PRIVACY POLICY
(DPDP Act 2023 & DPDP Rules 2025 Compliant)
Data Fiduciary: EDMOW
Contact: grievance@edmow.com
Last Updated: May 2026
1. Scope
This Privacy Policy applies to all personal data processed by EDMOW through the Platform. It is a legally binding notice under Section 6 of the Digital Personal Data Protection Act, 2023 ("DPDP Act").
2. What Personal Data We Collect
We practice data minimization. We collect only:
| Category | Data Elements | Purpose |
|---|---|---|
| Identity | Email address, Google ID (sub) | Authentication, account security |
| Usage | Test schedules, question filters, attempt logs, time-per-question, selected options | Service delivery, test simulation, analytics |
| Technical | IP address, browser type, device type | Security, abuse prevention, load management |
We do not collect: name, phone number, postal address, Aadhaar, payment information, location data, or biometric data.
3. Legal Basis for Processing
Under Section 6 of the DPDP Act, we process your personal data based on your explicit consent, obtained through a clear affirmative action (clicking "I Agree" during onboarding). You may withdraw consent at any time by deleting your account.
4. Purpose Limitation
Your data is used solely for:
- Authenticating you and maintaining your account
- Delivering the scheduled test experience
- Generating your personal score history and review data
- Improving Platform stability and security
We do not use your data for targeted advertising, behavioral profiling for third parties, or selling to data brokers.
5. Data Retention & Deletion
- Account data: Retained until you delete your account or until 2 years of inactivity, whichever is earlier.
- Test logs: Retained for 12 months from the date of attempt to enable history tracking, then anonymized.
- Deletion: You may request account deletion via email. We will delete your personal data within 30 days, except where retention is required by law.
6. Data Principal Rights (Your Rights)
Under the DPDP Act, you have the right to:
- Access: Request a copy of your personal data.
- Correction: Request correction of inaccurate data.
- Erasure: Request deletion of your data.
- Grievance Redressal: Complain to our Grievance Officer.
To exercise these rights, email us at grievance@edmow.com. We will respond within 30 days.
7. Data Security
We implement reasonable technical and organizational measures:
- SQLite database with access restricted to the application container
- HTTPS/TLS encryption for all data in transit
- No plaintext storage of OTPs (hashed/expires in 10 minutes)
- Regular backups encrypted at rest
However, no internet transmission is 100% secure. You use the Platform at your own risk.
8. Cross-Border Transfers
EDMOW does not transfer your personal data outside India. Our servers are located in Indian region entirely.
9. Children's Data
Users under 18 must use EDMOW under parental guidance. We do not knowingly process data of children under 13. If we discover such data, we will delete it within 72 hours.
10. Grievance Officer
In compliance with the IT Rules, 2021 and DPDP Act:
- Name: EDMOW Grievance Officer
- Email:
grievance@edmow.com - Response Time: 48 hours for acknowledgment, 30 days for resolution.