TopperTest Privacy policy

This policy describes TopperTest's current local exam-preparation website and app. It does not describe a publicly launched production service.

Account and study information

Google verifies your identity and email when you first register. We retain your Google-linked account identifier, email, name and Firebase identity mapping. Setup records a unique username, first name, optional last name and WhatsApp number. WhatsApp numbers are unverified contact information; we do not verify ownership by OTP or use WhatsApp for account recovery. Older profiles may also contain details such as city, district, education, date of birth and biography.

We store your exam preferences, test answers and results, marks, attempt times, progress, bookmarks and notification state to provide study features. Public leaderboard views can show your first name, rank, points or scores and test participation; email, phone number and private profile fields are not public ranking fields.

Authentication and service providers

Google provides identity verification and Firebase Authentication manages passwords and password-reset emails. TopperTest does not store your raw password. Opaque app sessions expire after eight hours and a new student login replaces previous sessions. Google and Firebase process authentication information to provide these services.

Notifications and optional tracking

If you permit Android notifications, Firebase Cloud Messaging processes the device's push token and notification delivery. We retain the push token, device label and session binding for study notifications. Change permission in Android app settings. Disabling push does not delete study records.

Optional analytics and advertising collection is disabled for local use. Any future activation will be disclosed separately, identifying the providers and obtaining any required consent before optional collection. Installing a provider SDK or saving an ID alone is not consent.

Use, access and retention

Account and study data supports login, saved practice, progress, rankings, notifications and requested support. Authorized staff access is limited by their current role. No payment processing or AI service is active in this preview.

Account and study records remain available while the account is retained. Login sessions have an eight-hour expiry. Accepted permanent deletion revokes all TopperTest sessions and removes the account, profile/contact details, credentials, study answers/results/progress, saved items, access records and notification/device bindings. The linked Firebase Authentication user is also deleted; your Google or Gmail account itself is not deleted. If provider or database cleanup is temporarily unavailable, the account remains blocked and automated processing retries. Completion is shown only after both cleanup steps succeed. A minimal security receipt containing hashed identifiers and deletion timestamps is retained for up to 24 hours after completion to reject stale sign-in callbacks, then removed. No payment processing or advertising data is active in this local preview.

Deletion and contact

You can permanently delete your TopperTest account and associated data on the website without installing the app, or from the app's account/profile area. Sign in recently to verify the account, read the irreversible-deletion warning, type DELETE and choose Permanently delete account. Accepted deletion signs you out. A deletion-in-progress result means cleanup is not yet confirmed complete. Firebase-hosted password reset alone does not immediately revoke an existing TopperTest session.

For support and privacy inquiries, contact jittumali50@gmail.com. Never send your Google or TopperTest password.

Open student practice →