Privacy Policy

1Who uses Paper2Test

• Hosts (teachers, coaching institutes, aspirants) sign in, upload question papers or make them with AI, and create tests.
• Students take tests. They sign in (with Google, or with email and a password) and join a test with its code or link; tests of a coaching institute's batch are open only to that batch's students.
• Institute owners and teachers run batches of students.

2What we collect

• Account: with Google Sign-In, your Google name, email address and Google user ID. With email sign-up, your email address and a password, which we store only as a salted hash (we can never read it). Your username, display name, a profile photo if you add one, the exams you choose, and your notification choices.
• Taking tests: the name you enter, your answers, questions you mark for review, times (start, saves, submission), how many times you left the test page (shown to the host), and your browser or device type (for diagnosing problems). If you are signed in, the attempt is linked to your account so you can see your results.
• Hosting: the question-paper pages you upload (pictures or PDF text), the questions, options, answer keys and explanations read from them or written by AI, your tests and their results. A page picture is kept only when a question on it has a figure; otherwise it is deleted after reading.
• Coaching institutes: the institute's name, link, logo and colour; the email addresses or usernames of the teachers and students it adds (so they are linked when they sign in); which batch each student is in.
• Referrals: your invite code, which new accounts joined through it, and the credits and rewards you used.
• Payments: what you bought, the amount, date and status, and the order id from the payment provider (Razorpay on the website, Google Play in the app). Card, UPI and bank details go to the provider and never reach us.
• Demo bookings: what you enter on the Book a demo page (your name, institute, email, phone, city, number of students, preferred day and time, and your message), used only to arrange and give the demo. Write to us to have it deleted.
• Help messages: what you send from the Help page (the topic, your message, a test code and a screenshot if you add them), your browser and screen size, and our reply. With your account they are deleted when you delete it.
• Notifications: if you allow them, a notification token for your phone or browser (Firebase Cloud Messaging).
• Technical: standard server logs (IP address, time, errors) kept by our hosting provider for security and debugging, and the app version you use.

3How AI is used

To read question papers and to write AI papers, the paper content (page pictures or text, or your request such as "50 quant questions") is sent to AI services: currently Google Gemini and models reached through OpenRouter. On free tiers these providers may use submitted content to improve their services. Only question-paper content is sent; names, answers and results of students are never sent to an AI service. Hosts review and can edit everything the AI produces.

4Who processes data for us

• Cloudflare: hosting, database and email forwarding (data may be stored outside India).
• Google: Sign-In, Firebase notifications, Google Play (app delivery and purchases), Gemini AI.
• OpenRouter: access to AI models for reading and writing papers.
• Razorpay: payments on the website.
• Resend: sending sign-up and password-reset codes, and test invitations, by email.
• Google Workspace: our own mailbox (devesh@paper2test.app), which sends the emails to coaching institutes described in section 10.

We do not sell personal data and do not show advertising. We share data only with these providers, as needed to run Paper2Test, or when the law requires it.

5Who can see what

• A host sees every answer and result on their own tests. An institute's owner and teachers see the results of the institute's tests and the students in their batches.
• Students see their own result when the host allows it; a leaderboard shows names and scores only if the host turns it on.
• Your username and photo appear on leaderboards and in your institute.
• Your profile page (paper2test.app/#/u/your-username) shows your name, username, photo, when you joined, the exams you chose, how many tests you took and hosted, your accuracy and your All-India live mock ranks. Make it private in Profile & settings to show only your name, username and photo. Your email is never shown there.

6Keeping and deleting data

We keep your data while your account exists. You can delete your account yourself in the app or on the website: Profile & settings → Delete account. Full steps: paper2test.app/delete-account.

• Deleted: your papers, tests and every result on them; an institute you run with its batches, teacher list and logo; your profile, email, username, photo, exams, notification tokens and referrals.
• Kept: your answers in tests other people host stay in their results as "Deleted user"; payment records are kept for as long as Indian tax law requires, without your name or email.

Students without an account can ask the host to remove their attempt, or write to us.

7Cookies and local storage

We use your browser's storage to keep you signed in, remember your space, theme and choices, and let you resume a test after a reload. No advertising or cross-site tracking cookies.

8Children

Paper2Test is meant for students preparing for exams and for teachers; it is not directed at children under 13. Students under 18 may take tests their teacher or institute shares; we collect only what is described above, on behalf of that teacher or institute.

9Security

All traffic uses HTTPS. Passwords are stored only as salted hashes. Answer keys are never sent to students' devices during a test; scoring happens on our servers. No system is perfectly secure, so please do not upload content you are not comfortable storing online.

10Emails to coaching institutes

We send one email introducing Paper2Test to coaching and tuition centres that list a business email address publicly - on their own website or on OpenStreetMap - because the product is made for their work.

• What we keep: the institute's name, the public email address, where it was listed, its city and country, and the date we wrote. We keep this only so that we never write to the same address twice.
• Why we may do this: our legitimate interest in telling a business about a product relevant to its work (Article 6(1)(f) of the UK and EU GDPR); in Canada, Australia and New Zealand, the address having been published for business contact without a request not to receive such messages.
• Saying no: every email has an unsubscribe link, and you can also just reply "no". Unsubscribing stores only a one-way fingerprint (hash) of the address, never the address itself. To have your details deleted, write to support@paper2test.app; we act on requests within 5 working days.
• Sharing: these addresses are never sold or shared. In the UK or EU you may also complain to your data protection authority.

Sender: Paper2Test (Devesh Samant), 153, Kanjabag Road, Khatima, Udham Singh Nagar, Uttarakhand 262308, India.

11Changes and contact

We update this page when our practices change and change the date at the top. Questions or requests: support@paper2test.app.