Privacy Policy
Last updated 7 October 2026
Master Mental Ability (“MMA”, “we”) trains mental ability for Indian competitive exams. This page says what we collect, why we collect it, who else can see it, and how to get rid of it. It is written to be read, not to be survived.
It covers the Master Mental Ability Android app, the web app, and this website.
The short version
- We collect your mobile number or your Google email (whichever you sign in with), the practice you do, and very little else.
- We never see your card, UPI ID or bank details. Payments go straight to Razorpay.
- We do not sell your data, and we do not use it for advertising.
- The app asks for notification and reminder permissions and nothing else: no camera, location, contacts, microphone or file access.
- You can delete your account yourself: from inside the app, or by asking us if you no longer have it. How to do it.
What we collect, and why
Your account
- Your mobile number, if you sign in with it, verified by a one-time password. It is one of two ways into the Android app (the other is Google, below) and you need only one. Nothing else is required.
- Your name, if you give one.
- Your age and target exam, if you give them. These shape what the app recommends. Both are optional and both can be left blank.
- Your preferred language: English or Hindi.
- Your email address, if you sign in with Google, on the website or in the Android app.
Your practice
This is the product. We record which questions you answered, whether the answer was right, how long you took, and the review schedule the app works out from that. If you write a note on a question, we keep the note.
Payments
When you pay, we store the order reference, the amount, and which plan it was. That is all. The payment itself is handled by Razorpay, and your card number, UPI ID or bank details never reach us and are never stored by us.
Scholarship applications
Only if you apply for one. We keep the application and the supporting documents you upload, so it can be assessed. Nobody else is shown them.
Your device, and the app itself
- A random identifier created when you install the app. It is not your advertising ID and it is not linked to anything outside MMA. It exists so a content licence can tell one of your devices from another.
- The app version you are running.
- The IP address a request came from, kept with your sign-in session and your content licence. It is what lets us investigate a suspected abuse of a paid account.
How the app is used, and when it breaks
We record a short, fixed list of named events (installing, signing in, finishing a first session, paying) so we can see where people get stuck. We do not record your screen, and we do not capture every tap. We also collect crash and error reports when something goes wrong.
Where you came from
If you arrived from one of our own pages, we record which page, once, when you register. It tells us which exam pages are worth writing, and if that page carried a discount or partner code, it is what fills that code in for you on the pricing screen. It is not advertising, it goes nowhere else, and the code is re-checked when you pay.
How the website is used
On this website we count page views and clicks (which page, which link, which language, and the site that sent you here, if any) through PostHog. Each request reaches PostHog with your IP address, as every web request does, and PostHog works out an approximate location from it: the country and the city, never more precise, and never from your phone's own location. It sets no cookie and stores nothing on your device, so it cannot recognise you from one visit to the next: every visit is a stranger. If you arrived through a link we handed out (a flyer, a WhatsApp message, an Instagram post), the tag on that link is counted with the visit, so we learn which of them bring people. That is all it is for. If your browser sends a Do Not Track or Global Privacy Control signal, nothing is sent at all.
If you give us your email address on the website
Only if you type it into a form here. We keep the address, the language you were reading in and the page you gave it on, with Kit, the service that sends our emails. We use it to send what you asked for and nothing else. Every email carries an unsubscribe link, and one click ends it.
What we do not collect
Stated plainly, because the list is short and checkable. The Android app requests permission to show notifications and to schedule a reminder at an exact time. It requests nothing else.
- No location, at any precision, from the app. The website works out country and city from your IP address and no more. See How the website is used above.
- No contacts, call log or messages.
- No microphone and no recording.
- No access to your photos or files. If you upload a scholarship document, your phone's own picker hands us that one file and nothing else.
- No advertising identifier, and no advertising.
- No card, UPI or bank details.
Who else can see it
We use a small number of companies to run the service. They process data on our instructions and for no purpose of their own. We do not sell or rent your data to anybody.
| Who | What they handle | Where |
|---|---|---|
| Razorpay | Your payment. They hold the card or UPI details; we do not. | India |
| 2Factor | Sending your one-time password by SMS. | India |
| Neon | The database: your account and your practice. | Singapore |
| Fly.io | The servers the app talks to. | Singapore |
| Cloudflare | Website delivery, and storage for scholarship documents. | Global network |
| PostHog | The named usage events and crash reports above, and the page views and clicks on this website. | European Union (Frankfurt) |
| Kit | The email address you give us on the website, and the emails we send to it. | United States |
| Sentry | Server and website error reports. | European Union |
| Distributing the Android app through Play. Also sign-in, in the app or on the website, if you choose it. | Global |
Your data is stored on servers in Singapore, and the usage and crash reports in the European Union. Both are covered by the arrangements we have with those providers.
How long we keep it
- Your account and practice: for as long as you have an account. When you delete it they go, except your mobile number and email address, which stay. See Delete your account for exactly what goes, what stays, and why those two do.
- Payment records: kept even after you delete your account. Your name is removed; your mobile number and email address are not, so the payment stays matched to the person who made it: we are required to be able to answer a tax or chargeback question about it, and a payment nobody can match cannot be refunded either.
- Reports of a broken question: kept after deletion, with you cut out of them. A wrong answer key is a fault in the content, and it has to stay fixable after the person who found it has gone.
Your choices
- Delete your account: from the app, under Settings → Delete account, or by writing to us. Full instructions here.
- Turn reminders off: in the app's settings, or in your phone's own notification settings.
- Ask us what we hold about you, or ask us to correct it. Write to the address below and we will answer.
- Keep the website from counting your visit: turn on Do Not Track or Global Privacy Control in your browser. There is no cookie to clear.
Students under 18
MMA is used by school students preparing for scholarship exams such as NMMS and NTSE. We collect the same short list from everyone, and no more from a younger student than from an older one. We do not profile anyone for advertising, because we do not advertise at all.
If you are a parent or guardian and want a child's account and practice removed, write to us from any address and say so. We will do it, and you do not need the app or the password to ask.
Keeping it safe
Everything travels over an encrypted connection. Sign-in sessions are stored on your device using the phone's own hardware-backed keystore. Access to the database is limited to the people who run the service.
Changes to this policy
If we change it, we will change the date at the top. If a change is significant, we will say so on this page before it takes effect.