Privacy Policy

This Privacy Policy explains how VarX MockTests (“we”, “us”, “our”), operator of the website app7.tech and its subdomains (the “Service”), collects, uses, shares and protects information about you. By using the Service you agree to the practices described here. If you do not agree, please stop using the Service.

1. Information we collect

a) Information you provide

• Account data — when you sign in with Google we receive your name, email address and profile picture from your Google account. We use the email address only to identify your account; we never display it publicly.
• Test activity — the answers you select, questions marked for review, time spent, scores, ranks and attempt history.
• Uploaded content — PDFs and images you upload to create your own practice tests, plus any test content you author.
• Messages — the name, email and message text you submit through our contact and feedback forms.

b) Information collected automatically

• Log data: IP address, browser type and version, device type, operating system, referring URL, pages viewed and timestamps.
• Cookies, local storage and similar technologies (see section 4).
• Push notification subscription tokens, only if you grant notification permission. You can revoke this at any time in your browser settings.

2. How we use information

• To create and secure your account and authenticate you.
• To deliver tests, score attempts, generate result analysis and leaderboards.
• To send notifications you have asked for, such as new test announcements.
• To respond to support requests and fix bugs.
• To monitor usage, prevent abuse, cheating and fraud, and improve content quality.
• To display advertising that keeps the Service free (see section 5).
• To comply with legal obligations.

3. Legal bases for processing

Where the GDPR applies, we process personal data on the basis of: performance of a contract (providing the Service you requested), legitimate interests (security, abuse prevention, service improvement), consent (cookies for personalised advertising, push notifications), and legal obligation.

4. Cookies and similar technologies

We use the following categories of cookies and browser storage:

• Strictly necessary — session and authentication tokens stored by our authentication provider so you stay signed in, and local storage used to remember whether you have dismissed an announcement.
• Functional — remembering preferences such as the last test you viewed or your saved answers during an ongoing attempt.
• Analytics — aggregated measurement of page views and feature usage so we can improve the Service.
• Advertising — cookies set by Google and its partners to serve and measure ads (see section 5).

Most browsers let you block or delete cookies from the settings menu. Blocking strictly necessary cookies will prevent you from signing in or saving test answers.

5. Third-party advertising, Google AdSense and the DART cookie

• Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites.
• Google’s use of advertising cookies, including the DART cookie, enables it and its partners to serve ads to our users based on their visit to our site and/or other sites on the Internet.
• Users may opt out of personalised advertising by visiting Google Ads Settings. Alternatively, users may opt out of a third-party vendor’s use of cookies for personalised advertising by visiting www.aboutads.info/choices or optout.networkadvertising.org.
• Third-party ad networks other than Google may also place cookies or web beacons on this site. We do not control these cookies and their use is governed by the respective vendors’ own privacy policies. See Google’s How Google uses information from sites or apps that use our services.
• Users in the European Economic Area, the United Kingdom and Switzerland are shown a consent message where required, and personalised advertising is only enabled after consent is given.

6. Analytics

We use privacy-respecting analytics to understand aggregate traffic patterns — which pages are visited, from which country and on which device type. Analytics data is used in aggregate and is never sold. Where a cookie-based analytics provider is used, its cookies fall under the analytics category described in section 4 and can be blocked in your browser.

7. Service providers we share data with

• Supabase — database, authentication and file storage hosting.
• Google (Sign-in, AdSense, Search Console) — authentication and advertising.
• AI providers used strictly to convert your uploaded PDF into question text.
• Hosting and content-delivery providers that serve the website.

We do not sell your personal information. We disclose data to authorities only where legally required.

8. What is public

Leaderboards display your display name, marks, time taken and number of unattempted questions. Email addresses are never shown anywhere on the Service. If you do not want your name to appear on a leaderboard, change your display name in your profile or contact us.

9. Data retention

Account and attempt data is retained while your account is active. Support messages are kept for up to 24 months. When you request deletion, we remove your account, attempts and uploaded files within 30 days, except where retention is legally required.

10. Your rights

Depending on your location, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to withdraw consent. To exercise any of these rights, email support@app7.tech. California residents may additionally request disclosure of the categories of personal information collected and may opt out of the “sharing” of personal information for cross-context behavioural advertising by using the ad opt-out links in section 5.

11. Security

Data is transmitted over HTTPS and stored with row-level access controls so users can only read their own records. No method of transmission or storage is completely secure, but we review our controls regularly and respond promptly to reported vulnerabilities.

12. Children’s privacy

The Service is intended for candidates aged 13 and above (16 in the EEA). We do not knowingly collect personal information from children below that age. If you believe a child has provided us data, contact us and we will delete it.

13. International transfers

Our providers may process data in countries other than yours, including the United States. Where required, such transfers rely on Standard Contractual Clauses or an equivalent safeguard.

14. Changes to this policy

We may update this policy from time to time. Material changes will be announced on the site and the “Last updated” date above will change. Continued use after an update means you accept the revised policy.

15. Contact

VarX MockTests — email support@app7.tech or use our contact page. See also our Terms of Service.