Data and security

For colleges and parents. Last updated 7 November 2026.

What we store

• Accounts: name, email and a scrambled form of the password (we never keep the password itself).
• Practice: the code each student checks, whether it passed, when, and how many hints they used.
• Classes: the class list a teacher uploads (names and roll numbers) and the assignments they set.

We don't collect phone numbers, addresses, Aadhaar, photos or marks from college systems.

Where it's kept

Everything is stored in one database on a private server we rent from Hostinger and run ourselves. Nobody else has accounts on it. The database is backed up every night, and backups are kept for 14 days.

Who can see what

• Students see their own progress. If their teacher turns it on, they also see a band such as "Top 25% of your class", never a rank number.
• Teachers see the students in their own sections: progress, code, and practice days.
• HoDs and coordinators see the sections in their department or batch.
• College admins and placement officers see every section in their college, and can export a shortlist.
• View-only leaders (a VC, Director or Principal) see the same as admins, but can't change anything.
• The Cintax team can see data only to run the service and answer support requests.

Nobody at one college can see another college's data.

How it's protected

• Every connection uses HTTPS, so data is encrypted between the student's device and our server.
• Passwords are stored as bcrypt hashes, which can't be turned back into the password. Repeated wrong passwords are slowed down.
• Student code runs in a locked-down sandbox, separate from the database, with strict time and memory limits.
• Server access needs a private key; there are no shared passwords.
• Our visit counter uses no cookies and stores nothing personal.

Other services we use

• Hostinger provides the server and the email service we send invites and reminders through.
• An AI provider answers when a student presses "Ask AI". We send it the problem, the student's code and their test results, never their name or email. Each student can use it a few times a day.

Deleting data

• A student can ask us to delete their account at hello@cintax.in. We delete it within 30 days.
• When a teacher removes a student from a class, the student leaves that class but keeps their own account and progress.
• When a college stops using Cintax, it can ask us to delete its class lists, staff accounts and class records. We confirm in writing when it's done.

Questions or a security concern

Write to hello@cintax.in or WhatsApp +91 88826 66925. If you think you've found a security problem, tell us and we'll reply within a day.

The full details are in our privacy policy.