Privacy Policy
Effective Date: October 2, 2026 • Applicable to Competitive Exam Master (CEM) Android Application (com.competitive.exam.master) & Web Services
Developer / Operator:ONLINE VIBE (“OnlineVibe”, “we”, “us”, or “our”)
Application Name: Competitive Exam Master (CEM)
Package Identifier: com.competitive.exam.master
Official Support & Privacy Desk: cemapp@onlinevibe.in
1. Overview & Commitment
Competitive Exam Master (“CEM”) is an educational examination preparation application developed and published by ONLINE VIBE. This Privacy Policy governs the collection, processing, secure handling, storage, retention, and deletion of personal and sensitive user data obtained through your use of the CEM Android application and associated online services at https://cemapp.in.
We hold your digital privacy and trust with the utmost seriousness. In strict compliance with the Google Play Developer Program Policies, the Information Technology Act (India), and global data protection standards, this document transparently describes how we protect your personal and sensitive data.
2. Personal and Sensitive User Data We Collect
We only collect data that is strictly necessary to deliver personalized educational mock tests, syllabus-aligned study modules, and cross-device account synchronization:
Personal Identifiable Information (PII)
- Account Credentials: Full name, verified email address, and unique user identifier (UID) provided when signing in via Google Sign-In (Firebase Authentication).
- Profile Details: Optional profile picture URI provided by your Google account for in-app header display.
Financial & Transaction Verification Data
- In-App Purchase Receipts: Google Play Order IDs, Purchase Tokens, product IDs (e.g.,
cem_kerala_psc_pro,cem_entrance_pro), plan expiration dates, and subscription entitlement status. - Payment Security Note: CEM never collects, processes, or stores payment card numbers, bank account details, UPI PINs, or CVVs. All monetary transactions are processed exclusively by Google Play Billing under Google's PCI-DSS compliant infrastructure.
Educational Activity & Learning Telemetry
- Mock exam and topic practice test attempts, question-level answers, completion timestamps, accuracy percentages, and subject-wise score analytics.
- User-selected bookmarks (saved questions, revision notes, active recall flashcards, and personalized mistake tracking records).
Device, Technical & Diagnostic Identifiers
- Hardware manufacturer, device model, Android OS version, application build number, and screen resolution.
- Ephemeral IP address (utilized for secure API rate-limiting and regional content delivery), network connection type, and Firebase Crashlytics crash traces used strictly to diagnose app stability.
3. Purpose of Data Processing
Your information is used strictly for legitimate educational and functional objectives:
- To authenticate your student identity and maintain secure, persistent login sessions.
- To seamlessly synchronize your practice progress, bookmarks, and offline study notes across devices.
- To compute individual performance metrics, percentile rank estimates, and strength/weakness diagnostics.
- To verify in-app subscription entitlements purchased via Google Play Billing.
- To maintain application security, monitor API health, detect fraudulent access, and resolve technical crashes.
4. Secure Data Handling Procedures for Personal and Sensitive User Data
Mandatory Google Play User Data Policy DeclarationONLINE VIBE implements robust technical, operational, and administrative safeguards designed to ensure the integrity, confidentiality, and security of all personal and sensitive user data collected by Competitive Exam Master:
All communications between the CEM Android App, web client, and backend database servers are mandatory-encrypted using modern Transport Layer Security (TLS 1.2 and TLS 1.3)protocols over HTTPS. Cleartext or unencrypted HTTP traffic is strictly blocked at the application's network security configuration level.
All user accounts, quiz telemetry, and entitlement documents stored in our Google Cloud Platform / Firebase Cloud Firestore instances are automatically encrypted at rest using industry-standard AES-256 bit encryption. Local on-device cached data is stored strictly in the app's private sandbox storage using Android scoped storage rules.
Database-level authorization rules (Firebase Security Rules) strictly enforce that users can only read and write their own profile and study data. Direct database access requires cryptographically validated JSON Web Tokens (JWT). Internal administrator access is restricted via Multi-Factor Authentication (MFA) under the principle of least privilege.
All digital purchases are mediated entirely by the Google Play Billing API. We never handle or log sensitive credit/debit card numbers, CVVs, or payment passwords. Our backend verifies digital purchase signatures asynchronously with Google Play Developer APIs to prevent fraud.
5. Third-Party Service Providers & Sub-processors
To provide robust cloud infrastructure and Google Play integration, we collaborate with vetted industry-standard service providers who process data strictly under confidentiality agreements:
- Google Play Services & Google Play Billing (Google LLC): Facilitates identity authentication, in-app billing verification, and core runtime libraries. (Google Privacy Policy)
- Google Cloud Platform & Firebase (Google LLC): Provides encrypted cloud database hosting (Cloud Firestore in region
asia-south1), authentication session management, and serverless compute. - Firebase Crashlytics (Google LLC): Collects anonymized crash stack traces and performance telemetry to identify and patch system bugs.
6. Data Retention Policy
We retain personal and educational progress data only for as long as your account remains active. If an account has experienced zero logins or activity for a continuous period of 24 months, the account and its associated learning telemetry are automatically queued for purge after email notification. Diagnostic crash logs are retained for an ephemeral period not exceeding 90 days.
7. Data Deletion Mechanisms & User Rights
In compliance with Google Play's Account Deletion Requirement and applicable privacy frameworks, students retain complete sovereignty over their data:
Option A: In-App Self-Service Deletion
Open CEM Android App → Navigate to Settings → Select Delete Account & Data→ Confirm prompt.
Deletes profile and database records instantly.Option B: Web-Based Deletion Portal
If the app has been uninstalled, users can request full data erasure via our online portal or direct email:
Official Account Deletion Webpage →Upon deletion confirmation, your authentication record, test attempts, bookmarks, and profile are immediately purged from active databases and completely cleared from secure rolling backups within 30 days.
8. Children's Privacy (COPPA & Age Notice)
Competitive Exam Master is designed for students, job applicants, and adult aspirants preparing for state and national examinations (minimum age 13 or 16 depending on local jurisdiction). We do not knowingly solicit or collect personal information from children under the age of 13. If we become aware that personal data from a child under 13 has been collected without verifiable parental consent, we take immediate steps to delete that information from our records.
9. Updates to this Privacy Policy
We may periodically revise this Privacy Policy to reflect enhancements in our data protection practices, app features, or regulatory standards. When changes are made, the revised policy will be posted on this page with an updated “Effective Date”. For material changes, registered users will be notified via an in-app banner or email notice.
10. Official Data Protection Contact
If you have questions, feedback, or requests regarding this Privacy Policy or our secure data handling procedures, please reach out to our dedicated Data Protection Officer:
Organization: ONLINE VIBE
Application: Competitive Exam Master (CEM)
Email: cemapp@onlinevibe.in or contact@onlinevibe.in
Web Portal: https://cemapp.in