Privacy policy
Last updated: 3 November 2026
We collect what we need to run your account, apply plan limits and improve PrepFlip. Your study material itself stays on your device.
What we store on our servers
Your name, email address and a securely hashed password; whether your email is confirmed; your plan and its expiry date; payment records (order id, payment id, amount, date); and counts of how many mocks, uploads, Smart Lab drills and AI credits you used in each period, to apply plan limits.
Activity log
We keep a log of account activity: sign-ups, log-ins (including failed attempts), password changes, payments, plan changes and when you reach a plan limit, with the time, IP address and browser. The app also reports summaries of your practice: when you start or submit a mock (its title, subject and your score), when you generate an AI mock (its settings and how many questions passed verification) and when you finish a study session. PrepFlip administrators use this log to support you, prevent abuse and improve the product. It never contains your uploaded files, flashcards or individual answers.
What stays on your device
Flashcards, uploaded spreadsheets, question banks, individual mock answers, detailed analytics and settings are stored in your browser (IndexedDB) and are not sent to us. Clearing your browser data deletes them, so use Backup & restore to keep a copy.
Payments
Payments are handled by Razorpay. We receive the payment status and identifiers, never your card number, UPI PIN or bank credentials. Razorpay’s own privacy policy applies to the data you give them.
AI providers
If you add your own AI key, question-generation requests go directly from your browser to that provider (OpenRouter or Anthropic) under their terms. They contain the topic and settings of the mock, not your personal details.
Cookies
We use one essential, http-only cookie to keep you logged in. We do not use advertising or tracking cookies.
Retention and deletion
You can delete your account at any time from Account & billing. This removes your profile, sessions and usage counts. Payment records and the activity log are kept, without a link to your account, for as long as tax and accounting law requires and to prevent abuse.
Security
Passwords are hashed with scrypt, sessions can be revoked from any device, and all traffic uses HTTPS.
Your rights
You can ask for a copy of the personal data we hold about you, or for it to be corrected or deleted, by contacting us.
Contact
- Business:
- PrepFlip
- Email:
- my6056889@gmail.com