CatMate

Legal

Privacy Policy

Last updated: April 2026

1. Overview

CatMate ("we", "our", or "us") operates the website catmate.in. This policy explains what data we collect when you use CatMate, how we use it, and your rights regarding it. By using CatMate you agree to the practices described here.

2. Information We Collect

  • Account data — name and email address when you sign in with Google.
  • Test & attempt data — your answers, time per question, scores, and attempt history.
  • Usage data — pages visited, session duration, and browser/device type collected via Vercel Analytics.
  • Bookmarks — questions you save for later review.

We do not collect payment card details directly. Any payments are handled by a third-party processor.

3. How We Use Your Data

  • To authenticate your account and maintain your session.
  • To grade your test attempts server-side and store your scores.
  • To display your analytics, score history, and attempt breakdowns.
  • To improve the platform based on aggregated usage patterns.
  • To send transactional emails (e.g. account-related notifications) — no marketing emails without consent.

4. Data Storage & Security

Your data is stored in a MongoDB database hosted on MongoDB Atlas. Attempt responses are processed and stored server-side — answers are never evaluated in the browser. We use industry-standard encryption for data in transit (TLS) and at rest.

Access to production data is restricted to authorised team members only.

5. Third-Party Services

  • Google OAuth — used for sign-in. Governed by Google's Privacy Policy.
  • Vercel Analytics — anonymous usage analytics. No personal identifiers are shared.
  • Vercel Speed Insights — performance monitoring. Anonymous only.

We do not sell your data to any third party.

6. Cookies

We use a session cookie to keep you signed in (via NextAuth.js). No third-party tracking cookies or advertising cookies are set. You can clear cookies at any time through your browser settings.

7. Data Retention

We retain your account and attempt data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

8. Your Rights

  • Access — request a copy of your personal data.
  • Correction — ask us to correct inaccurate data.
  • Deletion — request deletion of your account and associated data.
  • Portability — request your attempt history in a machine-readable format.

To exercise any of these rights, email us at hello@catmate.in.

9. Children's Privacy

CatMate is intended for users who are 16 years of age or older. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of CatMate after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Reach us at hello@catmate.in.