Privacy Policy
Last updated: 11 October 2026
SkillYog (skillyog.com) is a free CBSE exam preparation website run by an individual educator in Akola, Maharashtra, India. This policy explains what personal data the site collects, why, who can see it, and what rights you have. It is written to be read by students, parents and teachers, not only by lawyers.
1. Who is responsible for your data
SkillYog is operated by its individual owner, who acts as the Data Fiduciary under India's Digital Personal Data Protection Act, 2023. For any question about this policy, or to use any right described below, write to us through the Contact Us page (linked at the foot of every page). We aim to reply within seven working days.
2. Two ways a student gets an account
A class account created by the school
A teacher can create accounts for a whole class. The teacher enters each student's name in roll-number order; SkillYog creates a short username (for example dav10a-07) and a password, which the teacher hands to the student. These accounts have no email address. The school, through its teacher, is responsible for having the consent it needs from parents to create accounts for its students.
An account the student creates
A student can sign up with Google or with an email address and password. Because SkillYog is for CBSE students, we assume most account holders are under 18, who are children under the Act. A student under 18 must not create an account without a parent or guardian's consent. At sign-up the student confirms that a parent or guardian knows about the account and agrees; we record that confirmation with the date and time.
Parents and guardians: you may at any time ask us what we hold about your child, correct it, or delete the account entirely, through the Contact Us page. Withdrawing consent is as easy as giving it.
3. What we collect, and why
| Data | When | Why |
|---|---|---|
| Name; email address (own accounts) or username (class accounts) | Account creation | To identify the account and, for own accounts, allow password reset |
| Roll number and section; where the school chooses admission-number logins, the student's school admission number (it forms the username, so one student keeps one login from year to year) | When a teacher creates a class account, or a student joins a section with its code | So the teacher sees the right students, and so tests can be opened for one class at a time |
| The parent or guardian confirmation | Sign-up of an own account | To record consent |
| Answers written in a test, the marks given, and the time taken | While taking a test | To save work as you go, mark the paper, and show the result to you and your teacher |
| Test conduct signals: how many times the test page was left and for how long, and attempts to paste or copy | While taking a test | Shown to the teacher as signals only — they are not treated as proof of anything |
| How an answer was written: the length of each answer at each automatic save during the test, with the writing time (numbers only — never the words) | While taking a test | To show that results come from students genuinely writing the paper, and for anonymised research (see section 4) |
| Feedback a student chooses to give on their marks | After a result is shown | So the teacher can see it |
| Answers typed into written-answer practice, and a daily count of checks | When you ask for an answer to be checked | To mark the answer, and to keep a fair daily limit |
| Teacher's name and email; for teachers invited by SkillYog, also phone number and school | When a teacher is invited | To send the invitation and identify the teacher account |
| A teacher's confirmation that a test was held in class, with the number of students present | After a test | To show that the results come from a real class test |
| A teacher's confirmation that the mark given to a written answer is right; and an anonymised copy of each written answer a teacher has confirmed or re-marked — the question, the answer, the mark given and the teacher's mark, with no name, username, email or school name stored with it (a student's own name or login written inside an answer is removed wherever it can be recognised) | When a teacher checks a marked paper | To measure how often the marking agrees with teachers, find questions and marking schemes to improve, and test any change to the marking before it is used. Never used to train an AI model |
| Spelling mistakes and important subject words found in written answers, and whether a teacher has switched off spelling marks for a student (only the switch — never the reason) | When a test is marked | So students and teachers can see what to work on; spelling and important words count in the marks only where the school has chosen that |
| Error reports: the page address, the error message, the browser type and the time (no name, answer or mark), and for a signed-in account a count of reports that day | When a page meets a technical error | To find and fix problems quickly, and to stop one account sending too many reports |
We do not ask students for a phone number, home address, date of birth or any payment information, and we do not collect special category data. Please do not type anything personal into an answer box — write only your answer to the question.
4. Who can see a student's test work
- The student sees their own answers, marks and feedback.
- The student's own school — the school's test coordinators, the teachers the school assigns to the student's section, and school leaders (such as the Principal) whom the school gives access — see the student's name, roll number, marks, time taken and the test conduct signals, and can download them as a spreadsheet. Coordinators and assigned teachers also see the written answers; a school leader sees them only if SkillYog has been asked to allow it. Every change made by any of them is recorded with their name.
- Classmates cannot see each other's work. Once a class test closes, even the student's own written answers stop being shown on the result page, so a shared computer does not reveal them.
- SkillYog's owner can access the data to run the service, keep backups and answer requests under this policy.
- Schools, partners, investors and researchers may be shown anonymised information only — for example how long students took, how marks were spread, or how answers grew during a test. It never includes a student's name, username, email or school name, and it is prepared so that no individual student can be identified.
5. AI marking
Written answers are marked with the help of Google's Gemini API. The question, its marking scheme and the student's answer are sent to Google, which returns a point-by-point assessment. The marks are then checked on our server against the marking scheme, so a score can never go above what the scheme allows, and a blank answer always scores zero. Google processes this text under its own API terms; depending on the plan SkillYog uses, those terms may allow Google to use it to improve its services. We do not use your answers to train any AI model ourselves.
AI marking can be wrong. It is practice support, not an official CBSE result, and not a substitute for your teacher's assessment.
6. Who else processes data for us
- Google Firebase — sign-in and the database that holds accounts, tests and results. If you sign in with Google, Google tells us your name, email address and profile picture.
- Google Gemini API — marking of written answers, as above.
- Netlify — website hosting and the server functions behind tests and practice.
- Google Analytics, through Google Tag Manager — aggregate statistics about how pages are used. It measures pages, not people, and is not used to build a profile of any student.
SkillYog shows no advertising. Some of these providers store data outside India. We do not sell personal data, and we do not share it with anyone for marketing.
7. How long we keep it
Account details, test answers and results are kept while the account exists, so that the student and their teacher can look back at past results. When a teacher removes a section, its records are kept but hidden and its class logins are switched off, so a mistake can be undone. When a teacher removes a student (for example on leaving the school), the login is switched off and the student's past results stay visible to the school, marked as having left, for its records. Ask us if you want either deleted completely. Anonymised copies of answers a teacher has checked (section 3) are kept to keep improving the marking; if an account is deleted on request, its copies are deleted too. You can ask us to delete an account and everything attached to it at any time, and we will do so within 30 days. Backups are stored privately by the owner and are replaced as new ones are made.
8. Your rights
You, or your parent or guardian on your behalf, may ask us to:
- tell you what personal data we hold about you and who processes it;
- correct anything that is wrong or incomplete;
- delete your account and the data attached to it;
- withdraw consent, which also means deleting the account.
Write to us through the Contact Us page. If you are not satisfied with how we handle a complaint, you may raise it with the Data Protection Board of India.
9. Security
Passwords are stored and checked by Google Firebase and are never visible to us. The site is served over HTTPS. Question banks and marking schemes stay on the server and are never sent to the browser. On test pages, closing the browser signs the student out, and an idle session ends on its own, because school computers are shared.
Every submitted test, and every later change to its marks, is sealed: the server records a cryptographic code calculated from it, so a later change to the sealed answers or marks can be detected. Once a day a single combined code for that day is published openly, so the day's records cannot be quietly rewritten afterwards. That published code is only a string of letters and numbers: it contains no name, answer, mark or school, and none can be worked out from it.
No system is perfectly secure. If a breach affects your personal data, we will inform you and the Data Protection Board as required by law.
10. Cookies and local storage
SkillYog stores your language preference in your browser so that pages open in the language you chose. When you sign in, Firebase stores a sign-in token in your browser — on test pages only until the browser is closed. Google Analytics sets its own cookies. You can clear these at any time in your browser settings; clearing them signs you out.
11. Changes to this policy
If we change this policy in a way that affects what we collect or why, we will update the date at the top of this page.