Privacy Policy

This policy explains how MyCATPrep handles information when you read our website or use the CAT preparation tracker. It covers account-linked study records and the browser storage used by the service. Read it alongside our Terms of Use.

MyCATPrep is an independent preparation project. It is not affiliated with the Indian Institutes of Management or the CAT examination authority.

• Account information: your sign-in identity, email address and available profile details supplied through Clerk and your chosen sign-in provider, including Google. MyCATPrep associates your account with an internal user identifier.
• Preparation information: the goals, target institutions, availability, resource categories, syllabus updates, study sessions, practice results, mock scores, analysis, mistakes and notes you choose to enter.
• Derived records: progress summaries, recommendations, their supporting evidence and confidence, plan history, and records of product actions and reminder delivery.
• Technical information: device and browser details, page visits, referral information, interactions, performance measurements and network information processed by hosting, authentication and analytics services.

Provide only information needed for your preparation. Avoid putting passwords, financial details, identity documents or other people’s personal information in study notes.

We use account information to sign you in and associate study records with your account. Preparation information supports saved history, syllabus tracking, mock analysis, progress views and optional study recommendations. We keep the evidence behind derived results so those results can be explained and reviewed.

Technical and usage information supports site operation, security, troubleshooting, performance measurement and understanding how the service is used. Completing a study task is recorded as activity; it does not by itself establish skill improvement.

• Sign-in: Clerk uses cookies and related browser mechanisms to maintain authentication.
• Plan preview: anonymous onboarding uses an encrypted, HttpOnly cookie with a two-hour expiry. Saving the draft to an account requires sign-in.
• Focus sessions: timer state uses sessionStorage to support returning to a session in the same browser tab. That timer state is not synchronised across devices.
• Previous tracker data: the retired browser-only tracker used localStorage. The archive download at the previous tracker page reads known study keys locally. It does not upload, delete or automatically import them into the current tracker.
• Analytics: Google Analytics can use cookies to measure visits and interactions when enabled in production.

Browser settings can restrict cookies and storage, but blocking authentication storage can prevent sign-in or saving work. Clearing browser data can remove unsaved drafts and previous local records. It does not delete study records already saved to your account.

The production site can load Google Analytics for page visits and marketing interactions. Marketing button events include the page path and button placement; they do not include the study values in a previous-tracker archive. Vercel Web Analytics and Speed Insights are integrated for usage and performance measurement. These tools can process page URLs and technical information under their providers’ policies.

When configured, Mixpanel measures navigation, onboarding, feature use, and successful saves using a pseudonymous account identifier. Tracking starts enabled; the preference below disables Mixpanel events and recordings for this browser, including server events associated with its requests. It does not change Google or Vercel analytics preferences. Do Not Track is respected. Clearing browser data resets this preference. A sample of 10% of eligible sessions may be recorded with text and inputs masked. Authentication and account screens are excluded; notes, answers, scores, emails, and names are not included in product events. Recordings contain page structure and interactions. The configured Mixpanel project uses India data residency.

Optional study reminders require email opt-in in Settings and an enabled delivery service. When configured, Resend receives your email address and reminder content, which may refer to your preparation. You can turn off optional email reminders in Settings. Authentication-related messages are handled separately by the sign-in service.

These services process information needed to operate MyCATPrep. Their own policies describe their handling of data:

• Clerk: authentication and account sessions.
• Google: Google sign-in and Google Analytics, when used.
• Vercel: hosting, operational information, Web Analytics and Speed Insights.
• Neon / Databricks: the Postgres database holding account-linked application records.
• Resend: optional email delivery, when configured and opted into.

Providers may process information in countries other than your own. This policy does not promise storage exclusively in India. Information may also need to be disclosed where required by applicable law or to address fraud, abuse or a security incident.

Account-linked study records, history and derived results are stored in a server-side database so that you can return to your preparation. The current application does not automatically erase study history after a fixed period of inactivity. Different providers apply their own retention rules to authentication, analytics, logs and backups.

The application uses server-side account and ownership checks, validated inputs and an encrypted onboarding draft. No internet service can promise absolute security or uninterrupted availability. Signing out is especially important on a shared device.

You can review your recorded work, use available editing controls, adjust account preferences and turn off optional reminders. Browser privacy controls and the Google Analytics opt-out tool can limit some analytics collection.

The current tracker does not offer an account-wide self-service export or deletion interface. The previous tracker archive only covers older browser-stored records. Signing out, clearing cookies or removing a sign-in session does not erase the server-side study history.

Your rights to access, correction, erasure, withdrawal of consent or a complaint depend on applicable law. A request may require identity verification, and legal or security obligations may limit deletion.

The service is designed for CAT and postgraduate entrance preparation, rather than for children. The current application does not provide a parental-consent workflow. Do not submit a child’s personal information on their behalf.

We may update this policy as the service and its data practices change. The date at the top identifies this version. Review this page when deciding what information to share or which optional features to enable.