Privacy Policy
Last Updated: 24 October 2026
Dr Preetha MS ("we," "us," "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use KPSC Practice.
Definitions
- "Platform" means the drpreetha.com website and KPSC Practice.
- "Service Providers" means third parties that process data on our behalf, being the categories listed in Section 3 (items 3.1 to 3.4).
- "Analytics Services" means third-party services that measure how the Platform is used, including page visits, traffic sources, and anonymised heatmaps and session recordings of clicks, scrolls and taps, with form input masked.
- "Advertising Measurement Services" means tools supplied by the social media platforms on which we advertise, used solely to measure whether our own advertisements lead to visits and sign-ups.
- "Hosting and Authentication Providers" means cloud and hosting services that run the Platform, Google sign-in processing and the question bank.
- "Device Identifier" means an identifier derived from browser and device settings, used solely to prevent account sharing and abuse.
- "Visit Counter" means our own privacy-friendly visit-counting tool that sets no cookies.
- "Learning Activity Data" means modules and questions practised, and, for AI Deep Dive, the AI platform chosen and how it opened.
1. Information We Collect
Personal Information You Provide
- Account Registration: Name, email address and Google account ID from Google sign-in, and phone number only if you give it to us (we do not store your Google password)
- Payment Information: When you pay by UPI, the UPI transaction ID and the payment screenshot you upload, so that we can verify and approve your subscription. We never see or store your UPI PIN or bank details.
- Communications: Support emails, feedback, survey responses
Automatically Collected Information
- Usage Data: Questions attempted, scores, time spent, module-wise progress
- Learning Activity Data: Which modules and questions you practise, and when you use AI Deep Dive, which AI platform you chose and whether it opened in the app or the browser. We do not store the question text you send or anything the AI replies.
- Device Information: IP address, browser type, device type, operating system
- Device Identifier: When you open the practice area we record a Device Identifier for your device, worked out from your browser and device settings. We use it only to prevent account sharing and abuse, so that one subscription is used by one person on a limited number of devices.
- Cookies: Session cookie for login, plus analytics cookies described in section 6
Information We Do NOT Collect
- ❌ Credit/debit card numbers, UPI PINs or bank account passwords (payments are made from your own UPI app)
- ❌ Sensitive medical records or patient information
- ❌ Social media passwords or credentials
2. How We Use Your Information
We use your personal information to:
- Provide Services: Enable access to MCQs, track progress, maintain your account
- Process Payments: Verify your UPI payment and activate your subscription
- Personalise your preparation: Understand what kind of questions and study materials each user prefers, so we can tailor the question bank and other preparation materials, and in future offer an AI coach that adapts to how you like to study.
- Improve Platform: Use Analytics Services to analyse usage patterns, identify popular modules and fix bugs
- Customer Support: Respond to queries, troubleshoot technical issues
- Communications: Send subscription confirmations, renewal reminders, exam tips, platform updates
- Marketing: Send promotional offers, new feature announcements (you can opt out)
- Legal Compliance: Comply with applicable laws, prevent fraud, enforce Terms and Conditions
We will never sell your personal information to third parties.
3. Sharing of Information
Service Providers
We may share your information with trusted Service Providers:
- 3.1 UPI payments: You pay directly from your own UPI app (e.g. Google Pay, PhonePe, Paytm); that app and your bank handle the payment under their own privacy policies. We receive only the transaction ID and screenshot you send us.
- 3.2 Hosting and Authentication Providers: Trusted cloud and hosting services that run the Platform, Google sign-in processing and the question bank.
- 3.3 Analytics Services: Services that help us understand how pages are used, including page visits, how people find the site, and anonymised heatmaps and session recordings of clicks, scrolls and taps, with what you type into forms hidden.
- 3.4 Advertising Measurement Services: When we advertise on social media, these platforms measure whether our ads lead to visits and sign-ups.
We use these providers to learn what users find useful so that the question bank and preparation materials can be customised to their needs. We use only a small number of such providers, each under its own privacy terms.
Legal Requirements
We may disclose your information if required by law, court order, or government authority, or to:
- Prevent fraud or security threats
- Protect our rights, property, or safety
- Enforce our Terms and Conditions
We do not share your personal information for marketing purposes with third parties without your explicit consent.
4. Data Storage and Security
Storage Location
- Your data is stored with trusted Hosting and Authentication Providers.
- Some of these services may store data on servers outside India.
- Payment screenshots and transaction IDs are kept securely, visible only to us, and used only to verify payments.
Security Measures
- Encryption: All data is sent over encrypted connections (HTTPS).
- Access Controls: Restricted access to personal data on a need-to-know basis
- Account Security: Authentication is handled via Google sign-in; we do not store your Google password
- Regular Backups: Data is backed up regularly to prevent loss
While we implement industry-standard security measures, no system is 100% secure. You are responsible for keeping your Google account credentials secure.
5. Data Retention
- Active Subscriptions: We retain your data for the duration of your subscription plus 1 year
- Inactive Accounts: If you do not renew or reactivate within 1 year, we may delete or anonymise your account data
- Legal Retention: We may retain certain data longer if required by law or for dispute resolution
You can request account deletion at any time (see Your Rights section below).
6. Cookies and Tracking Technologies
What Are Cookies?
Cookies are small text files stored on your device to enhance user experience.
Cookies We Use
- Essential Cookies: Required for login, session management, and platform functionality (cannot be disabled)
- Analytics Cookies: To understand how pages are used
- Advertising measurement cookies: Set by the social media platforms we advertise on, to measure our own ads; those platforms may use this data under their own privacy policies
- Preference storage: Your browser keeps an unfinished practice test so you can resume it
Visit Counts
We also count visits with our own privacy-friendly Visit Counter. It sets no cookies, respects browsers that send Do Not Track, and shortens your IP address before storing it. We use it only to see how many people visit and which pages help them.
Managing Cookies
You can disable non-essential cookies through your browser settings. However, this may affect platform functionality.
We do not sell your data, and we do not let other advertisers target you using our site data.
7. Third-Party Links and Services
Google Sign-In (Authentication)
- We use Google Sign-In to verify your identity and allow you to log in to KPSC Practice using your Google account.
- When you choose to sign in with Google, we receive basic profile information such as your name and email address.
- Your Google account credentials and password are handled directly by Google and are not shared with or stored by us.
- Google may process and store your information on its own servers, which may be located outside India. Your use of Google services is governed by Google's own Terms of Service and Privacy Policy.
AI Deep Dive Feature
- When you use AI Deep Dive, you send question text to third-party AI platforms (ChatGPT, Claude, Perplexity)
- You must have your own account with these platforms
- These platforms have their own Privacy Policies; we are not responsible for their data practices
- We record which AI platform you picked and how it opened (app or browser), but not the question text you send or the AI's reply. We use this to understand how you like to study, so we can customise the question bank and preparation materials and, in future, offer an AI coach that suits you.
External Links
Our platform may contain links to external websites (e.g., exam resources). We are not responsible for the privacy practices of third-party sites.
8. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your account and data (subject to legal retention requirements)
- Opt-Out: Unsubscribe from promotional emails (transactional emails will continue)
- Data Portability: Request your data in a portable format (CSV, PDF)
To exercise these rights, contact us at mail@drpreetha.com.
9. Children's Privacy
KPSC Practice is meant for medical graduates and is not intended for anyone under 18. We do not knowingly collect data from anyone under 18; if you believe a minor has given us data, contact us and we will delete it.
10. Marketing Communications
What You'll Receive
- Subscription confirmations and receipts
- Account updates and security notifications
- Exam reminders and preparation tips
- New feature announcements
- Promotional offers and discounts
Opt-Out
- You can unsubscribe from promotional emails by clicking "Unsubscribe" in any email
- You will continue to receive transactional emails (e.g., payment confirmations, account-related notifications)
11. Changes to Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.
For significant changes we will also show a notice on the site or email registered users.
Your continued use of the platform after changes are posted constitutes acceptance of the updated Privacy Policy.
12. International Users
KPSC Practice is operated in India and complies with Indian data protection laws.
If you are accessing the platform from outside India, your information may be transferred to and stored in other countries (including locations where our cloud service providers operate). By using the platform, you consent to this transfer.
12A. Kerala PSC rank-list tracker ("Where am I?")
The tracker at drpreetha.com/where-am-i works out how far the Kerala Public Service Commission's advice has reached on a ranked list, from the Commission's own published ranked lists and appointment charts. It is not an official Commission service.
- What we use: the Commission's published ranked lists and appointment charts. For matching we keep each candidate's register number, rank, community and name in a normalised form, and the date of birth only as a one-way salted hash. These records stay on our server and are never shown in bulk.
- What you enter: a category number, your register number and either your name as printed on the list or your date of birth. You must be signed in with Google, and each account is limited to 10 checks a day.
- What we show: only the one record that matches all the details you enter: rank, community turn, how far advice has reached and whether the list is in force. We never show addresses or dates of birth. If the details don't match, we show nothing about the record.
- What we log: the category number and time of each check, linked to your account, to enforce the daily limit and to see which categories are in demand. We do not log the register number you search for.
- Alerts (question-bank subscribers): if you tick the consent box and turn on alerts, we store your register number and position for that category so that we can email you when advice moves for your turn. You can turn alerts off at any time.
- Deleting your data: the "Delete my tracker data" button on the tracker page removes your alerts and your check history at once. You can also write to mail@drpreetha.com.
- Accuracy: every result shows the date and time the Commission's documents were last checked, and links to them. Always confirm your status on keralapsc.gov.in.
13. Contact Us
Privacy Questions?
For questions, concerns, or requests regarding your privacy or this Privacy Policy:
Email: mail@drpreetha.com
By using KPSC Practice, you acknowledge that you have read, understood, and agree to this Privacy Policy.