ExamBird
This Privacy Policy explains how ExamBird collects, uses, stores and protects your personal data. It describes what our app actually does, not every theoretical possibility.
ExamBird is operated by Invotech Labs Pvt Ltd ("we", "us", "the Company"), a company registered in India, with its office at Plot no. 1 & 2, Harinagar Colony, Saha, Near Main Chowk, Ambala Cantt Road, Haryana, India.
This Policy is framed in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. By using ExamBird you confirm that you have read this Policy and consent to the practices described in it.
On this page
- Information we collect
- How we use it
- Third parties and data sharing
- App permissions
- Where your data is stored
- Notifications and communications
- Data security
- Data retention
- Deleting your account
- Your rights under the DPDP Act
- Age requirement
- Website cookies
- Third-party links
- Policy updates
- Governing law
- Grievance Officer and contact
1. Information we collect
1.1 Information you provide
ExamBird uses Google Sign-In. You do not create or share a password with us. When you sign in, Google provides:
- Your full name
- Your email address
- Your profile photo, if your Google account has one
- A Google account identifier, used to recognise you on subsequent sign-ins
Inside the app you may optionally provide:
- A mobile phone number
- Your target examination
- Support messages and feedback you choose to send us
1.2 Information collected automatically
- Device model and platform
- App version
- A device identifier generated by the app on first launch
- Firebase Cloud Messaging (FCM) token, used only to deliver notifications
- IP address, recorded in short-lived server logs
- The time you were last active on each device
1.3 Learning and usage data
- Subjects, chapters and topics you open or complete
- Playback position in videos and audio, so they resume where you left off
- Quiz and mock test attempts: your selected answers, score, accuracy and time taken
- Notes and articles you bookmark
- Your daily study streak
1.4 Payment and transaction data
All payments are processed by Razorpay (Razorpay Software Private Limited). We store transaction metadata only:
- Plan name and amount
- Razorpay order and payment reference numbers
- Payment status and date
We do not store card numbers, CVV, UPI IDs, UPI PINs or bank account details. That information goes directly to Razorpay and never reaches our servers. Razorpay is a PCI-DSS compliant payment gateway and handles it under its own privacy and security policies.
2. How we use it
| Purpose | What it involves |
|---|---|
| Authentication | Verifying your identity through Google Sign-In and maintaining secure sessions |
| Service delivery | Giving you access to videos, notes, audio, quizzes, mock tests, current affairs and job alerts |
| Progress tracking | Showing what you have completed, resuming playback, and displaying quiz results |
| Notifications | Sending study reminders and updates about new content |
| Billing | Activating your subscription, showing your transaction history, and meeting accounting obligations |
| Device management | Showing which devices your account is signed in on, and applying any limit on simultaneous devices |
| Support | Responding to queries you send us |
| Security | Detecting suspicious activity, preventing account sharing and abuse |
| Legal compliance | Meeting obligations under applicable Indian law |
We do not sell your personal data. We do not use it to build advertising profiles, and we do not show third-party advertisements in the app.
3. Third parties and data sharing
We share data only with the service providers that make the app work, and only to the extent each one needs:
| Provider | What it receives | Purpose |
|---|---|---|
| Google — Firebase Authentication | Sign-in credentials | Verifying your identity |
| Google — Firebase Cloud Messaging | Your device FCM token | Delivering push notifications |
| Razorpay Software Private Limited | Your name, email and the transaction amount | Processing payments securely |
| Bunny.net (BunnyWay d.o.o.) | Video and media requests from your device | Delivering video quickly across India |
Each of these operates under its own privacy policy.
3.1 Legal disclosure
We may disclose your information to government authorities or law enforcement where required by Indian law, a court order, or to protect the rights, property or safety of our users or the Company.
4. App permissions
ExamBird requests only these Android permissions:
| Permission | Why |
|---|---|
INTERNET |
Required for all features — video streaming, quizzes, account management |
POST_NOTIFICATIONS (Android 13+) |
To send push notifications. You may deny or revoke this at any time in device settings |
FOREGROUND_SERVICE |
To let audio and video keep playing when the app is in the background |
We do not request or use your camera, microphone, precise location, contacts, SMS, call logs, or broad access to your device storage.
5. Where your data is stored
Our servers and your personal data are hosted in India. Your data therefore remains subject to Indian law at all times, including the DPDP Act, 2023.
Some of our service providers, such as Google and Bunny.net, operate globally and may process limited technical data (such as a notification token or a video request) on infrastructure outside India as part of delivering their service.
6. Notifications and communications
We may send you:
- Push notifications — new content, study reminders, current affairs updates and job alerts. You can turn these off at any time from your Android settings or inside the app.
- Service and transaction emails — payment confirmations, security notices and account-related messages. These are necessary to provide the service and are not promotional.
We do not send promotional SMS, WhatsApp messages or marketing calls. If that ever changes, we will update this Policy and ask for your consent first.
7. Data security
- All traffic between the app and our servers is encrypted using TLS/HTTPS
- Sign-in sessions expire automatically and can be revoked from your device list
- Session tokens are stored on our servers in hashed form, never as plain text
- Payment credentials never reach our servers
- Access to our systems is restricted to personnel who need it
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your Google account and device secure, and for reporting any suspected unauthorised access promptly.
If a data breach affects your personal data, we will notify you and the relevant authorities as required by law.
8. Data retention
| Data | How long we keep it |
|---|---|
| Account and study data | While your account is active. See section 9 for deletion |
| Payment and transaction records | Up to 7 years, as required by Indian tax and accounting regulations — retained even after account deletion |
| Server and error logs | Up to 90 days, then deleted automatically |
| Sign-in sessions | Expire automatically; expired records are cleared regularly |
9. Deleting your account
You can delete your account from inside the app:
- Open ExamBird
- Go to your profile
- Tap Delete Account and confirm
You have 30 days to change your mind. Signing in again with the same Google account within 30 days restores everything — your progress, quiz history, bookmarks and any active subscription.
After 30 days your account and study data are permanently deleted and cannot be recovered. Payment records are retained as described in section 8.
Deleting your account immediately signs you out on every device and stops all notifications.
If you cannot access the app, email invotechlabs@gmail.com from the address you signed up with and we will delete it for you.
10. Your rights under the DPDP Act
As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to access — obtain a summary of the personal data we hold about you and how it is processed
- Right to correction — correct inaccurate or incomplete data. Your name, phone number and target exam can be edited directly in the app
- Right to erasure — request deletion of your personal data, subject to the legal retention requirements in section 8
- Right to grievance redressal — raise a complaint with our Grievance Officer, named in section 16
- Right to nominate — nominate another person to exercise these rights on your behalf in the event of your death or incapacity
- Right to withdraw consent — withdraw consent for any optional processing at any time, without affecting processing already carried out
To exercise any of these rights, write to our Grievance Officer at invotechlabs@gmail.com. We will respond within the time prescribed by applicable law, and in any case within 30 days.
11. Age requirement
ExamBird is intended for users who are 18 years of age or older. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. By using the app you confirm that you are at least 18.
If we learn that we have collected data from a person under 18, we will delete that data and close the account.
If you are a parent or guardian and believe a minor has provided us personal data, contact us at invotechlabs@gmail.com and we will remove it promptly.
12. Website cookies
The ExamBird website (exambird.in) uses no tracking or advertising cookies. The Android app does not use browser cookies. A small amount of information, such as your light or dark theme preference, is stored locally in your browser and is never sent to us.
13. Third-party links
Our app and website may link to external websites, including official government examination portals. We are not responsible for the privacy practices of those sites. Please review their policies before submitting any personal information.
14. Policy updates
We may update this Policy from time to time. The date at the top shows when it last changed. For material changes, we will notify you through a push notification or an in-app notice at least 7 days before they take effect.
The current version is always available at exambird.in/privacy-policy.html. Continuing to use ExamBird after changes take effect means you accept the revised Policy.
15. Governing law and jurisdiction
This Policy and any dispute arising out of it are governed by the laws of the Republic of India. The courts at Ambala, Haryana, India have exclusive jurisdiction over any such dispute.
16. Grievance Officer and contact
In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, the contact details of our Grievance Officer are:
Grievance Officer — ExamBird
Invotech Labs Pvt Ltd
Plot no. 1 & 2, Harinagar Colony, Saha
Near Main Chowk, Ambala Cantt Road
Haryana, India
Email: invotechlabs@gmail.com
Phone: +91 96588 96488,
+91 81684 60139
We acknowledge every grievance within 48 hours and aim to resolve it within 30 days.