Last Updated: August 9, 2026
1. Information We Collect
We collect information you provide directly to us, information we obtain automatically when you use our services, and information from third-party sources.
Personal Information:
- Name, email address, and (optionally) phone number
- Profile information you choose to provide, such as your profile picture, preferred language, and exam date
- Progress and performance data, such as practice history, scores, and streaks
- Subscription and plan information
- Voice recordings you submit for speaking practice, which are processed to evaluate and score your spoken responses
We store the information above in our database to operate your account. We do not store your account password ourselves: your password is stored in encrypted (hashed) form by our authentication infrastructure, and it is never visible to us in plain text.
You can create an account either with an email and password, or by signing in with your Google account. If you sign in with Google, we receive only the basic profile information Google shares with us to create your account (your name, email address, and profile picture) — see the Google section below.
Usage Information:
- Device information and identifiers
- Log data and analytics (via Google Analytics)
- Approximate location derived automatically from your IP address, used to determine your currency (INR or USD) — we do not access your device's precise GPS location
- Cookies and similar technologies
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send technical notices, updates, security alerts, and support messages
- Communicate with you about products, services, offers, and events
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent fraudulent transactions and other illegal activities
- Personalize and improve your experience
- Evaluate and score the voice recordings you submit during speaking practice
- Determine your currency (INR or USD) based on your approximate location
3. Information Sharing
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy:
- Service Providers: We may share information with third-party service providers who perform services on our behalf, such as our authentication and database infrastructure provider and Razorpay for payment processing
- Legal Requirements: We may disclose information if required by law or in response to legal process
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Protection of Rights: To protect the rights, property, or safety of our users and the public
4. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.
While we strive to protect your personal information, we cannot guarantee its absolute security.
5. Data Retention
We retain personal information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.
When we no longer need your personal information, we will securely delete or anonymize it.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request transfer of your information
- Opt-out: Opt-out of marketing communications
- Restriction: Request restriction of processing
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and use personal information about you. You can control cookies through your browser settings.
However, disabling cookies may affect the functionality of our services.
8. Third-Party Services
We rely on the following third parties to operate NaCl Prep. We do not build our own authentication, storage, or payment systems — we use established providers so that sensitive data (like passwords and card details) is handled by systems dedicated to that purpose rather than passing through or being stored on our own servers.
- Google: If you choose to sign in with Google, Google shares your basic profile information (name, email address, and profile picture) with us so we can create and authenticate your account. We do not receive your Google password or access your wider Google account. See Google's Privacy Policy.
- Razorpay: All payments are processed by Razorpay. When you pay, your card, UPI, or bank details are entered directly into Razorpay's checkout and sent straight to Razorpay — they are never entered into, or stored on, our servers. We only receive back a payment status and payment/order ID, which we use to confirm and record your purchase. See Razorpay's Privacy Policy.
- Authentication and database infrastructure: We use a third-party backend provider to store our database and to manage sign-in (both Google sign-in and email/password sign-in). This provider stores your hashed (encrypted) password, your voice recordings for evaluation, and the account data described in Section 1 on our behalf; we do not operate this infrastructure ourselves.
- Google Analytics: We use Google Analytics to understand how the app is used (e.g., page views, feature usage, and conversion events). See Google's Privacy Policy.
- ipapi.co: We use this service to look up an approximate location from your IP address, solely to determine whether to display pricing in INR or USD. See ipapi.co's Privacy Policy.
Our service may also contain links to other third-party websites or services that are not owned or controlled by us. We are not responsible for the privacy practices of these third parties, and we encourage you to read their privacy policies.
9. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.
By using our services, you consent to the transfer of your information to these countries.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date.
We recommend that you review this privacy policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy, please contact us:
Email: support@naclprep.com
You can also reach us through the contact form in the app.