Delete your account
In the PrepMango app:
- Open the Account menu and choose Privacy & my data.
- Choose Delete account and type DELETE to confirm.
This signs you out everywhere. All your data, including backups, is gone within 30 days, except the few small records listed in section 5 of the privacy notice. Can’t sign in? Email contact@prepmango.com from your account’s email address.
PrepMango is a study and practice app for job interviews. It is made by Polsiva Private Limited ("Polsiva", "we", "us"). Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), Polsiva is the data fiduciary for your personal data in PrepMango.
- Privacy contact: contact@prepmango.com
- Grievance contact: write to contact@prepmango.com (details in our grievance redressal page)
In short
- We collect what we need to run your interview prep, and nothing more.
- Your resume, job description and answers are used only to make your plan, lessons, practice and feedback.
- We do not sell your data and we show no ads.
- To provide the AI features, we send your text, files and answers to our AI service provider, Google (the Gemini API). It processes the data under Google's own terms, which may change. If we ever add another AI provider, we will name it in this notice first.
- For now we use Google's free tier. On it, Google may use what we send (your text, files and answers) and the AI's replies to improve its products, and people at Google may read them. So please don't put sensitive personal details in your resume, notes or answers beyond what your prep needs (for example your phone number, home address, ID numbers, health or family details). We will move to Google's paid tier, where Google does not use what is sent to improve its products, and update this notice when we do.
- When you tap Speak to dictate, your audio goes to our own server, where speech-to-text software that we run ourselves turns it into text in the box. It is not sent to any other company.
- Files on a prep are deleted 30 days after its interview date; files you keep only in Resumes are deleted 90 days after you last used them. You can delete them sooner.
- Voice recordings (only once spoken interviews launch; they are not available yet, so none are made today) will stay until you delete them or your account. They are encrypted. Your answers and other content are also kept until you delete them or your account, except where section 5 sets a shorter time.
- You can download your data, fix it, or delete your account inside the app.
- Some of our service providers may process data outside India (for example Google and Cloudflare). We tell you exactly who and why below.
- PrepMango is for people aged 18 and over.
1. What we collect
1.1 What you give us
| What | Examples | Why we need it |
|---|---|---|
| Account details | Your email address and the name you give us (taken from Google if you sign in with Google; you can change it in Your account). Your profile picture if you sign in with Google | To create your account, sign you in and greet you by name |
| Job details | The job description you paste, the role, company, level, interview date, hours per day | To build your plan |
| Files | Resume, job description or notes files you attach to a prep or keep in Resumes: PDF, Word, text or images (screenshots). Up to 3 files per prep and 20 in Resumes, 5 MB each | To read your resume and the job, to find gaps and strengths, and to use them in practice |
| Text you type | Your answers in practice and text mocks, intake answers, notes | To give feedback and scores |
| Voice (dictation) | What you say when you tap Speak to fill a text box | To turn your speech into text in the box, on our own server. You check the text before you send it |
| Choices | Settings such as language picks, marketing opt-in (off by default) | To do what you asked |
| Messages to us | Emails you send to support or privacy | To reply to you |
1.2 What we collect while you use the app
| What | Details | Why |
|---|---|---|
| Activity | What you practiced, when, scores, plan progress, streaks, minutes used | To show your progress, find weak spots, update your plan, and apply daily usage limits |
| Sign-in and device information | When you signed in, the kind of device or browser, and the city and country (worked out from your connection by our network provider Cloudflare). Your full IP address is never stored in our database: where we need it to apply rate limits, we keep only a keyed one-way hash of it, for at most 2 days. Our server's access log keeps only a shortened address (the last part removed, for example 203.0.113.0), never the full one | To show you your signed-in devices, to let you sign out of a device, and to spot strange sign-ins |
| Limits and usage | How many AI answers and plans you used today, and how much dictation | To keep the free beta fair and our costs bounded |
| Technical errors | Crash and error reports without your content. Our error tool (Sentry) is switched off today. When we switch it on, it runs on our servers only and is set to leave out personal data: no request bodies, no cookies or sign-in headers, no IP addresses, no user details, no variable values. The app on your phone or in your browser sends no crash reports | To fix bugs |
1.3 What we do not collect
- No phone number, no password, no payment card or bank details (the free beta takes no payments).
- No precise location. The city shown for sign-ins comes from your connection, not from your phone's location permission.
- No contacts, photos library or microphone access outside a dictation you start.
- We do not use advertising trackers or third-party analytics SDKs. The app and the website contain none.
2. Why we use your data, and our basis
Under the DPDP Act we process your personal data on the basis of your consent, given when you create your account (you tick "I agree" to these terms and this notice before the account is made, and we record the versions you agreed to and when), for the purposes listed below, and for a few "legitimate uses" the law allows.
| Purpose | Data used | Basis |
|---|---|---|
| Run your account and sign you in | Email, name, sign-in records | Consent (given at sign-up) |
| Build your plan, lessons and practice from your job details and files | Job details, files, text | Consent |
| Give feedback and scores on your answers | Answers | Consent |
| Turn your speech into text when you tap Speak | Voice (dictation) | Consent (you tap Speak each time; the microphone permission is yours to give) |
| Show your Activity page, streaks and weak spots | Activity | Consent |
| Security: spot strange sign-ins, stop abuse, keep the service within limits | Sign-in records, usage | Consent; and legitimate use where the law allows |
| Emails about your account (sign-in codes, "your data download is ready", "a download was made") | Consent | |
| Product news or offers | Only if you switch it on. It is off by default and you can switch it off any time |
We do not use your data for any other purpose. If that changes, we will ask you again first.
You can withdraw your consent at any time. Withdrawing the consent for the core service means we can no longer run your account, so the in-app route is Delete account (see section 8).
3. Who else handles your data (our processors)
We use these service providers to run PrepMango. They process data to provide PrepMango's features. Each provider processes the data under its own terms, which may change.
| Provider | What it does for us | Your data it sees | Where |
|---|---|---|---|
| Google (Gemini API) | Our AI: it reads your resume and job text, builds plans, checks what you type before the coach sees it, grades answers, answers the coach and plays the interviewer in text mocks. It runs Google's Gemini models | Your job text, file text or images, notes and answers, and the AI's replies | Google's own locations: its terms say data may be stored or cached in any country where Google or its agents have facilities, so it may be processed outside India. On the free tier we use for now, Google may use this data to improve its products, and people at Google may read it (see below) |
| Cloudflare | Our network front door and security (traffic passes through it), the sign-in bot check (Turnstile), and R2 storage for your uploaded files, extracted text, any voice recordings we keep and encrypted backups | Traffic to our site and app. Stored files are encrypted by us before they reach R2 (see section 7) | Global network. R2 storage buckets are created with the Asia-Pacific location hint (no jurisdiction restriction is set) |
| Amazon Web Services (AWS) | The servers and database that run PrepMango, in Mumbai, India | Everything stored in our database | India |
| ZeptoMail (Zoho) | Sends our emails: sign-in codes, download links, notices | Your email address and the message | India (we use ZeptoMail's India data center) |
| Google (sign-in) | Lets you sign in with your Google account, if you choose to | What Google shares with us: a verified email, name, picture | Google's own locations |
| Error tracking (Sentry) | Collects crash and error reports with personal data switched off | Technical error details | Switched off today. We will name its region here before we switch it on |
| Speech-to-text for dictation | Our own server runs speech-to-text software that we host ourselves (faster-whisper). It is not a separate company | The audio you record when you tap Speak | India (our server) |
| App stores (Apple App Store, Google Play) | Distribute the app | Their own store records; we do not receive your payment details | Their own locations |
Speech and the Speak button. When you tap Speak to dictate:
- Your audio goes to our own server, where speech-to-text software that we run ourselves turns it into text and puts that text in the box. You check it before you send it.
- The audio is not sent to any other company. It is not sent to your browser's or your phone's speech service, and not to an AI provider. The text, once you send it as an answer, is handled like anything else you type (see below).
- Meera's spoken voice (an AI voice that reads lessons or questions aloud, and voice mock interviews) is off today and not offered. If we turn on a speech provider in future, we will name it here before it handles your data.
AI providers and your data. We send your text, files and answers to Google's Gemini API so the features work. It processes the data under Google's own terms, which may change. If we ever add another AI provider, we will name it here first.
Google's free tier, for now. While PrepMango is new we use Google's free tier of the Gemini API. On the free tier, Google may use what we send and the AI's replies to improve its products, and people at Google may read them (Google says it first separates them from our account). Google asks that sensitive, confidential or personal information is not sent to its free tier, so please do not include sensitive personal details in your resume, notes or answers beyond what your prep needs. We send only what a feature needs; we do not add your account's email address or sign-in details to it (anything you write in a resume or note is sent as you wrote it). We will move to Google's paid tier, where Google does not use prompts or replies to improve its products, and update this notice when we do.
4. Data leaving India
Google (the Gemini API, our AI) and Cloudflare's network may process data outside India. Your resume and job text and your answers can be sent to Google. We do this because it is how the AI features work.
- We send only what is needed for the task.
- Google and Cloudflare handle the data under their own terms, which may change. On Google's free tier, Google may use what is sent to improve its products (see section 3).
- The DPDP Act allows transfer of personal data outside India except to countries the Government restricts.
- If you do not want data to leave India, please do not use the AI features, or delete your account.
Our database and servers, including the speech-to-text server used for dictation, are in Mumbai, India. Your dictation audio stays there.
5. How long we keep your data
This table is what the app does today. Deletion is automatic, except for voice recordings (which exist only once spoken interviews launch; none are made today), which will stay until you delete them or your account.
| Data | How long we keep it |
|---|---|
| Practice, scores, plan history, activity (Activity page) | 12 months, then deleted |
| Short checked plan fields (role, company, level, skills, rounds) | Stay with your plan for 12 months, even after your files are deleted |
| Uploaded files and the text we read from them | Files on a prep: 30 days after your interview date. Files kept only in Resumes (no prep): 90 days after you last used them (uploaded or used to start a practice). Or immediately when you delete the file, or when you delete the prep or your account. When you view one of your files, a temporary encrypted copy is made for that and deleted within 15 minutes |
| Voice recordings (any audio clips we keep; only once spoken interviews launch, and none today) | Until you delete them or your account. They are encrypted, and never written to our logs. Delete them all with Privacy & my data (the Delete my voice recordings button appears only once spoken interviews launch, and is not shown today); deleting a practice from Activity deletes its recording too; Delete account deletes all of them. Either way they are gone within the hour |
| Dictation audio (when you tap Speak) | Sent to our own server only to be turned into text. We write nothing of it to our logs. Any clip we keep is a voice recording, covered by the row above |
| Sign-in history (date, how you signed in, device kind, city, country; no IP address) | 90 days, for security. You cannot delete it yourself during that time |
| Rate-limit counters (a keyed hash of your address or network, or of your inbox; no content) | 2 days, then deleted |
| Server access logs (shortened address, the page asked for, browser kind; no content, no sign-in codes) | Until the log rotates. Our server keeps a small fixed amount of log per service and overwrites the oldest |
| An activity event you delete | Can be undone for 10 minutes, then deleted for good |
| "Download my data" files | Kept encrypted. The file can be downloaded for 24 hours, then it is deleted (each download link works once, for 5 minutes) |
| Email sign-in codes and download codes | Minutes, then expire |
| Deletion receipt (a record that you asked for deletion and when, with no content) | Kept as proof that we did it |
| Payment and invoice records | We take no payments in the free beta, so none exist. If we add paid plans, we will keep payment records as long as tax law requires. Our working default is 8 years |
| Backups | Copies in backups are deleted on a cycle of 3 to 14 days. After you delete your account, all your data, including backups, is gone within 30 days |
Limits are enforced by automatic daily jobs. We cannot extend these periods beyond the maximum set above without changing this notice.
6. No sale, no ads
- We do not sell or rent your personal data.
- We do not show advertising and do not share data with advertisers.
- PrepMango itself does not sell your data or use it for advertising.
- To run the AI features we send your text, files and answers to our AI service provider, Google (the Gemini API, see section 3). It processes the data under Google's own terms, which may change. On the free tier we use for now, Google may use what is sent to improve its products; that is Google's use, not a sale or advertising by us.
- We share data with the processors in section 3 only to run the service, and when the law requires us to (for example a valid order from a court or authority).
7. How we keep your data safe
- Everything travels over encrypted connections (HTTPS/TLS).
- Uploaded files, the text read from them, any voice recordings and your "Download my data" file are encrypted by us before they are stored in R2, on top of R2's own encryption. Someone with access to the storage bucket alone cannot read them. Your download file is unlocked only while it is sent to you, through a link that works once for 5 minutes.
- Backups are encrypted.
- Sign-in uses an email code or Google. We hold no passwords.
- Every endpoint is rate limited; limits fail safe (they block rather than open up).
- Your files are private to your account. Our admin tools cannot show your resume, answers, transcripts or files. Looking up an account needs a reason and is logged.
- Text from files or the web is treated as untrusted when we give it to the AI (so a file cannot give the AI orders).
- Error reports are set to leave personal data out.
- We run security checks on our code and servers before each release.
No system is perfectly safe. If a personal data breach affects you, we will tell you and the authorities as the law requires.
8. Your rights and how to use them
Under the DPDP Act you can:
| Your right | How to do it in the app |
|---|---|
| Know and get a copy of your data | Account menu, then Privacy & my data, then Download my data. Choose the parts (plans and lessons, practice and scores, activity and sign-ins, files) and a format (PDF report or JSON + CSV zip). Confirm with a 6-digit code we email you. You can download the file for 24 hours, only while you are signed in (each download link works once, for 5 minutes). One download per day. We email you that a download was made |
| See what we hold and what you did | Account menu, then Activity. See your timeline, devices and usage |
| Correct your data | Edit your role, company, skills and plan details in the app. For anything else, email contact@prepmango.com |
| Delete your data | Delete one activity event or your history from Activity. Delete one file with ✕ or from Resumes. Once spoken interviews launch (they are not available yet), delete any voice recordings we hold with Privacy & my data, then Delete my voice recordings (shown only then), or delete them all by deleting your account. Delete all your data with Privacy & my data, then Delete account (you type DELETE to confirm). It signs you out everywhere. Everything is gone within 30 days, including backups, except the small items in section 5 |
| Withdraw consent | Switch off marketing in Privacy & my data. To withdraw the main consent, delete your account |
| Complain | Write to our Grievance Officer (below). We will reply as set out on our grievance redressal page |
| Name someone to act for you (nominate) | If you die or cannot act for yourself, you may name a person to exercise your rights. Email contact@prepmango.com with the name and a way to verify them |
If you are not satisfied with our reply, you may complain to the Data Protection Board of India as the Act provides.
We may need to check that you are you before acting. We keep what the law makes us keep.
9. Children
PrepMango is for people aged 18 and over. Our terms require it. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we will delete it and its data. If you think a child uses PrepMango, tell us at contact@prepmango.com.
10. Cookies and similar storage
We set no cookies in the app or on the web, and we do not use advertising cookies. What the app keeps on your device:
| Where | What | Why, and for how long |
|---|---|---|
| Web: this tab's session storage | prepmango.refreshToken, prepmango.pendingRevocations | Keeps you signed in while the tab is open, and finishes a sign-out made while offline. Gone when you close the tab |
| Web: local storage | prepmango.pref.* | Small choices: how you answer on each screen, the plan view, the topic sort, the plan you last opened. No personal content. Stays until you clear your browser's site data |
| Phone: the system's secure storage (Keychain or Keystore) | Your sign-in key | Keeps you signed in on this device until you sign out |
| Phone: a small file in the app's own folder | The same small choices as on the web | Until you delete the app |
Cloudflare's bot check (Turnstile), shown at sign-in on the web, runs from Cloudflare and may keep its own technical data under Cloudflare's privacy terms.
11. Third-party links
Lessons may link to free outside resources (for example official documentation). Their privacy practices are their own.
12. Changes to this notice
We may update this notice. Each version has a number. If a change is important, we will tell you in the app or by email and ask for your consent again where the law needs it. The date and version at the top show the latest.
13. Contact
- Privacy questions, requests and general support: contact@prepmango.com
- Grievance contact: write to contact@prepmango.com
- Polsiva Private Limited