Your trust matters. This page explains, in plain language, what data XamBaaz collects and how we use and protect it. Questions? Email bithindra@gmail.com.
1. Who we are
XamBaaz (“we”, “us”) operates the website www.xambaaz.com and the XamBaaz Android app — a free-to-start exam-preparation platform for students in Class 8–12. This policy explains what data we collect, why, and your rights over it. For any privacy request, contact bithindra@gmail.com.
2. Information we collect
Account information: when you sign in with Google, we receive your name, email address and profile picture from Google. We do not see or store your Google password.
Profile information: the class, target exam and (optionally) school/institute code you provide during onboarding.
Learning activity: the quizzes and mock tests you attempt, your answers, scores, time taken, streaks and XP — used to power your dashboard, analytics and progress tracking.
Payment information: when you upgrade, payments are processed by our payment provider (Razorpay). We receive a confirmation and your billing email to activate access; we do not store your card or bank details.
Technical data: standard server logs (IP address, browser type, timestamps) for security and reliability.
3. How we use your information
To provide the service: authenticate you, save your progress, generate your performance dashboard, and unlock content you are entitled to.
To improve the product: understand which chapters are hard, fix mis-keyed questions, and improve content quality (in aggregate).
To process payments and grant access after a successful upgrade.
To communicate essential service messages (e.g. account or access changes). We do not sell your data or send third-party marketing.
4. Institutes and schools
If you sign in using a school or institute code, your account is tagged to that institute so its coordinator can view aggregate and individual performance reports for their students. This is limited to learning activity and profile data — never your password or payment details. If you did not intend to join an institute, contact us to be untagged.
5. Data sharing
We share data only with service providers who help us run XamBaaz — our hosting and database providers (Vercel, Neon), authentication (Google) and payments (Razorpay) — strictly to deliver the service. We may disclose data if required by law. We do not sell personal data.
6. Data retention
We keep your account and learning data for as long as your account is active. You can request deletion at any time (see your rights below), after which we remove your personal data except where we must retain limited records for legal or accounting reasons.
7. Your rights (DPDP Act, 2023)
As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the right to access, correct and update your data, the right to erasure, the right to grievance redressal, and the right to nominate. To exercise any of these, email bithindra@gmail.com and we will respond within a reasonable period.
For users under 18, processing relies on verifiable parental/guardian consent where required; a parent or guardian may contact us to exercise these rights on the child's behalf.
8. Security
We use industry-standard measures — HTTPS everywhere, security headers, and access controls — to protect your data. No method of transmission or storage is perfectly secure, but we work to protect your information and to address issues promptly.
9. Children's privacy
XamBaaz is intended for school students and is used with parental/guardian awareness. We collect only the data needed to provide the learning service. If you believe a child has provided data without appropriate consent, contact us and we will delete it.
10. Changes to this policy
We may update this policy as the product or law evolves. The “last updated” date below reflects the latest version; material changes will be highlighted on this page.
11. Contact & grievance officer
For privacy questions, data requests or grievances, contact: Bithindra Biswas, XamBaaz — bithindra@gmail.com. We aim to acknowledge and resolve grievances in line with the DPDP Act, 2023.