You are handing us answers about how your mind works. That deserves a plain account of where they go, so this page avoids the word "may" wherever we can say what actually happens.
What we collect
- Who you are. Name, email address, date of birth, city and state, your stage of study or work, and — if you are under 18 — a parent or guardian's name and email.
- What you answered. Your responses to each assessment, how long you took, and whether the browser tab lost focus during a timed test.
- What came out. Scores, bands, percentiles and the report generated from them.
- Payment records. Invoice number, amount, and the payment identifiers Razorpay gives us. We never see or store your card number, UPI PIN or bank credentials.
Why we ask for a date of birth
Two reasons, both load-bearing. Aptitude scores are meaningless without knowing who they are being compared against, and if you are under 18 the law and our own practice both require a guardian in the loop. It is not used for marketing.
Who can see your answers
- You. Always, in full.
- Your parent or guardian, if you are under 18. They receive a private link to the same report you see — not a summary and not a different version. That link expires, and it can be revoked.
- Our counsellor. Prarthana Thaker, who interprets results and answers questions about them.
- Anyone you send a share link to. Only if you create one. It shows your result cards and nothing else — no scores, no report, no email address — and you can switch it off at any time, which kills it immediately.
Nobody else. We do not sell your answers, we do not use them to train anything, and we do not share them with schools, colleges or employers.
Who processes data for us
We run on other people's infrastructure, and those companies process data on our behalf:
- Cloudflare — hosting, the database and stored report files.
- Supabase — sign-in and account credentials.
- Razorpay — payments.
- Resend — the emails we send you.
We do not run advertising trackers, and this site loads no third-party analytics script.
How long we keep it
Your account and report stay until you ask us to delete them. Assessment norms are built from scores in aggregate, so deleting your account removes you from the identified record while leaving the anonymous statistics that were already computed — those cannot be traced back to you.
Deleting your data
Email hello@lilacminds.com and ask. We erase your personal details and mark the account permanently erased, which removes it from every internal screen rather than just hiding it. We keep the minimum payment record the law requires us to keep, and nothing more.
Your rights under the DPDP Act
You can ask what we hold about you, have it corrected, have it erased, and withdraw consent. If you are under 18, your parent or guardian can do all of that on your behalf. Write to hello@lilacminds.com and we will answer within 30 days.
Security, stated honestly
Connections are encrypted, share and guardian links are stored only as one-way hashes so a copy of our database yields no working links, and access to interpreted results inside our own admin is restricted and logged with a name and a timestamp. No system is beyond compromise; if yours is ever affected we will tell you what happened rather than wait to be asked.
Changes
If this policy changes in a way that affects what we do with what we already hold, we will email you rather than quietly update the date at the top.