Legal
Last updated: 20 June 2026
The short version. We store your account basics and your study progress so it syncs across your devices. There are no ads, we do not sell your data to anyone, and you can have everything deleted by asking us through our deletion form.
This Privacy Policy explains how Ace ("the app", "we", "us") handles your information. By creating an account or using the app, you agree to this policy.
Ace helps users practice CAT (Common Admission Test) previous-year questions. It is intended for general/adult exam aspirants and is not directed to children under 13.
You can sign in either with Google or with an email address and password.
If you sign in with Google, we receive from your Google account:
We use Google Sign-In and do not see or store your Google password.
If you sign up with an email address and password, we store:
Your password is handled entirely by Google Firebase Authentication. It is stored only as a salted hash on Google's servers — we never see, store, or have any way to recover your password.
To save and sync your progress, we store:
A copy of your progress is cached locally on your device so the app works offline.
We record anonymous, aggregated usage events (for example: that a sign-in completed, or that a question was attempted) so we can tell whether the app is working and where people get stuck. These events are not used to build an advertising profile.
We do not collect your location, contacts, photos, or any data beyond what is listed above. The app contains no advertising and we do not sell or rent your data to anyone.
Your account and progress are stored using Google Firebase (Firebase Authentication, Cloud Firestore, and Google Analytics for Firebase), operated by Google. Your data is processed on Google's servers and is governed by Google's privacy practices:
Access is restricted by security rules so that each user can read and write only their own data.
We keep your data for as long as your account exists. You can:
You do not need to be signed in to submit a deletion request. You may ask us to delete everything (your account record, question history, bookmarks, time-spent data and mock-test results), or to erase only your study progress and keep the account.
We action deletion requests within 30 days, and usually within 7, and email you a confirmation once it is done.
All data sent between the app and our servers is encrypted in transit using HTTPS/TLS. Firebase Authentication and Cloud Firestore accept no unencrypted connections. Your data is also encrypted at rest on Google's servers, and per-user security rules mean each account can read and write only its own data.
No method of transmission or storage is 100% secure, but we take reasonable measures to safeguard your information.
The app is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will remove it.
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.
Questions, data requests, and account-deletion requests are handled through our request form. You do not need an account to use it, and we reply to the address you give.