Your data, explained plainly.

DriveScore is a mock-test and diagnosis service for NEET and JEE Main aspirants, operated from Tamil Nadu, India. This policy covers the website, the Android app, and the teacher and administrator tools.

It applies to three groups: students who practise, teachers and centre staff who review results, and people who contact us through the demo form.

• Name and email address — supplied at sign-up, used to identify the account.
• Password — stored only as a cryptographic hash by our authentication provider. We cannot see it, and nobody at DriveScore can retrieve it.
• School or coaching centre — chosen from a list at sign-up, or marked as studying independently.
• Preferred language for the interface.
• Practice activity — which questions were attempted, the option chosen, how long each question took, and whether an answer was changed.
• Derived results — marks, accuracy, skill rating, level, per-chapter ratings, and the diagnosis category assigned to each lost mark.

We do not ask students for a phone number, postal address, date of birth, photograph, or any government identifier.

Name, email address, the centre or school the account belongs to, and the role assigned to it. Teachers see class-level results for students at their own centre only.

The demo form asks for a name, an institution, a phone number or email address, and an optional message. That is used solely to reply to the enquiry. It is never added to a marketing list.

Signed-in students and teachers can message us from inside the app using the help button. We store what you write, our replies, and the time of each, so the conversation is still there when you come back.

To make a problem fixable without a long back-and-forth, each message also carries a small technical note: the screen you were on, whether you were using the app or a browser, your screen size, and any error our own server recorded for you in the previous ten minutes. It never includes your answers, the options you picked, or anything you typed into a test.

These conversations are stored in our own database alongside the rest of your account — we do not use a third-party chat service, so nobody outside the two providers named below receives them. Closed conversations are deleted after 180 days, and deleting your account deletes them immediately.

Staff who answer support may switch on a notification alert on their own phone. That alert says only that a message arrived — never your name, and never any part of what you wrote.

When the app hits a fault, our server records what broke: the error message, the technical trace, which page it happened on, and which account was affected. This happens automatically whenever a fault occurs — it is not tied to contacting us, and there is no way to switch it off, because an app that cannot tell you it is broken cannot be repaired.

These records hold identifiers, not content. They never contain your answers, the options you picked, what you typed into a test, or your password. They are stored in our own database — we use no third-party crash-reporting or monitoring service — and are deleted automatically after 30 days.

• To create and secure an account, and to let a student sign in.
• To grade attempts and produce the report a student sees.
• To run the diagnosis engine — sorting each lost mark into a concept gap, a careless slip, guessing, slowness, or a timing problem — which requires per-question answers and timings.
• To track a skill rating across attempts so progress is visible over time.
• To give a teacher a class-level view of which chapters are weak.

• We do not sell, rent, or trade personal data. Not to anyone, at any price.
• We show no advertising and run no advertising trackers.
• We use no third-party analytics or behavioural tracking software. The site carries no Google Analytics, no Meta pixel, no session recording, and no cross-site trackers of any kind.
• We do not use student answers or results to build marketing profiles.
• We do not publish student names, scores, or rankings outside their own school or centre.

A student always sees their own results. Teachers and administrators at the student's own school or coaching centre see that student's results and the class-level summaries built from them. A student who signs up independently belongs to no centre, so no teacher can see their data at all.

Separation is enforced in the database itself using row-level security, not merely hidden in the interface — one student's account cannot read another student's rows. Answer keys are held server-side and are never sent to the browser before an attempt is submitted.

We rely on two service providers, and no others:

• Supabase — hosts the database and handles authentication. Account details and practice data are stored there.
• Vercel — hosts and serves the website and app.

Both process data on our instructions in order to run the service. Data may be stored on servers outside India, on infrastructure operated by these providers.

Account and practice data is kept while the account is active, because progress tracking is the point of the product — a rating only means something across months of attempts.

If you ask us to delete an account, we remove the account and its associated practice records. Backups are retained for a short period and then cycle out. Demo-form enquiries are deleted once the conversation is finished.

Two things delete themselves on a schedule, without anyone asking: fault records after 30 days, and closed help-chat conversations after 180 days. Both run automatically every night.

You can delete your account and all of its data yourself, at any time, from Delete your account — the same link sits at the foot of your home screen once you are signed in. Deletion is immediate and permanent.

You can also ask us to show you the personal data we hold about an account or correct anything wrong. Email us and we will action it. If the account belongs to a student under 18, a parent, guardian, or the school may make the request on their behalf.

Most NEET and JEE aspirants are school students, and many are under 18. Where a school or coaching centre enrols students, we act on that institution's instructions and expect it to have obtained the consent required from parents or guardians. Where a student signs up independently and is under 18, a parent or guardian should review this policy and may contact us at any time to access or delete the account.

We deliberately keep what we collect from students to the minimum a diagnosis needs — no phone number, no address, no date of birth, no photograph.

• Passwords are hashed by the authentication provider and are never stored or transmitted in readable form.
• Per-student isolation is enforced at the database level with row-level security.
• Traffic is served over HTTPS everywhere.
• Administrative access is limited to the people who operate the service.

No system is perfect. If we ever discover a breach affecting personal data, we will inform affected users and the relevant authority without undue delay.

If what we collect or how we use it changes, we will update this page and move the date at the top. Material changes affecting students will be communicated to their school or centre.

For any question about this policy, or to request access to or deletion of an account, email us: