Privacy policy

Last updated: 24 October 2026

This policy explains what personal data iParkar collects, why, and the choices you have. We collect only what we need to run the Service.

1. Who is responsible

[YOUR FULL LEGAL NAME / BUSINESS NAME], [REGISTERED ADDRESS] is the data controller for iparkar.com and app.iparkar.com. Contact: hello@iparkar.com.

2. What we collect

Account data: your name, email address and password. Passwords are stored in hashed form by our authentication provider; we cannot see them.
Learning data: the practice exams you take, your answers, scores, time spent and progress history.
Purchase data: what you bought, when, and your access period. Payments are handled by Paddle as Merchant of Record. Paddle collects your payment details and billing country; we never see or store your full card details.
Technical data: IP address, browser and device information, collected by our hosting provider for security and to keep the site running.
Messages: anything you send us by email.
On your device: the free sample saves your best score in your browser’s local storage. It never leaves your device, and you can clear it in your browser settings.

3. Why we use it

To create and run your account and give you the access you paid for (performance of a contract).
To show your progress and results (performance of a contract).
To process purchases and meet tax and accounting obligations (contract and legal obligation).
To keep the Service secure and prevent abuse (legitimate interests).
To reply to your messages (legitimate interests).
To send product news or offers, only if you opt in. You can unsubscribe at any time (consent).

We do not sell your personal data, and we do not use it for advertising profiles.

4. Who we share it with

We use trusted service providers who process data on our behalf:

Cloudflare — website hosting, security and performance.
Supabase — user accounts and the database that stores your learning data.
Paddle — checkout, payments, invoicing, tax and refunds, as Merchant of Record. Paddle’s own privacy policy applies to the data it collects at checkout.
[EMAIL PROVIDER] — sending account and receipt emails.

We may also disclose data where the law requires it.

5. International transfers

Our providers may process data in countries other than yours, including the United States, the European Union and India. Where required, we rely on the safeguards those providers offer, such as standard contractual clauses.

6. How long we keep it

Account and learning data: while your account is open, and deleted within 90 days after you ask us to close it.
Purchase records: as long as tax and accounting laws require (usually up to 8 years).
Emails: up to 2 years after the conversation ends.

7. Your rights

Depending on where you live — for example under the EU/UK GDPR or India’s Digital Personal Data Protection Act — you may have the right to access, correct, delete or export your data, to object to or restrict certain uses, and to withdraw consent. Email hello@iparkar.com and we will respond within 30 days. You can also complain to your local data protection authority.

8. Security

We use encrypted connections (HTTPS), access controls and reputable providers to protect your data. No system is perfectly secure, so please use a strong, unique password.

9. Children

The Service is for adults and older students. It is not intended for anyone under 16, and we do not knowingly collect their data.

10. Cookies

We use only essential cookies and local storage needed to sign you in and run the Service. If we add analytics or marketing cookies, we will update this policy and ask for consent where required.

11. Changes

We may update this policy. The date at the top shows the latest version, and we will email account holders about significant changes.