Your data, explained plainly.

DriveScore is a mock-test and diagnosis service for NEET and JEE Main aspirants, operated from Tamil Nadu, India. This policy covers the website, the Android app, and the teacher and administrator tools.

It applies to three groups: students who practise, teachers and centre staff who review results, and people who contact us through the demo form.

• Name and email address — supplied at sign-up, used to identify the account.
• Password — stored only as a cryptographic hash by our authentication provider. We cannot see it, and nobody at DriveScore can retrieve it.
• School or coaching centre — chosen from a list at sign-up, or marked as studying independently.
• Preferred language for the interface.
• Practice activity — which questions were attempted, the option chosen, how long each question took, and whether an answer was changed.
• Derived results — marks, accuracy, skill rating, level, per-chapter ratings, and the diagnosis category assigned to each lost mark.

We do not ask students for a phone number, postal address, date of birth, photograph, or any government identifier.

Name, email address, the centre or school the account belongs to, and the role assigned to it. Teachers see class-level results for students at their own centre only.

The demo form asks for a name, an institution, a phone number or email address, and an optional message. That is used solely to reply to the enquiry. It is never added to a marketing list.

• To create and secure an account, and to let a student sign in.
• To grade attempts and produce the report a student sees.
• To run the diagnosis engine — sorting each lost mark into a concept gap, a careless slip, guessing, slowness, or a timing problem — which requires per-question answers and timings.
• To track a skill rating across attempts so progress is visible over time.
• To give a teacher a class-level view of which chapters are weak.

• We do not sell, rent, or trade personal data. Not to anyone, at any price.
• We show no advertising and run no advertising trackers.
• We use no third-party analytics or behavioural tracking software. The site carries no Google Analytics, no Meta pixel, no session recording, and no cross-site trackers of any kind.
• We do not use student answers or results to build marketing profiles.
• We do not publish student names, scores, or rankings outside their own school or centre.

A student always sees their own results. Teachers and administrators at the student's own school or coaching centre see that student's results and the class-level summaries built from them. A student who signs up independently belongs to no centre, so no teacher can see their data at all.

Separation is enforced in the database itself using row-level security, not merely hidden in the interface — one student's account cannot read another student's rows. Answer keys are held server-side and are never sent to the browser before an attempt is submitted.

We rely on two service providers, and no others:

• Supabase — hosts the database and handles authentication. Account details and practice data are stored there.
• Vercel — hosts and serves the website and app.

Both process data on our instructions in order to run the service. Data may be stored on servers outside India, on infrastructure operated by these providers.

Account and practice data is kept while the account is active, because progress tracking is the point of the product — a rating only means something across months of attempts.

If you ask us to delete an account, we remove the account and its associated practice records. Backups are retained for a short period and then cycle out. Demo-form enquiries are deleted once the conversation is finished.

You can ask us to show you the personal data we hold about an account, correct anything wrong, or delete the account entirely. Email us and we will action it. If the account belongs to a student under 18, a parent, guardian, or the school may make the request on their behalf.

Most NEET and JEE aspirants are school students, and many are under 18. Where a school or coaching centre enrols students, we act on that institution's instructions and expect it to have obtained the consent required from parents or guardians. Where a student signs up independently and is under 18, a parent or guardian should review this policy and may contact us at any time to access or delete the account.

We deliberately keep what we collect from students to the minimum a diagnosis needs — no phone number, no address, no date of birth, no photograph.

• Passwords are hashed by the authentication provider and are never stored or transmitted in readable form.
• Per-student isolation is enforced at the database level with row-level security.
• Traffic is served over HTTPS everywhere.
• Administrative access is limited to the people who operate the service.

No system is perfect. If we ever discover a breach affecting personal data, we will inform affected users and the relevant authority without undue delay.

If what we collect or how we use it changes, we will update this page and move the date at the top. Material changes affecting students will be communicated to their school or centre.

For any question about this policy, or to request access to or deletion of an account, email us: