Privacy Policy
Last updated: 29 July 2026
Privacy at a glance
- We collect only the information needed to provide Examfront.
- We never sell your personal data.
- We don't show ads or track children across websites.
- Parents control accounts for children under 18.
- You can ask us to delete your data at any time.
- Questions? Email [email protected].
This Privacy Policy explains how Examfront collects, uses, shares and protects your personal data. It is written to comply with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"). Because Examfront is built for CBSE Class 10 students — many of whom are children under the age of 18 — this policy gives special attention to the protection of children's data.
In this policy, "we", "us", "our" and "Examfront" refer to Examfront operated by Examfron ltd, the Data Fiduciary (the organisation responsible for your data). "You" refers to the person whose personal data we process — called a Data Principal under the DPDP Act. Where you are a child, "you" includes your parent or lawful guardian who provides consent on your behalf. After this point we simply say "Examfront" and "you".
A note for students and parents
Examfront is intended for students preparing for the CBSE Class 10 board examinations. Many of our users are under 18 and are treated as children under the DPDP Act. If you are under 18, you may use Examfront only with the consent of a parent or lawful guardian, and we will seek verifiable parental consent before processing your personal data. We do not use children's data for tracking, behavioural monitoring, or targeted advertising, and we never sell it. Parents can contact us at any time to review or delete their child's account and data.
1. What personal data we collect
We collect only the data we need for the purposes described in this policy.
a) When you request early access (waitlist)
- Name (optional)
- Email address (required — this is how we contact you)
- Mobile number (optional)
- Your consent to be contacted, and the page you signed up from
b) When you create an account and use the app (after launch)
- Account details — name, email and/or mobile number used to sign in
- Learning data — your quiz answers, practice activity and mistakes. We use these to recommend what you should practise next, build your weekly test, and show your progress and mastery chapter by chapter
- Payment data — if you subscribe to Premium, payments are processed by our payment gateway (Razorpay). We receive confirmation of payment but do not store your full card or banking details on our systems
c) Collected automatically
- Technical data — IP address, browser and device type, and basic security/analytics signals needed to keep the service running, secure and fast. This is handled through our infrastructure providers (see Section 6).
What we do not collect
To be clear, Examfront does not collect:
- your school marks or report cards (unless you choose to enter them);
- your contacts, photos or files;
- access to your camera or microphone;
- your precise location;
- your Aadhaar number or any government ID;
- biometric information (fingerprints, face scans, etc.).
2. Why we use your data
We process your personal data on the basis of your consent (and, for children, the verifiable consent of a parent or guardian). We use your data to:
- Contact you about early access and the launch of Examfront, if you joined the waitlist;
- Create and operate your account and provide the learning service;
- Personalise practice, tests and mistake analysis to your individual progress;
- Process Premium subscriptions and send related confirmations;
- Keep the service secure, prevent misuse, and comply with law;
- Respond to your questions and grievances.
We will not use your data for a new, unrelated purpose without asking you again.
3. Children's data, age, and parental consent
We take special care with any user we know or reasonably believe to be a child (under 18):
- How we determine age. During registration we may ask your date of birth or age so we can tell whether parental consent is required.
- How parental consent works. If you are under 18, we will ask for a parent or guardian's email or mobile number, and we may ask them to confirm their consent before your account becomes active. (We may update the exact method over time, but the principle stays the same: a parent confirms first.)
- We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.
- We do not process a child's data in a way likely to cause a detrimental effect on their well-being.
- A parent or guardian may, at any time, review the child's data, withdraw consent, or ask us to delete the child's account and data using the contact details in Section 9.
If you believe a child has provided us personal data without appropriate parental consent, please contact us and we will take steps to delete it.
4. We never sell your data
We never sell your personal data, and we do not share it with advertisers. There are no ads inside Examfront and nothing is sold to you inside a lesson.
5. Consent, and how to withdraw it
You give consent when you submit your details — for example, by ticking the consent box on the early-access form or by creating an account. You may withdraw your consent at any time; it is as easy to withdraw as it was to give. You can withdraw consent through your account settings (once available), by unsubscribing from our emails, or by contacting us (Section 9). Withdrawing consent will not affect processing already carried out while consent was valid, and may mean we can no longer provide parts of the service.
6. Who we share data with
We share personal data only with service providers ("Data Processors") that help us run Examfront. We choose these providers carefully and require them, by contract, to protect your data and use it only on our instructions:
| Provider | Purpose |
|---|---|
| Microsoft Azure | Cloud hosting, application servers and database |
| Cloudflare | Content delivery, security and basic traffic analytics |
| Razorpay | Payment processing for Premium subscriptions (after launch) |
| MSG91 | Sending one-time passwords and SMS (after launch) |
| Azure Communication Services | Sending transactional and account emails |
Some of these providers may process data on servers located outside India. Where that happens, we rely on the transfer mechanisms permitted under the DPDP Act and take reasonable steps to ensure your data remains protected. We may also disclose data if required to do so by law or a valid legal order.
7. How long we keep your data
We keep your personal data only for as long as it is needed, or as required by law. In practice:
- Waitlist details: kept for up to 12 months after launch to contact you, unless you ask us to delete them sooner;
- Account and learning data: kept while your account is active;
- After you delete your account: deleted or anonymised within 30 days, except where we must keep certain records longer by law;
- Payment records: kept as required under applicable tax and accounting law.
When data is no longer needed — or when you withdraw consent and there is no other lawful reason to keep it — we delete or anonymise it.
8. How we protect your data
We use reasonable technical and organisational security safeguards to protect your data, including encryption in transit and at rest, access controls, restricted database access, and secure credentials. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as required by the DPDP Act. No method of transmission or storage is completely secure, but we work to protect your data and review our safeguards regularly.
If you believe your account has been compromised, please contact us immediately at [email protected] so we can help secure it.
9. Your rights, and how to reach us
Under the DPDP Act, you have the right to:
- Access — obtain a summary of the personal data we hold about you and how we process it;
- Correction and erasure — ask us to correct inaccurate data or delete data that is no longer needed;
- Grievance redressal — raise a complaint with us about how we handle your data;
- Nomination — nominate another person to exercise your rights in the event of death or incapacity;
- Withdraw consent — as described in Section 5.
To exercise any of these rights, contact our Grievance Officer:
Grievance Officer: Ms. D Kaur
Email: [email protected]
Address: Hi-Tech City, Hyderabad, India]]
We aim to respond within 7 days, and in any case within the timelines set out under the DPDP Act and Rules. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.
10. Cookies and analytics
Examfront uses only the cookies and similar technologies necessary to operate the service (for example, to keep you signed in) and basic, privacy-respecting analytics provided through Cloudflare to understand aggregate traffic and keep the service secure. We do not use advertising cookies or cross-site tracking.
11. Use of AI
Examfront may use artificial intelligence to help generate explanations or study recommendations. Where we do, your personal data is not used to train public AI models without your permission, and any such feature is designed to support your learning, not to profile you.
12. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Please review this page periodically.
13. Contact us
For any questions about this Privacy Policy or your personal data, contact us at [email protected].
Our privacy promise
We built Examfront for students. Our goal is to help you learn mathematics — not to collect unnecessary personal information. We collect only what we need to provide the service, protect your account, and improve your learning. That's it.