Privacy Policy

1. Introduction

PrepDMAT is an independent online dMAT preparation platform. This Privacy Policy explains how information is collected, used, stored and handled when you use PrepDMAT.

Questions about this policy can be sent to info@prepdmat.in.

2. Information we collect

Account information

We process your email address, authentication account identifier, and optional name or profile information supplied by a supported sign-in provider. Authentication credentials are handled through Supabase Auth. PrepDMAT does not store raw passwords in its application database.

Profile and preferences

We may store display or profile information where available, theme and interface preferences, onboarding status, diagnostic status, and your optional marketing email consent.

Learning and assessment information

We store information created through diagnostics, practice sessions and mock tests. This can include questions shown, answers, correctness, scores, response and attempt timing, difficulty, progress, bookmarks, mistake-review notes, question reports, and performance or recommendation information.

Generated assessment metadata

Where applicable, assessment records may include generation seeds, fingerprints, generator and validator versions, immutable question snapshots, quality information, and other provenance metadata. This helps preserve attempt history, produce accurate explanations and results, and improve question quality and reliability.

Public diagnostic

If you begin the public diagnostic before creating an account, a temporary opaque diagnostic identifier may be stored in your browser. A hashed representation is stored server-side with the diagnostic questions, responses and result. The browser identifier does not directly contain your answers or email address.

Browser preferences

Local browser storage may remember your theme, sidebar state, and zen or focus mode. PrepDMAT does not deliberately store answers or email addresses in localStorage.

Security and technical information

Pseudonymous or hashed identifiers may be processed for security and rate limiting. Infrastructure providers may also process ordinary technical request information, such as IP address and browser information, while operating the service. PrepDMAT does not intentionally create advertising or device fingerprints.

3. How information is used

We use information to:

• Create and authenticate accounts, maintain sessions, verify email addresses, and support password recovery.
• Provide diagnostics, practice sessions and mock tests.
• Calculate scores and results, track progress, identify areas for improvement, and provide recommendations.
• Preserve attempt history and maintain bookmarks and mistake-review information.
• Investigate question reports and improve assessment quality and reliability.
• Maintain security, prevent abuse, and diagnose technical problems.
• Send optional PrepDMAT email updates when you have consented to receive them.

Account verification, security notices and essential service messages do not depend on marketing consent.

4. Cookies and local storage

Supabase authentication and session cookies support sign-in and session continuity. The public diagnostic uses a separate temporary cookie. That cookie is HttpOnly, uses SameSite=Lax, is Secure in production, and has an approximate two-hour lifetime.

Local storage may retain theme, sidebar, and zen or focus-mode choices so the interface remains consistent on the same browser. The current application does not use advertising cookies.

5. Third-party service providers

• Supabase provides authentication, database storage, session handling, email verification and password recovery services.
• Vercel provides application hosting and related infrastructure.
• Google may process the authentication request and provide account information required for authentication if you choose to sign in with Google.

These providers process information according to their applicable terms and privacy practices while supplying services to PrepDMAT.

6. Marketing communications

PrepDMAT offers an optional email marketing preference. You can change this choice from your Profile. Essential account, verification, security and service messages are independent of this preference. PrepDMAT does not currently offer an SMS marketing option.

7. Data retention

Account-associated learning and assessment history may be retained while your account remains active unless deletion is otherwise required. This supports attempt history, results, progress and review features. PrepDMAT does not currently apply one fixed retention period to every category of account information.

Temporary anonymous public-diagnostic information is subject to shorter expiry and cleanup behaviour. Some operational, security or audit information may be retained separately where needed to operate and protect the service.

8. Data security

PrepDMAT uses reasonable technical and organizational safeguards, including managed authentication, access controls, database security policies, server-side validation, and rate limiting. No method of transmission or internet storage can guarantee absolute security.

9. Your choices

Current controls allow you to:

• Change supported appearance and interface preferences.
• Change your optional marketing email consent from Profile.
• Sign out or request a password reset.
• Manage bookmarks and mistake-review information where those controls are available.

PrepDMAT does not currently provide self-service account deletion or a self-service account data export. Contact info@prepdmat.in for privacy or data-related requests.

10. Children

PrepDMAT is intended for people preparing for higher-education admissions and assessment. It is not designed as a service for children.

11. International processing

Service providers may process or store information in locations outside your country. Where applicable, information is handled subject to the safeguards and legal requirements relevant to that processing.

12. Changes to this policy

This Privacy Policy may be updated as PrepDMAT changes. The “Last updated” date will reflect material revisions to the policy.

13. Contact

For privacy questions or data-related requests, email info@prepdmat.in.