apti22
About Us
Back to assessments
Document:v2.4
Security & Data Transparency

Privacy Policy

At apti22, we believe your assessment preparation should be private, secure, and focused on learning. This policy explains what information we collect, how it is used to deliver performance diagnostics, and how you retain control over your data.

Effective Date: September 2026
•Applicable Domain: apti22.in•Independent Educational Platform
01

Overview & Core Philosophy

apti22 is built as an independent, high-fidelity assessment simulator helping engineering students and campus candidates prepare for technical placement exams. We maintain a strict minimization approach to user telemetry: we only store data essential to calculating test scores, providing mistake breakdowns, and preventing repetitive questions.

Key Takeaway: You do not need to sign in to practice core cognitive games or diagnostic questions. Sign-in via Google is only required if you want your attempt history and subscription saved across devices.
02

Information We Collect

Depending on whether you practice as a guest or sign in to synchronize progress, we collect the following categories of information:

A. Google Account Profile (Authenticated Users)

When you sign in with Google, Google OAuth shares basic authentication metadata with our server: your unique Google user ID, display name, verified email address, and profile photo avatar URL. We never receive or store your Google password.

B. Assessment Attempts & Telemetry

When you participate in cognitive challenges, AI co-coding tests, debugging challenges, or English communication evaluations, we record:

  • Overall test scores, completion percentage, and time taken per question
  • Diagnostic metrics (e.g. grammar accuracy, vocabulary complexity, reading time, code compilation status)
  • Anti-repetition tokens to ensure future attempts present fresh questions

C. Feedback Submissions

If you submit a bug report, question error flag, or general feedback via our in-app dialog, we record your message along with your user ID and basic browser technical context (device type and browser user-agent) to assist our engineering team in resolving issues.

D. Operational Server Logs

Our hosting infrastructure logs standard HTTP transmission data (IP addresses, request paths, and browser user-agent strings) strictly for rate-limiting, DDoS prevention, and application error monitoring.

03

How We Use Your Data

We process user data strictly for the operation and optimization of your learning experience:

Performance AnalyticsComputing accuracy distributions, benchmark percentiles, and personalized speed metrics.
Session AuthenticationKeeping your session securely authenticated as you navigate rounds and company mock assessments.
Adaptive TestingCalibrating difficulty levels in cognitive games to match your cognitive processing speed.
Platform StabilityDiagnosing simulation crashes and ensuring automated grading engines function reliably.
04

Storage & Cloud Infrastructure

apti22 employs industry-standard security protocols to safeguard user records. Data is stored and processed with enterprise-tier infrastructure providers:

  • Vercel Inc.: Application edge routing, serverless compute execution, and SSL/TLS termination.
  • MongoDB Atlas: Encrypted-at-rest cloud database clusters with TLS 1.3 in-transit encryption.
  • Google Identity Services: Zero-knowledge authentication gate with industry-grade OAuth 2.0.
05

Cookies & Local Storage

We maintain a zero-tracking policy regarding cookies. We do not use third-party marketing cookies, advertising pixels, or cross-site tracking scripts.

Essential Session Cookies: Encrypted, HTTP-only session cookies managed by NextAuth strictly to maintain your signed-in state and protect against Cross-Site Request Forgery (CSRF).

Browser LocalStorage: Used exclusively to persist your interface preferences (e.g. Dark/Light theme mode), audio volume preferences, and unauthenticated guest attempt records on your own device.

06

Your Rights & Data Deletion

You retain complete authority over your information on apti22:

Instant Local ResetYou can instantly delete all cached questions, guest scores, and diagnostic levels from your browser at any time by clicking the Reset button in the top navigation bar.
Account & Telemetry DeletionIf you have an authenticated account and wish to permanently wipe your profile and all assessment histories from our database, email us at apti22.work@gmail.com. Requests are verified and completed within 14 business days.
07

Privacy Contact & Inquiries

Have a question or suggestion regarding our data handling or assessment privacy safeguards? Reach out directly:

apti22 Privacy & Data Team
Direct Email: apti22.work@gmail.com
Email Privacy Team