Loading…
Legal
Effective 20 September 2026
dMAT Prep is operated from India and this policy is written primarily against India’s Digital Personal Data Protection Act, 2023.
If you only browse, we collect no account information. You can read every article, the syllabus pages and this policy without giving us anything.
If you take the free mock without an account, we store your answers and result against a random session identifier held in your browser, so the results page can show you your score. That record is not linked to a name or an email address.
If you create an account, we collect your email address and, optionally, your name. We store your practice activity: which questions you were served, the answers you selected, timings, and scores.
If you buy something, we store an order record, the amount, the currency, the payment status and the identifiers our payment provider returns. We never receive or store your card number, UPI PIN or bank credentials — those are entered on the payment provider’s own hosted page and never reach us.
To provide accounts and learning features, save your progress, break your results down by subtest, process purchases, prevent misuse, support learners, and keep the service reliable. We do not sell your personal data, and we do not share it with advertising networks or data brokers.
Account email — address verification, password resets, and purchase receipts. These are part of running your account and cannot be switched off while the account exists.
Optional email — exam reminders, practice nudges and result summaries. These are sent only if you ask for them, by ticking the box when you register or turning them on in your account. Every one carries an unsubscribe link and supports one-click unsubscribe in your mail client. Turning them off never affects your access or your account email.
We use a small number of processors, each for one job. They handle your data on our instructions and are not permitted to use it for their own purposes:
We may also disclose information where we are legally required to — a binding order from a court or a competent authority — or where it is necessary to investigate abuse of the service. We have no other reason to hand your data to anyone.
Your account and practice data are held in a managed Postgres database operated by Supabase in its Mumbai region. The records that make up your account — your email address, your attempts, your answers and your purchase history — are stored in India.
Access is restricted at the database level: row-level security policies mean one account cannot read another account’s attempts, answers or purchases, and the keys capable of bypassing those policies are held only by our server-side code, never sent to your browser.
The database is not the only place data travels, and we would rather be exact about that than imply everything stays in India. Our other processors — hosting, email delivery and analytics — are international companies and may process data outside India, including in the United States. An email we send you passes through our email provider; usage analytics, if you have accepted them, are held by Google and Microsoft. Where that happens, it is under the contractual terms each provider offers for handling personal data on a customer’s behalf.
Under the Digital Personal Data Protection Act, 2023 you may ask us for access to the personal data we hold about you, ask us to correct or complete it, ask us to erase it, and nominate someone to exercise these rights on your behalf if you are unable to.
To exercise any of these, email admin@dmatprep.de from the address on your account. We aim to respond within 30 days. The one limit is the payment and order records described above, which we must retain.
The same address is our grievance contact. If you are not satisfied with how we have handled a request, you may complain to the Data Protection Board of India.
With your consent, we use analytics tools to understand how the site is used and improve it: Google Analytics (aggregate traffic and usage) and Microsoft Clarity (heatmaps and anonymised session recordings of on-page interactions). Clarity masks text and form inputs by default, so we do not use it to capture what you type. These tools set cookies and share limited usage data with Google and Microsoft, who act as our processors.
No analytics or session-recording tools load until you accept them in the cookie banner. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer. Essential cookies needed to sign in and operate the service are always active.
This service is intended for adults. The dMAT is a test for applicants who already hold a university degree, so we do not knowingly create accounts for anyone under 18. If you believe a child has registered, email us and we will delete the account and its data.
We use reasonable safeguards, but no online service can guarantee absolute security. We may update this policy as the product or legal requirements change, and will post the effective date here.