Privacy Policy

Last updated 15 Oct 2026 · version 2026-10

Draft for legal review. This text is not yet in force and may change before launch.

[COMPANY LEGAL NAME] ("BDQuiz", "we", "us") runs BDQuiz, a practice platform for Bangladeshi recruitment exams, starting with the Special BCS (Health). This policy explains what personal data we collect when you use the BDQuiz website and apps, why, who else handles it, how long we keep it, and the choices you have.

1. What we collect

Your account

• Your email address, or the name, email and Google account ID that Google shares when you sign in with Google. We never see your Google password.
• Your name, which you give when you set up your account.
• Optional profile details you choose to add: medical or dental college, year of graduation, district and phone number. We do not verify your phone number or use it to sign you in.
• The exam and track you are preparing for, your language and display settings, and whether you agreed to these terms and to marketing messages, and when.

We do not ask for your national ID (NID) or BMDC registration number.

What you do on BDQuiz

• Your practice and test activity: the questions you see, your answers, how long you take, questions you mark for review or bookmark, your confidence ratings, scores, ranks and progress.
• Questions you report as wrong or unclear, and what you write in the report.
• Live mock leaderboards show your name (or "A candidate" if you have not given one), your rank, score and time to other candidates.

Your devices and how you use the service

• A device identifier created by our app or website, the platform (web, Android, iOS), device model and app version, and when each device signed in. We limit how many devices can use one account.
• Records of sign-in codes we send you, including the email address, device and network address they were requested from.
• Usage events (for example, that a mock test was started) and error reports from the app and website. These are stored on our own servers under a pseudonymous ID, not with third-party analytics services.
• Your network (IP) address, used briefly to protect the service from abuse and rate-limit requests. Our logs keep only a shortened form of it.
• If you allow notifications: a push notification token for your device or browser.

Payments (when paid plans are available)

• Payments are made through payment gateways such as bKash and SSLCommerz. We receive the payment status, amount, method and reference number from the gateway. We never receive your card number, wallet PIN or banking password.

2. Why we use it

• To run your account and sign you in securely.
• To serve practice sets and mock tests, score them, rank live mocks, and show your results and progress.
• To personalise practice (for example, weak topics and questions due for review).
• To keep live mocks fair and the service safe: detecting abuse, cheating and sign-in attacks.
• To improve questions and the service, using statistics about how questions are answered.
• To send service messages (sign-in codes, receipts, live mock reminders and results).
• To send news about offers and new features, only if you opt in. You can turn this off at any time in Settings.
• To meet legal, tax and accounting obligations.

We do not sell your personal data. We do not send personal data to AI or language-model providers; our content tools send them question text only.

3. Who else handles your data

We use a small number of service providers who process data for us under our instructions:

Your data is stored on servers outside Bangladesh, in the region above. We may also disclose data when the law requires it, or to protect the rights and safety of our users and the service.

4. How long we keep it

• Account and profile data: while your account exists.
• Sign-in code records: 90 days.
• Detailed answers: 24 months, after which we keep only summaries.
• Payment records: as long as tax and accounting rules require.
• Server logs: kept briefly, then deleted as they rotate.
• Database backups: up to 12 months (monthly copies), on our own servers. [COUNSEL: deleted accounts stay in older backups until those expire; confirm how to word this alongside the 30-day purge below.]

When you delete your account, we delete your name, email, phone number and profile within 30 days. We keep your past test answers only in anonymised form, which cannot be linked back to you, to keep question statistics accurate.

5. Your choices and rights

• See and correct your profile in the app or website at any time.
• Export a copy of your data. [Until in-app export is available: by email to [CONTACT EMAIL].]
• Delete your account from Settings, or by emailing [CONTACT EMAIL].
• Marketing messages: off unless you turn them on; you can turn them off at any time.
• Notifications: you can turn push notifications off in your device or browser settings.
• Devices: you can see your signed-in devices and sign them out in Settings.

[COUNSEL: add any rights and complaint routes required under applicable Bangladeshi law.]

6. Cookies and browser storage

The website uses only cookies and browser storage it needs to work: to keep you signed in, recognise your device, remember your language, theme and text size, and keep a test in progress if your connection drops. We do not use advertising or third-party analytics cookies.

7. Security

We encrypt connections (HTTPS), store sign-in codes and session tokens only in hashed form, encrypt sensitive keys, and limit staff access, with additional sign-in checks for staff. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

8. Children

BDQuiz is for adults preparing for recruitment exams. It is not intended for anyone under [18].

9. Changes to this policy

We will post any change here with a new version date. If a change is significant, we will tell you in the app or by email, and ask you to agree again where needed.

10. Contact

[COMPANY LEGAL NAME], [POSTAL ADDRESS], Bangladesh. Email: [CONTACT EMAIL].