Privacy · Maxemo

Maxemo · Last Updated: 14 August 2026 · Effective Date: 14 August 2026 · Version: 1.1

Applicable Jurisdictions: India, United Arab Emirates, MENA/Gulf Region, Global

At a Glance

Maxemo is a medical exam-preparation platform operated by BlackPie Technologies Private Limited. We serve medical graduates and doctors around the world who are preparing for postgraduate medical entrance and licensing examinations (such as NEET-PG, INICET, FMGE, EMREE, and DHA), with a strong focus on the United Arab Emirates and the wider MENA/Gulf region, alongside India and other countries. We collect your name, email, date of birth, profile photo (optional), exam goals and study preferences, and device/usage data. Maxemo lets you attempt tests and quizzes, view analytics, and add materials and Question Banks shared by the Community to your personal Library. We offer a Free plan and a paid Plus plan, and a one-time 7-day free trial of Plus; some materials and analytics are locked on the Free plan and are unlocked while you are on Plus or on your free trial. We use Razorpay for payments and Amazon Web Services (AWS, EU region) for storage. When you are signed in, we also use two analytics providers to understand and improve how Maxemo works: PostHog for product analytics, which receives your name, username, email address, and account role along with the pages and features you use; and Zoho PageSense for heatmaps and session recording on the same pages. Neither is used for advertising, and you can opt out (see Sections 8 and 9). We do not sell your personal data. You can access, correct, delete, or export your data anytime via hello@blackpie.co.

Who We Are
What Information We Collect
How We Use Your Information
How We Share Your Information
Your Library and Community Materials
International Data Transfers
Data Retention
Your Rights and Choices
Cookies and Tracking Technologies
Children's Privacy
Data Security
Third-Party Links and Services
Business Transfer
Changes to This Policy
Grievance Redressal
Contact Us

1. Who We Are

Maxemo is owned and operated by:

BlackPie Technologies Private Limited, C/O Muhamed Iliyas P, Rise, Areekode, Sullamusalam, Areacode, Ernad, Malappuram – 673639, Kerala, India.

Maxemo is built for medical graduates and doctors preparing for postgraduate medical entrance and licensing examinations, with a strong focus on the United Arab Emirates and the wider MENA/Gulf region, alongside India and other countries where we operate. Our Service is offered globally, subject to the eligibility and local-law provisions in our Terms and Conditions.

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), we are the Data Fiduciary. We aim to handle your personal data responsibly and in accordance with applicable local law wherever you use Maxemo, including under the UAE's data-protection framework (Federal Decree-Law No. 45 of 2021) where it applies to you.

Grievance Officer (India): Naseeb D — naseeb@maxemo.ai

For all privacy-related inquiries: hello@blackpie.co

2. What Information We Collect

2.1 Information You Provide Directly

Account Information: your name, email address, and date of birth. A profile photograph is optional and may be added after account creation. (We do not collect a mobile/phone number.)
Exam Goals & Study Preferences: your exam(s) (e.g., NEET-PG, FMGE, EMREE), primary/secondary goals, and onboarding responses such as planned exam cycle and self-reported study stage.
Sessions and Study Activity: the tests you attempt on the platform — including the Daily Free Test (DFT), sessions you create yourself, and quizzes or question series you add to your Library from the Community — along with your answers, scores, and time taken.
Library and Community Materials: which Community-shared materials and Question Banks you add to your Library, and any edits you make to your own copy of them.
Payment Information: collected directly by Razorpay. We store only your transaction ID, subscription status, plan type, and the last four digits of your payment method. We never receive your full card number, CVV, UPI PIN, or bank credentials. To start your one-time 7-day free trial or a Plus subscription, Razorpay collects your payment details on our behalf, because your Plus subscription begins automatically when the trial ends unless you cancel beforehand (see Section 3 and our Subscription and Auto-Renewal Terms).
Communications: support messages, your email, and attachments you send us, including complaints submitted to our Grievance Officer or through our Complaints Portal.

2.2 Information Collected Automatically

Device Information: device type, OS/version, browser type/version, screen resolution, unique device identifiers.
Usage Data: features accessed, time spent, test scores and performance, study-session duration, questions attempted and accuracy, and interaction patterns.
Log Data: IP address (approximate city-level location), access timestamps, referral URLs, error logs.
Cookies and Similar Technologies: session, authentication, and preference cookies. See Section 9.
Product Analytics and Session Replay: when you are signed in, third-party analytics technologies run on our pages. Our product-analytics provider (PostHog) receives an identified event each time you load a signed-in page. That event includes your name, username, email address, and account role, together with the pages you view and the features you interact with, so that your activity is linked to your account rather than being anonymous. Separately, our on-page behaviour provider (Zoho PageSense) collects heatmap data (where users click, scroll, and move their pointer) and session recordings (a replay of your interactions with the page, such as navigation, clicks, scrolling, and form interactions). We use these to see how Maxemo is actually used, diagnose problems, and improve the Service. See Section 4 for who receives this data, Section 7 for how long it is kept, Section 8 for how to opt out, Section 9 for the cookies involved, and Section 11 for the safeguards we apply to recordings.

2.3 Information We Derive or Generate

Performance Analytics: performance reports, strengths/weaknesses analyses, and study recommendations generated from your test activity. On the Free plan, some analytics are locked until you subscribe to Plus or start your free trial.
Plan Usage and Access-Status Counters: your daily Session count (to apply the Free plan's daily limit), your Library's Community-material count (to apply the Free plan's three-item limit), and your current lock/unlock status for premium materials and analytics (based on whether you are on the Free plan, on Plus, or on your free trial).

2.4 Information from Third Parties

We do not purchase personal data from data brokers. Google Sign-In: if you sign in with Google (OAuth 2.0 / OpenID Connect), we receive your name, email, and profile picture (not your password) to create and authenticate your account; you can revoke access in your Google account settings.

3. How We Use Your Information

Providing and Maintaining the Service: create and manage your account; deliver tests, quizzes, and the DFT; let you create your own sessions; let you add Community materials/Question Banks to your Library and edit your own copies; generate your performance analytics; and apply Free-plan limits (daily Session cap, DFT viewing window, Library item cap, and locked materials/analytics).
Free Trial and Subscription: to start and manage your one-time 7-day free trial and your Plus subscription, including verifying your payment method, temporarily unlocking Plus materials and analytics during your trial, converting your trial to a paid subscription as described in our Subscription and Auto-Renewal Terms, automatically re-locking Plus materials and analytics if you do not convert to a paid plan by the end of the trial, and processing renewals and payments.
Age Assurance: we use your date of birth to confirm eligibility and apply the protections in Section 10.
Trust & Safety: to review complaints and reports (including about Library or Community materials, such as copyright concerns) and take appropriate account action.
Transactions; Communication; Analytics; Security; Legal Compliance: as described throughout this Policy.
Product Analytics and Service Improvement: to understand how our features are used, see where users encounter errors or abandon a task, reproduce and diagnose bugs, measure the effect of changes we make, and improve the design of the Service. This includes the identified analytics events and the heatmap and session-recording data described in Section 2.2. We do not use this data for advertising, we do not sell it, and we do not use it to make decisions that produce legal or similarly significant effects for you.

4. How We Share Your Information

We do not sell your personal data, and we do not share it for advertising. We share only:

Cloud Infrastructure: AWS, EU region (eu-north-1, Stockholm) — our storage processor.
Payment Processor: Razorpay (PCI DSS Level 1) — only what's needed to process your free-trial sign-up, transactions, and subscription.
Authentication: Google LLC (Google Sign-In) — an independent controller for authentication data.
DNS & Security: Cloudflare, Inc. — DNS, DDoS protection, CDN, and bot detection (Turnstile); no tracking cookies or advertising use.
Product Analytics: PostHog — our product-analytics processor. When you are signed in, we send PostHog your account identifier together with your name, username, email address, and account role, plus records of the pages and features you use. PostHog processes this data only on our instructions, under our agreement with it, and does not use it for its own advertising purposes.
Session Replay and Heatmaps: Zoho PageSense (Zoho Corporation) — our processor for heatmap and session-recording data on signed-in pages. PageSense receives a recording of your interactions with our pages, subject to the masking safeguards in Section 11, and processes it only on our instructions to help us understand where our interfaces cause difficulty.
Legal Authorities: where reasonably necessary to comply with applicable law, regulation, legal process, or an appropriate government request; to protect any person from death or serious bodily injury; to prevent fraud or abuse; or to protect our rights, property, and safety.
Business Transfers: your data may be transferred in a merger, acquisition, or sale of assets — see Section 13.

Our approach to government and law-enforcement requests. We treat the stewardship of your data as a serious responsibility. When we receive government or law-enforcement requests for user data, we aim to be transparent with users where lawfully permitted, push back on overbroad or blanket requests, protect all users, and disclose only what we are legally required to, after appropriate scrutiny. Where the law permits, we will notify the affected user before disclosing their data.

5. Your Library and Community Materials

Maxemo lets you build a personal Library of study materials, Question Banks, and quizzes/series — including items you create yourself and items shared by other users in the Community that you choose to add.

What we store. We record which Community materials or Question Banks you add to your Library, and any edits you make to your own copy.
Free-plan limit. On the Free plan, you may keep up to three Community-sourced materials/Question Banks in your Library at any one time. To add more, you must either subscribe to Plus or remove an existing item. Plus subscribers are not subject to this limit.
Locked materials. Separately from the Library cap above, certain premium study materials on the platform are locked on the Free plan and only become available on Plus or during your free trial. See our Subscription and Auto-Renewal Terms for how this works.
Attribution. Where a material or Question Bank you add originates from another user, that user's authorship attribution is preserved.
Removing items. You may remove items from your Library at any time.

The current release of Maxemo does not include public posts, comments, discussion rooms, or voting/reputation features. If we introduce such features in a future release, we will update this Policy and our other Agreements beforehand and notify you as described in Section 14.

6. International Data Transfers

BlackPie Technologies Private Limited is based in India, and our primary infrastructure provider (AWS) stores data in the EU (eu-north-1, Stockholm). This means that regardless of where you access Maxemo from — including the United Arab Emirates, the wider MENA/Gulf region, India, or elsewhere — your data may be processed and stored on these servers, and may be accessed by our India-based team, in order to operate the Service. Requests also route through Cloudflare's global network and may be processed near you for security and performance. We take reasonable contractual and technical measures with our infrastructure providers to protect your data wherever it is processed.

Our analytics providers also process data outside your country. PostHog processes your product-analytics data on its infrastructure, and Zoho PageSense processes heatmap and session-recording data in Zoho's data centres. As with our other providers, we take reasonable contractual and technical measures to protect your data wherever it is processed.

7. Data Retention

We retain personal data only as long as necessary, unless a longer period is required by law.

Account information (name, email, DOB, photo): duration of your account, plus 180 days after deletion for recovery/abuse-investigation, then erased or anonymized.
Exam goals, session activity, and performance data: duration of your account; deleted on account deletion.
Library and Community-material records: until you remove the item, or your account is deleted.
Payment and transaction records: 8 years (Indian tax/accounting law).
Usage and analytics data: aggregated/anonymized within 24 months; anonymized data may be retained for service improvement.
Communications, support tickets, and complaints: 3 years from resolution.
Log data (IP, error logs): 12 months.
Cookie consent records: 5 years (proof of consent).
Product-analytics events (PostHog): 14 months. We will set this to no longer than is necessary for the purposes described in Section 3, after which events are deleted or stripped of identifiers.
Session recordings and heatmap data (Zoho PageSense): 12 months. Session recordings are deleted at the end of this period; heatmap data is retained only in aggregated form.
Backups: taken daily and automatically deleted after 7 days. Data you delete is removed from live systems immediately and ages out of backups within this 7-day window.

Upon account deletion, we erase or anonymize your personal data within the timelines above, except where retention is required by law. Some latency is normal: there may be a short delay before data is fully removed from active systems and before it ages out of backups.

8. Your Rights and Choices

DPDP Act (India): Access; Correction and Erasure; Grievance Redressal; Nominate; Withdraw Consent; escalate to the Data Protection Board of India.
UAE and MENA/Gulf users: where applicable local data-protection law grants you rights (for example, under the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data), we will honor them upon request.
All other users: wherever you are located, you may contact us to ask what personal data we hold about you, to request correction, or to request deletion, and we will respond in accordance with applicable local law.
How to exercise: contact hello@blackpie.co or the Grievance Officer at naseeb@maxemo.ai. We verify identity and aim to respond within 30 days, or the period prescribed by the DPDP Rules for Indian users.
Analytics and session replay: you may ask us to stop linking product-analytics events to your account and to exclude your sessions from session recording, at any time and free of charge, by contacting hello@blackpie.co. Where we rely on your consent to run these technologies, you may withdraw that consent at any time, and withdrawing it is as easy as giving it. Opting out does not affect your access to the Service or any feature of it.

9. Cookies and Tracking Technologies

We use cookies and similar technologies for essential functionality (session, authentication, preferences) and security. We do not use third-party advertising trackers, and we do not sell or share your data for advertising.

In addition, when you are signed in, we use third-party analytics technologies that set their own cookies or similar identifiers on our pages:

PostHog — product analytics. Links your activity on our pages to your account, using your name, username, email address, and account role, and records the pages and features you use.
Zoho PageSense — heatmaps and session recording. Records where users click, scroll, and move their pointer, and captures a replay of your interactions with the page.

These technologies are not strictly necessary to deliver the Service; we use them to understand and improve it. You may opt out at any time as described in Section 8, without losing access to any feature.

10. Children's Privacy

Maxemo is designed for medical graduates and doctors, and our users are overwhelmingly adults. We use date of birth at registration to identify the rare minor case; we do not conduct behavioural monitoring or targeted advertising directed at children.

India (DPDP): under-18 users may use Maxemo only with verifiable parental/guardian consent.
UAE and MENA/Gulf region, and elsewhere: where local law requires parental or guardian consent for users under 18 (or another applicable age), that consent is required before use.
If we learn we collected a child's data without the required consent, we delete it promptly — contact hello@blackpie.co.

11. Data Security

TLS 1.2+ in transit; AES-256 at rest via AWS; role-based access and least privilege; one-way password hashing; AWS certifications (SOC 2, ISO 27001); Cloudflare DDoS/bot protection; monitoring for unauthorized access. No method is 100% secure; report concerns to hello@blackpie.co.

Session recordings. Where we use session recording (Section 2.2), we configure it to mask sensitive input so that it is not captured in the replay — including password fields, payment fields, and free-text fields that may contain personal or clinical information. Recordings are accessible only to authorised personnel under role-based access controls and are retained for the period stated in Section 7

12. Third-Party Links and Services

Maxemo may link to third-party services we don't operate; we are not responsible for their practices.

13. Business Transfer

Maxemo, or substantially all of its assets, may in the future be involved in — or may contemplate — a business transaction such as a merger, acquisition, reorganization, financing, change of control, or sale of assets (including related due diligence). In any such case:

Your personal data may be transferred to, or shared with, the successor or acquiring entity as part of the transaction, and may subsequently be governed by that entity's privacy policy.
We will require any such recipient to protect your personal data in a manner consistent with this Privacy Policy and applicable law.
We will notify you of any change of ownership or control of your personal data — by email to your registered email address and by a pop-up notification inside the app — and inform you of any choices you may have, such as accessing, exporting, or deleting your data before the transfer, where applicable.
Where the law requires your consent for such a transfer, we will obtain it.

14. Changes to This Policy

For material changes, we will update the "Last Updated" date and notify you at least 30 days in advance by email to your registered email address and by a pop-up notification inside the app, and we will obtain your consent where required by law.

15. Grievance Redressal

We aim to resolve your concerns quickly and fairly, in two steps:

Contact our Grievance Officer. Email Naseeb D at naseeb@maxemo.ai with details of your complaint. In accordance with the IT Act, 2000 and rules thereunder, the Consumer Protection (E-Commerce) Rules, 2020, and the DPDP Act, 2023, we will acknowledge your grievance within 24 hours and endeavor to resolve it within 15 days (or the period prescribed by applicable rules).

This process does not limit your right to approach the Data Protection Board of India, a competent UAE authority, a Consumer Disputes Redressal Commission, or any other competent authority or court in your jurisdiction.

16. Contact Us