Privacy policy

IPMATway (ipmatway.com) is a free IPMAT preparation website. This page explains, in plain words, what we collect and what we do with it. We don't show ads and we don't sell or rent anyone's data.

What we collect

• Your account — when you sign in with Google, Google shares your name, email address and profile picture with us. When you sign in with an email code, we only get the email address you type (and the name you choose to give us). We don't ask for your phone number and there is no separate password.
• Sign-in codes — when you ask for a code, we keep the address it was sent to, when it was sent, how many times a code was tried and a scrambled form of the code and of your network address (keyed one-way hashes — never the code or the IP address itself), for at most a day, to stop guessing and email flooding. The email log keeps only a masked address (for example “r•••••@gmail.com”). Cloudflare Turnstile checks that a person, not a bot, asks for the code; it sees your browser and IP address for that check.
• Your account details — your date of birth (to know whether a parent or guardian must agree, see below) and, for students under 18, the parent's or guardian's email address you give us.
• Your preparation — answers, time per question, mocks, error log, bookmarks, notes, study plan and settings, so your progress is the same on every device.
• Detailed learning data — how you work through questions: when you first act on a question, every option you pick and change, confidence, hints and solutions you open and how long they stay on screen, when you switch away from the tab, your answers' position in a session and the hour of day; the actions you take in mocks; and, as they arrive, the lesson videos you watch and where you pause. Each record also notes your device type, operating system and browser family, screen size, connection type, country (from our network provider) and a scrambled code for your network (a keyed one-way hash of the first part of your IP address). We never store the IP address itself. These records are linked to your account only if you agreed (or, under 18, a parent or guardian agreed); otherwise they are stored without any name, account or browser identifier, so they only count in totals.
• What you send us — support messages and their attachments, resources you contribute, and reports on questions.
• Usage — which pages you open, how long you actively use them, your device type (phone, tablet or computer), the website that sent you here and campaign tags in links. This uses a random ID kept in your browser's storage. We don't store IP addresses in these records and we don't use third-party analytics or advertising trackers.
• Error reports — technical details when something breaks, so we can fix it.

AI tutor

When you use an AI feature (explain differently, hints, the tutor, approach feedback, trap notes), the question you are working on and what you type are sent to an AI service provider to generate the reply. These are Claude models reached through third-party API providers. We don't send your name or email with these requests — please don't type personal details into the tutor. AI replies can be wrong; the written solutions are the reference.

How we use it

• To run the site and your account, and to personalise practice (weak areas, planner, error log re-tests).
• To reply to your messages and fix reported problems.
• To understand which features help (aggregated usage, sign-ups, retention) and improve them.
• To improve the teaching itself with the detailed learning data: find questions that are wrong, misleading, too hard or too easy, explanations nobody reads, lessons where students stop, and the mistakes that cost the most marks — and, with your consent, to show you your own patterns.

Who it is shared with

Only the services needed to run the site: our hosting and storage providers, Google (sign-in), Resend (sends our emails: sign-in codes and parents' consent emails), Cloudflare (network protection and the Turnstile check on the sign-in form), and the AI providers above when you use AI features. We may disclose information if the law requires it. What others can see: your display name on the weekly leaderboard only if you opt in, and your first name on a resource you contribute only if you choose to show it.

How long we keep it

• Account and preparation data: until you delete your account. Settings → Delete account removes it immediately (backups roll over within about two weeks).
• Usage records and detailed learning records: up to about 13 months, then deleted automatically. Totals and anonymous statistics derived from them may be kept longer; they don't identify anyone.
• Support attachments are deleted with your account.
• Sign-in codes and their records: deleted after one day.

Your choices

• Download everything we hold about your preparation, including the detailed learning records linked to your account and your consent history: Settings → Export.
• Switch detailed recording off (or back on) at any time: Settings → Learning data. From then on new records are stored without your name.
• Correct your display name and exam in Settings, or delete your account at any time.
• Ask us anything about your data — use the Support page (sign-in needed) or our community channels.

We process personal data in line with India's Digital Personal Data Protection Act, 2023.

Students under 18

Many of our users are school students. When you first sign in we ask for your date of birth. If you are under 18, we email the parent or guardian you name and ask them to agree before detailed learning records are linked to your account; the email explains what is recorded and why. Until they agree, you can practise, but those records are stored without your name. If they decline, the account can't be used until they agree or it is deleted. A parent or guardian can withdraw their agreement or ask us to delete a child's account at any time — use the Support page (sign-in needed) or our community channels.

Security

The site is served over HTTPS, uploaded files are only available to the people allowed to see them, and access to the admin area is restricted.

Changes

If this policy changes in a way that matters, we'll say so on the site. See also the terms of use.