Privacy Policy

Information we collect

• Account data: name, email and profile details you provide at sign-in or later in your profile.
• Usage data: tests taken, scores, streaks, notes you save and similar activity inside the app.
• Device data: when you are signed in we log your browser, operating system, device type and model (parsed from your browser user-agent) and your last login time. We do not perform IP-based geolocation.
• Payment data: payment identifiers and status from our payment provider. We do not store full card details.
• Communications: messages you send through contact forms or support, and chat messages in study groups.

How we use your information

• Provide core features such as test-taking, scoring and progress tracking.
• Show your analytics and activity in your dashboard.
• Process payments and manage plan access.
• Send service notices and notifications you have enabled.
• Detect fraud, prevent abuse and keep the platform secure.

Analytics and cookies

Essential cookies keep you signed in and remember preferences such as theme. These are always on.

With your consent only, we load two optional analytics tools:

• Microsoft Clarity: records how pages are used, including session replays (mouse movement, clicks and scrolling) and heatmaps, to help us find usability problems. Clarity masks sensitive input fields by default. See Microsoft's privacy statement for details.
• Umami (cloud): privacy-oriented, cookie-less page-view statistics (pages visited, referrer, browser and country-level data derived by Umami).

You choose on the consent banner when you first visit. If you reject, these scripts are not loaded. You can change your choice any time with cookie preferences.

Data sharing

We do not sell your personal information. We share limited data with service providers strictly to run the service: authentication, payment processing (Cashfree), hosting and database providers, push/real-time messaging, and, if you consent, Microsoft Clarity and Umami.

Security

We use technical and organisational safeguards to protect your data. No system is completely secure, so we cannot guarantee absolute security.

Data retention

We keep your information while your account is active or as needed to provide the service, meet legal obligations, resolve disputes and enforce our agreements.

Your rights: export and deletion

• Update your profile details any time from the Profile page.
• Export your data: signed-in users can request a copy of their data from the export endpoint (GET /api/user/export), which returns your account data as JSON.
• Delete your account: you can permanently delete your account and associated data from Settings (this uses DELETE /api/user/delete-account). Some payment records may be retained where the law requires.
• For anything else, email us and we will help.

Children's privacy

Outlawed is meant for exam aspirants. If you believe a child has provided personal data without appropriate consent, contact us and we will take appropriate action.

Changes to this policy

We may update this policy. Material changes will be communicated through the app or by email.

Contact

Email team@outlawed.live or use the contact page.