On this page
Who we are
QualExam is published by Vishwen Labs (OPC) Private Limited (CIN U62011UP2026OPC250741), with its registered office at 128, Krishna Colony, Azamgarh City, Sadar, Azamgarh 276001, Uttar Pradesh, India. We decide how the information described here is used, and we are responsible for it.
Reading the site
You can read the public pages without an account. Nothing you do on a public page is sent to us unless you use one of the forms described below.
Like every website, ours receives your IP address and browser details with each request, to deliver pages and protect the site from abuse. Our hosts keep these technical logs for a short time, measured in days.
When you ask us to email you
Some pages offer to email you a study plan for your exam date. When you use the form, we keep your email address (as you typed it, and a simplified copy we use to recognize the same address), the exam, which form you used, the page you first arrived on with any campaign tags in its link, and how far through those emails you are. If you give an exam date, or the hours a week you can study, we keep them, to send the reminders before it.
We use this to send what you asked for, then up to four follow-up emails about that exam over the next few weeks and, if you gave an exam date, reminders 30, 14 and 7 days before it (for an exam sat on set days, also 14 and 2 days before your sitting's application deadline). Each one has a link that stops them all. If you study that exam with us, now or later, they stop.
To stop the forms being misused, we also keep a scrambled (hashed) copy of your IP address, with the email address, for two days.
When you write to us
The contact form sends your message, your email address and your name, if you give one, to our support mailbox as an email, the same as writing to us directly. We send one email back to say it arrived.
To stop the form being misused, we keep a scrambled (hashed) copy of your IP address, with your email address, for two days.
Your account
To create an account we need your email address and a password; you can also sign in with a link sent to your email. Your password is stored only as a scrambled (hashed) value by Supabase, our sign-in provider, and nobody can read it back. We do not ask for your name.
You can also continue with Google. Google then sends us your email address, your name, a link to your profile picture and an ID for your Google account, and Supabase keeps them with your account. Supabase uses the ID to recognize you next time; we use only your email address.
Each time you sign in, Supabase records the time, your IP address and your browser, to keep the account secure. That record is removed when you sign out on that device, and when you delete the account.
What you do in an exam is kept per exam: the exams you study, your exam date and the hours a week you gave, your progress through the lessons, your answers to practice questions, your flashcard reviews, your mock exams, the marks you give yourself on practice cases, and your email choices. We use it to show your progress, choose what to study next, and time your reminders.
Payments
Paid access is sold by Dodo Payments, our reseller and the merchant of record: the legal seller, which takes the payment, issues the receipt and handles tax. Dodo collects your payment details under its own privacy policy; we never see your card number.
Dodo tells us what you bought, for which exam, the payment’s reference and the email address on it. We keep the access it gives, with its dates and the payment reference. If a payment notice cannot be matched to an account, we keep that notice, email address included, for up to 12 months to sort it out.
If you start buying access and do not finish, Dodo tells us, and we may email you a reminder.
The email we send
Account emails (confirming your address, a sign-in link, a welcome, confirmation of access you bought) always arrive, because they follow something you did.
Study reminders, exam-date countdowns and purchase reminders are sent per exam. You can turn each kind off for each exam in Settings, or with the link at the bottom of every one.
We keep a record of each email we send: the address, which email, the exam, when, and the delivery service’s reference. It stops duplicates and limits how many you get.
Our email is sent by Resend. Links in it pass through Resend’s click tracking, at track.qualexam.com, so we can see which links are used. We do not track whether an email is opened.
Analytics
Vercel Analytics and Speed Insights count visits and measure page speed without cookies or identifiers. They cannot tell who you are.
Google Analytics shows us how the site is used: which pages and exams people study, and where they stop. It loads for every visitor with its storage switched off. Until you answer the question on your first visit, and if you say no, it sends Google only cookie-free signals: the page, the time, the page before it, and your browser and device type. Google works out a rough location from your IP address and does not keep the address.
If you say yes, Google Analytics also stores cookies that recognize your browser from one visit to the next. We never use it for advertising, and never send it your name or email address. The cookies page lists everything stored in your browser.
Who else handles it
These services run parts of the site for us, and handle your information only for that:
Supabase: our database and sign-in, in the United States (Amazon Web Services, us-east-1).
Vercel: hosting and the cookie-free analytics, in the United States and on its global network.
Resend: sending email, in the United States.
Google: Google Analytics, as described above. If you continue with Google, Google also handles that sign-in, under its own privacy policy.
Hostinger: our domain name and the support mailbox, which holds the emails you send us.
Dodo Payments is different: as the seller of what you buy, it handles your payment information under its own privacy policy.
We do not sell your information or share it for advertising. We disclose it only where the law requires us to.
Where it is kept
We are a company in India, and our providers keep most data in the United States, so your information is handled there whichever country you are in.
How long we keep it
Your account and everything in it: until you delete the account. Our database backups roll over within 7 days.
The record of each sign-in: until you sign out on that device, or delete the account.
The record of emails sent to you: while you have an account.
Details from an email form: 12 months if you never study that exam with us, together with the record of emails sent to you. If you do study it, they stay with your account until you delete it.
The scrambled IP address from an email form or the contact form: 2 days.
The record of the email confirming a message you sent us: 12 months.
Payment notices we could not match: 12 months.
Emails and messages you send us: while we need them to help you, and deleted if you ask.
Google Analytics data tied to your browser: no more than 14 months.
Technical logs at our hosts: a short time, measured in days.
Dodo Payments keeps its own records of your payments, for as long as the law requires of a seller.
Your choices and rights
Depending on where you live, you may have the right to see, correct, delete or take a copy of your information, and to object to how we use it. You can do most of this yourself.
Email: turn off each kind of optional email for each exam in Settings, or use the link at the bottom of any of them.
Analytics: answer the question on your first visit; the cookies page says how to change your answer. A browser that sends Global Privacy Control is treated as a no.
Deleting your account: Settings, then Delete account. Your account, your study data in every exam, and the records of emails sent to you go at once. Deleting is not a refund; the refund policy explains.
For anything else, such as a copy of your information or a correction, write to support@qualexam.com. We may ask you to confirm the request from the address on your account, and we will answer within 30 days.
If you are not satisfied with our answer, you can complain to the data protection authority where you live.
Security
Information travels encrypted between your browser and the site, and the database lets each account read only its own data.
Children
QualExam is for adults preparing for professional exams, and is not meant for anyone under 18. We do not knowingly collect information from children. If you think a child has given us theirs, write to us and we will delete it.
Changes
When this policy changes, the date at the top changes with it. If a change matters, we will email account holders before it takes effect.
Contact
support@qualexam.com, or write to the registered office above.