. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.
13. Changes to this Policy
We may update this Policy as the Service evolves or as the law requires. The "last updated" date above shows the latest version. Material changes take effect when posted, and your continued use of the Service constitutes acceptance.
14. Grievances and contact
If you have any question, request or grievance about your privacy or this Policy, contact the operator and grievance contact at hello@percentyle.in. We will acknowledge and address grievances in accordance with the DPDP Act and other applicable Indian law.