FSO Prep by Practly

Privacy Policy

What personal data FSO Prep collects, why, where it is stored, and the rights you have under India’s DPDP Act, 2023.

Effective date: [date]Applies to fso.practly.in

Draft for review — confirm with a lawyer before publishing. Highlighted text in square brackets, like [this], still needs a real value.

For reference, practly.in names its operator as Practly India Pvt. Ltd., lists app.practly@gmail.com as its contact, and puts disputes under courts in Bhiwani, Haryana. Confirm whether these also apply to FSO Prep before filling the brackets.

01Summary

We collect only what we need to run your account, your practice and Mains answer checking.
Your data is stored with Amazon Web Services in India (Mumbai region).
Payments go through Razorpay. We never see or store your card or bank details.
Mains answer images and text go to Anthropic’s Claude API only to evaluate them and to generate study tips.
Handwriting samples are used only if you agree separately. You can delete them any time.
No advertising trackers. We use only the storage needed for login, security and your settings.
You have rights under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025.

02Who we are

FSO Prep is a web app at fso.practly.in for students preparing for the HPSC Food Safety Officer exam. It is made by Practly.

FSO Prep is operated by [Registered business name], [Business address]. In this policy, “we”, “us” and “FSO Prep” mean [Registered business name]. Under the DPDP Act, we are the Data Fiduciary for your personal data.

This policy covers fso.practly.in only. The Practly mobile app has its own privacy policy.

03What we collect

Personal data we collect, why, and how long we keep it
What	Why	Kept for
Account details: name, email, mobile number, Google account identifier	To create your account, sign you in, and contact you about your plan.	While your account is open. Deleted when you ask (see section 10).
18+ declaration	To confirm you are old enough to use FSO Prep.	While your account is open.
Payment record: order id, amount, status; UTR if you submit a payment screenshot	To confirm payment, start your plan and handle refunds.	As long as payment and tax law requires.
Practice progress: answers, mistakes, stats, Pro tips	To show your progress and give you data-based Pro tips.	While your account is open.
Comments and doubts	To answer doubts and fix errors you report.	While your account is open.
Mains answers: photos or PDFs of handwritten answers	To check and score your Mains answers.	Deleted 90 days after your plan ends.
Handwriting sample and handwriting profile (only with a separate declaration)	To read your handwriting more accurately when checking answers.	Until you delete it from My profile. Deleted 90 days after your plan ends.
Your corrections to a checked paper (only with separate permission for that paper)	To improve your handwriting profile.	[Confirm retention]
Security logs: device, time, unusual speed, signs of automation	To keep accounts safe, enforce one device at a time, and stop copying of content.	[Security log retention period]

We do not ask for government ID numbers, and we do not collect card or bank details.

04How we use it

To run your account and give you the plan you paid for.
To save your practice and show your stats, mistakes and Pro tips.
To check Mains answers you upload and give you an indicative score.
To answer your comments and doubts, and to correct content.
To keep the service secure and to detect account sharing, bots and copying.
To meet legal duties, such as keeping payment and tax records.

We do not sell, rent or trade your personal data. We do not show ads or use advertising trackers.

05Who processes your data

Service providers that process data for us
Who	Purpose	Location
Amazon Web Services	Hosts the app, the database and private file storage (including answer photos).	India (Mumbai region)
Bunny CDN	Delivers the website’s files to your browser.	[Confirm location]
Razorpay	Takes payments by UPI, card or netbanking.	[Confirm location]
Anthropic (Claude API)	Evaluates Mains answers and generates study tips. Answer images and text are sent only for this purpose.	[Confirm location]
Google	Google sign-in.	[Confirm location]

These providers process data on our instructions. We may also share data when the law requires it, for example on a valid order from a court or government authority.

06Payments

Payments are made through Razorpay by UPI, card or netbanking. You enter your payment details on Razorpay, not on FSO Prep. We never see or store your card or bank details.

We keep a payment record: order id, amount and status. If you send a payment screenshot, we also keep the UTR from it, to match your payment.

08Mains answers and handwriting

For Mains answer checking, you upload photos or PDFs of your handwritten answers. These are kept in private storage and sent to the Claude API only to evaluate them.

A handwriting sample helps us read your writing. It is optional:

We use a handwriting sample and build a handwriting profile only after a separate declaration from you.
We use your corrections to improve that profile only if you give permission for that paper.
You can delete your handwriting sample and profile any time from My profile.

Scores from AI answer checking are indicative. They are not official marks.

09Cookies and storage

We use cookies and browser storage only for what the site needs:

keeping you signed in,
security, such as the one-device rule,
remembering settings, such as light or dark theme.

We use no advertising or cross-site tracking cookies.

10How long we keep data

Answer photos and PDFs: deleted 90 days after your plan ends.
Handwriting sample and profile: delete any time from My profile. Otherwise deleted 90 days after your plan ends.
Account data: deleted when you ask. Before erasure, we give you 48 hours’ notice, as the DPDP Rules require.
Records the law requires us to keep, such as payment and tax records, are kept for the period the law sets, even after you delete your account.

To delete your account, write to [Support email].

11Security and breaches

Your data is stored in India with Amazon Web Services. Answer files are kept in private storage, not on public links. We log sign-ins and unusual activity to protect accounts.

If a personal data breach happens, we will inform affected users and the Data Protection Board of India without delay, as the DPDP Act and Rules require.

12Your rights

Under the DPDP Act, 2023 and the DPDP Rules, 2025, you can:

Access a summary of your personal data and how we process it.
Correct or update data that is wrong or incomplete.
Erase data we no longer need, or delete your account.
Withdraw consent at any time. This does not affect processing done before you withdraw. Some features, like handwriting-assisted checking, stop working without consent.
Raise a grievance with our Grievance Officer.
Nominate a person to use these rights for you in case of death or incapacity.

To use any right, write to [Support email] or to our Grievance Officer (section 15). If you are not satisfied with our reply, you can complain to the Data Protection Board of India.

1318+ only

FSO Prep is for adults. At sign-up you declare that you are 18 or older. We do not knowingly collect data from children. If we learn that an account belongs to someone under 18, we will close it and delete its data.

14Changes to this policy

We may update this policy. We will change the effective date at the top and, for important changes, tell you in the app or by email before they apply.

15Contact and grievances

Operator: [Registered business name]
Address: [Business address]
Support email: [Support email]
WhatsApp: [WhatsApp number]
Grievance Officer: [Grievance Officer name and email]