scorebuddy.in · Effective from 29 September 2026 · Last updated 29 September 2026
This policy explains what personal data ScoreBuddy collects from students and parents, why we collect it, who we share it with, and the rights you have over it under India's Digital Personal Data Protection Act, 2023.
The website and apps at scorebuddy.in and our course site learn.scorebuddy.in (“ScoreBuddy”, “the Platform”, “we”, “us”, “our”) are owned and operated by Sweta Sharma, a sole proprietor carrying on business as ScoreBuddy in India.
Under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Digital Personal Data Protection Rules, 2025, we are the Data Fiduciary for the personal data described in this policy. That means we decide why and how your data is used, and we are accountable for it. You are the Data Principal — the person the data belongs to.
This policy applies to: the website at scorebuddy.in, any ScoreBuddy mobile application, our online courses, practice tests and mock tests, recorded video lessons, live online classes, and our email, WhatsApp and phone support channels.
Who it applies to: students who register on the Platform, parents or guardians who create or supervise a student account, and anyone who visits the Platform without registering.
What it does not cover: websites, apps or services operated by other companies that we link to or embed. Their own privacy policies apply to them.
If you do not agree with this policy, please do not register for or use the Platform.
Most students preparing for IPMAT and similar entrance exams are 17 or 18 years old. Under Indian law, anyone below the age of 18 is a child, and their data is protected more strictly than an adult's. Please read this section carefully.
A parent or legal guardian must consent before we process a child's data. If the student is under 18, the account must be created or approved by a parent or legal guardian, who gives this consent on the student's behalf. We are adding a verified consent step — a one-time code sent to the parent's mobile number or email — which will record who consented, when, and for what. Until it is in place, a parent or guardian who has not agreed to their child's account can write to info.scorebuddy@gmail.com and we will close the account and delete its data.
We do not track children for advertising. For any account flagged as belonging to a person under 18, we do not carry out behavioural monitoring, build advertising profiles, or show targeted advertisements. This is a legal prohibition under the DPDP Act, and we apply it as a default setting rather than something you have to opt out of.
Promotional use is covered by the parent's consent. The consent a parent or guardian gives at sign-up includes permission for us to use the student's name, photograph, city, school or college, test scores, rank and achievements in ScoreBuddy's own promotional material — our website, social media, advertisements, brochures and result announcements. Showcasing our students' achievements is not advertising targeted at children, which we do not do. A parent may withdraw this permission at any time by writing to info.scorebuddy@gmail.com; we will stop using the material in anything published after that, though we are not obliged to recall material already printed, published or distributed.
What a parent or guardian can do at any time:
Age-appropriate use. We only ask children for the data we actually need to teach them and track their progress. We do not ask students for Aadhaar numbers, PAN, bank account details, caste, religion, or any information about their health.
If you believe a child has registered without parental consent, write to us at info.scorebuddy@gmail.com and we will verify and act on it promptly.
This is the full list of data we collect, item by item.
| Category | What it includes | How we get it |
|---|---|---|
| Account and identity | Full name, mobile number, email address, password (stored in encrypted form), profile photo if you upload one | You give it at sign-up |
| Parent or guardian details (for students under 18) | Parent's name, mobile number, email address, relationship to the student, and the record of their consent | The parent gives it when they register or approve the account, or when they contact us |
| Education profile | Current class or year, school or college name, target exam (IPMAT Indore, IPMAT Rohtak, JIPMAT, CAT or others), target year, city, preferred language | You give it at sign-up or in your profile |
| Course and enrolment data | Courses and batches you have joined, enrolment dates, validity period, coupon or referral codes used | Generated when you enrol |
| Test and performance data | Answers you submit, time spent per question, attempts, scores, accuracy, sectional and topic-wise results, percentile, All India Rank, bookmarks, doubts and notes | Generated as you use the Platform |
| Learning activity | Videos watched and how much of each, lessons opened, downloads, login history, streaks | Generated as you use the Platform |
| Live class data | Attendance, join and leave times, chat messages in class, questions asked, and — where a session is recorded — your audio and video if you choose to switch them on (see section 8) | Generated during live classes |
| Payment data | Amount, date, order ID, payment status, invoice details, and the last four digits and type of the instrument used | From our payment gateway |
| Device and technical data | IP address, device type and model, operating system, browser type and version, app version, crash logs, approximate location derived from IP (city level) | Collected automatically |
| Communications | Emails, WhatsApp messages, support tickets, feedback, and call notes when you contact us | You give it when you contact us |
Full card or bank details are never stored by us. When you pay, you are handed over to a payment gateway that is certified to handle card data. We receive only the confirmation and the reference details listed above.
Sensitive categories we do not collect. We do not collect Aadhaar numbers, PAN, biometric data, caste, religion, political opinions, sexual orientation, or health information. If you send any of this to us unprompted — for example in a support message — we will delete it rather than store it.
We use personal data only for the purposes below. We do not sell your data to anyone.
| Purpose | Data used | Our legal basis |
|---|---|---|
| Create and run your account, log you in, keep it secure | Account and identity, device data | Your consent, given at sign-up |
| Give you access to the courses, tests and videos you enrolled in | Account, enrolment, learning activity | Your consent; performance of our contract with you |
| Score your tests and show your results, ranks and percentiles | Test and performance data | Your consent |
| Generate personalised strength and weakness analysis and practice recommendations | Test and performance data (see section 5) | Your consent |
| Run live classes and mark attendance | Live class data | Your consent |
| Take payment, issue invoices, process refunds | Payment data | Your consent; legal obligation under tax law |
| Send you class reminders, test schedules, result alerts and account notices | Name, mobile, email | Your consent; necessary to deliver the service |
| Send you offers about other ScoreBuddy courses | Name, mobile, email | Your consent, which you can withdraw at any time |
| Promote ScoreBuddy using your name, photograph, results and testimonials | Name, photograph, city, school or college, scores, rank, results, testimonials | Your consent, given at sign-up (see below) |
| Answer your questions and resolve complaints | Communications, account data | Your consent; legal obligation for grievance redressal |
| Detect cheating, misuse, sharing of paid content, fraud and security incidents | Device data, login history, test activity, video watermarks | Legitimate use under the DPDP Act |
| Enforce our Terms of Service, including against account sharing and piracy of our content | Device data, login history, IP address, session records | Legitimate use under the DPDP Act |
| Understand which features and lessons work, and fix bugs | Learning activity, device data, crash logs — in aggregated or de-identified form wherever possible | Your consent |
| Comply with law, court orders and lawful requests from authorities | Whatever is legally required | Legal obligation |
Marketing is separate and optional. Refusing marketing messages does not affect your access to any course you have paid for. You can withdraw marketing consent at any time by writing to info.scorebuddy@gmail.com.
We will not use your data for a new purpose that is not listed above without telling you and, where the law requires it, asking for fresh consent.
By registering on the Platform you agree that ScoreBuddy may use the following in its marketing, publicity and promotional material:
This material may appear on our website and apps, on social media, in paid advertisements, in brochures and posters, in result announcements, and in communications to other students and parents. The permission is worldwide and royalty-free, lasts for the duration of your use of the Platform and afterwards, and you will not be paid for it.
If you would rather not appear in our marketing, write to info.scorebuddy@gmail.com and we will stop using your name, photograph and results in material published after that. We cannot recall material that is already printed, published or distributed. Withdrawing this permission does not affect your access to any course you have paid for.
For students under 18, this permission comes from the parent or guardian who gave consent at sign-up, and the parent can withdraw it in the same way.
The Platform uses artificial intelligence in two ways: to generate study material — questions, solutions, explanations, summaries and practice sets — and to turn your test results into personalised study guidance. Because both are automated, we explain plainly what they do and where they fall short.
What it uses. Only your own test and practice activity on the Platform — which questions you got right or wrong, how long you took, which topics and question types you struggle with, and how your scores change over time. It also compares your results against the anonymised, aggregated results of other students who took the same test, so that we can show percentiles and ranks.
What it produces. Topic-wise and question-type strength and weakness reports, accuracy and speed insights, suggested revision topics, recommended practice sets, and predicted score ranges.
What it does not do:
AI-generated content can be wrong. A significant part of the questions, solutions, explanations and study notes on the Platform is generated or assisted by artificial intelligence. AI systems make mistakes — a stated answer may be incorrect, a working may skip or misstate a step, a formula or fact may be wrong, and an explanation may be misleading. We review material where we can, but we do not and cannot check every item, and we give no warranty that any content on the Platform is accurate, complete, error-free or current. Treat everything here as study practice, not as an authoritative source. Verify anything that matters against your textbook, the official exam body's material, or your teacher, and tell us at info.scorebuddy@gmail.com if you spot an error so we can fix it. ScoreBuddy is not liable for any loss arising from your reliance on Platform content, including any effect on your examination performance or admission outcome.
Analysis and predictions are estimates. Strength and weakness reports, predicted scores, percentiles and ranks are calculated from Platform activity alone. They can be wrong, and they are not a prediction or guarantee of your actual result in IPMAT, JIPMAT, CAT or any other examination. No admission, selection or score is promised by anything the Platform shows you.
Human review. If you think an analysis or a score is wrong, write to info.scorebuddy@gmail.com and a person will review it. You can also ask us to stop generating personalised analysis for your account; you will keep access to your raw scores and test papers.
No outside AI service sees your data. Your scores, analysis and recommendations are calculated on our own server. We do not send your answers, results or any other personal data to an external AI provider.
Cookies we need. Some cookies are essential — they keep you logged in, remember your test session so you do not lose answers if the page reloads, and protect against fraud. The Platform cannot work without these.
Analytics. We do not currently use analytics, crash-reporting or session-recording tools on the Platform. Our pages load fonts from Google Fonts, which receives your IP address when your browser downloads a font. If we add an analytics tool, we will update this policy first.
Advertising and marketing pixels. We do not use advertising or tracking pixels on the Platform. If we ever add them to our public marketing pages, we will not run them on accounts belonging to students under 18.
Your choices. Because we use only the cookies and browser storage the Platform needs to work, we do not show a cookie banner. You can block or delete cookies in your browser settings, but you will then be logged out and parts of the Platform will not work.
Do Not Track. Browsers send Do Not Track signals inconsistently and there is no agreed standard for responding to them, so we do not act on them. Use the cookie settings above instead.
We do not sell, rent or trade personal data. We share it only with the service providers we need to run the Platform, and only to the extent each one needs. Each of them is bound by contract to protect your data, use it only for the work we have given them, and delete it when the work ends.
| Who | What they do for us | What they receive |
|---|---|---|
| Razorpay Software Pvt Ltd | Collect payments and process refunds | Name, email, mobile, amount, order details. They handle the card or UPI details directly; we do not see them |
| Hostinger International Ltd (server in Mumbai, India) | Host the Platform, its database and backups | All data stored on the Platform |
| Graphy | Run our course website at learn.scorebuddy.in, including recorded lessons | Name, email, mobile, enrolments, playback and device data |
| The live-class tool named on your batch page (currently our Graphy course site) | Run live online classes | Name, email, attendance times, in-class chat, audio and video if you enable them |
| Resend (email) and MSG91 (SMS) | Deliver login codes (OTPs) and account notices | Email address or mobile number, and the message content |
| Google LLC | “Sign in with Google” (only if you choose it), and web fonts | Your name, email address and profile photo from your Google account when you sign in with Google; your IP address when fonts load |
| Professional advisers | Accounting, tax filing and legal advice | Invoice and payment records only |
Other situations in which we may disclose data:
Aggregated data. We may publish or share statistics that cannot identify anyone — for example “the average accuracy in Quantitative Ability was 62% in this mock test”. This is not personal data.
Attendance and chat. We record who joined, when they joined and left, and the messages and questions posted in the class chat. Teachers use this to follow up with students who miss classes or fall behind.
Camera and microphone. Keeping your camera and microphone on is optional. If a session is being recorded, we announce it at the start of the class and the platform shows a recording indicator. If you do not want to appear in a recording, keep your camera and microphone off and type your questions in the chat instead.
Why we record. Recordings are made so that enrolled students can revise the class or catch up if they missed it, and so that we can review teaching quality.
Who can see recordings. Only students enrolled in that batch, the teaching team, and staff who need access. Recordings are hosted on our course site at learn.scorebuddy.in (Graphy) with playback restricted to logged-in accounts.
How long we keep them. Class recordings are kept for the duration of your course validity, plus 90 days, then deleted.
Your choices. You can ask us not to include your voice or image in a recording that is shared with the batch, and we will edit or remove that portion where it is technically possible. Write to info.scorebuddy@gmail.com.
Please do not record or share. Students must not record, download, screenshot or redistribute classes, recordings or study material. Apart from breaching our terms, doing so may expose other students' personal data.
Where. Your data is stored on servers located in India (Hostinger, Mumbai). Some of our service providers listed in section 7 process data on servers outside India. Where that happens, we rely on their contractual data-protection commitments, and we will stop transfers to any country that the Government of India restricts under the DPDP Act.
How long. We keep personal data only as long as the purpose it was collected for is still being served, and then delete it.
| What | How long we keep it |
|---|---|
| Account profile | While your account is active |
| Test results and performance history | While your account is active, so you can track progress across your preparation |
| Class recordings and learning activity | course validity plus 90 days |
| Payment and invoice records | 8 years from the end of the financial year, as required under Indian tax law |
| Consent records, including parental consent | As long as we process the data, plus 3 years, to demonstrate compliance |
| Support conversations | 2 years from the date the ticket is closed |
| Security and access logs | At least 1 year, as required under the DPDP Rules |
Inactive accounts. If you do not log in for 24 months and have no active course, we will email and message you at least 48 hours before deleting your account data, so that you can log in and keep it.
After deletion. When we delete your data it is removed from our live systems immediately and from encrypted backups within 30 days, as backups rotate. We may keep the minimum records the law requires us to keep, and anonymised statistics that cannot identify you.
We are required by law to take reasonable security safeguards, and we are responsible for a breach even if it happens at a service provider we chose.
What we do:
If a breach happens. If personal data is exposed, lost or accessed without authorisation, we will:
Your part. Keep your password private, do not share your account with other students, and do not reuse the same password across sites. If you think your account has been accessed by someone else, tell us at info.scorebuddy@gmail.com immediately.
No system is completely secure. We cannot guarantee absolute security, but we will not use that as an excuse — if something goes wrong, we will tell you.
The DPDP Act gives you the following rights over your personal data. They are free to use, and using them will never affect your access to a course you have paid for.
| Your right | What it means |
|---|---|
| Access | Ask us for a summary of the personal data we hold about you, what we do with it, and who we have shared it with |
| Correction and updating | Ask us to correct anything inaccurate, complete anything incomplete, or update anything out of date |
| Erasure | Ask us to delete your personal data, unless we are required by law to keep it |
| Withdraw consent | Withdraw your consent for any purpose, as easily as you gave it. Withdrawing consent for essential processing means we can no longer provide the service, so your account will be closed |
| Nominate | Nominate another person to exercise these rights on your behalf if you die or become unable to act for yourself |
| Grievance redressal | Complain to us first, and escalate to the Data Protection Board of India if we do not resolve it |
How to make a request. Email info.scorebuddy@gmail.com from the email address registered on your account. Tell us clearly what you want. For a student under 18, the request should come from the parent or guardian who gave consent.
How long we take. We will acknowledge your request within 7 working days and complete it within 90 days at the most, which is the outer limit set by law. Most requests are handled much faster.
Verifying who you are. We may ask you to confirm your identity before we act — usually an OTP to your registered mobile or email. We do this to stop someone else from accessing or deleting your data.
Your duties under the Act. The law also asks you to give accurate information, not to impersonate anyone else, and not to file false or frivolous complaints. Registering with someone else's details, or a student under 18 registering as an adult, breaches this.
If you have a question or a complaint about how we handle personal data, contact our Grievance Officer.
What happens next. We will acknowledge your complaint within 48 hours and resolve it within 30 days, and in any case within the 90-day outer limit for data requests.
If you are not satisfied. You may complain to the Data Protection Board of India, which operates as a digital institution where complaints can be filed and tracked online. An appeal against the Board's order lies to the Telecom Disputes Settlement and Appellate Tribunal (TDSAT).
You can approach the Board after you have raised the matter with us and either not received a reply or not been satisfied with it.
Changes to this policy. We may update this policy as the Platform changes or as the law changes. When we make a material change — for example collecting a new category of data, or using data for a new purpose — we will notify you by email or in-app notice at least 7 days before it takes effect, and where the law requires it we will ask for fresh consent. The “last updated” date at the top always reflects the current version.
Languages. This policy is available in English. If we publish it in another language and the versions differ, the English version prevails.
Contact us.
Governing law. This policy is governed by the laws of India. The courts at Jaipur have exclusive jurisdiction over any dispute arising from it.
Related documents. Please also read our Terms and Conditions and our Refund and Cancellation Policy.