Privacy Policy and Terms of Service

1. Data We Collect
2. Purposes of Data Use
3. Data Protection
4. Sharing Data with Third Parties
5. Payment System and Balance
6. Telegram Integration
7. Cookies
8. User Rights
9. Terms of Service and Rules
10. Exam Platforms and Restrictions
11. Guruh quiz (Kahoot uslubi)
12. Minors
13. Changes to the Policy
14. Contact Information

Information you provide directly:

• Account information: first name, last name, username, email, phone number, password (stored in encrypted form)
• Profile information: profile picture, bio/about, Telegram ID
• Educational data: exam answers, test results, course progress, certificates
• Survey responses: survey and questionnaire responses, uploaded files
• Payment information: payment amount, payment method, transaction status (card numbers are not stored on the platform)

Automatically collected data:

• Technical data: IP address, browser type and version, operating system, device type
• Usage data: page visits, login time, session duration
• Cookies: session identifiers, language preferences, authentication tokens

Data obtained through third parties:

• Google OAuth2: name, email, and profile picture when signing in with a Google account
• Telegram: user ID, name, and username via the Telegram bot

• Service delivery: creating your account, providing exams and courses, calculating results
• Payment operations: managing balance, processing payments, maintaining transaction history
• Security: protecting accounts from unauthorized access, API rate limiting, detecting suspicious activity
• Communication: important notifications, password recovery, payment notifications (via SMS and email)
• Certification: generating certificates based on exam results (name, score, and date are displayed)
• Analytics: improving platform performance, fixing errors, usage statistics

• Encryption: all data is transmitted via SSL/TLS (HTTPS) protocol. Passwords are stored using a one-way hashing algorithm
• Authentication: token-based API authentication, automatic 30-day expiration, sessions expire after 12 hours
• API protection: rate limiting (authentication 5/min, user 60/min), CSRF protection, CORS configuration
• Database: payment operations are protected with atomic transactions (preventing data loss)
• Access control: data access is restricted through a role-based system. Regular users can only view their own data
• Card information: payment card numbers are not stored on the platform. Payments are processed through the Atmos payment system

Your data may be shared with third parties in the following cases:

• Payment providers: necessary data is sent to the Atmos payment system to process payments (amount, account identifier). Card details are sent directly to Atmos servers
• Google: Google OAuth2 service is used for authentication when signing in with a Google account
• Telegram: when using the bot, messages are sent via the Telegram API
• AI services: source text is sent to Google Gemini API for AI question generation (personal data is not sent)
• Legal requirement: to government authorities as required by law

Balance Types

The platform has two types of balance:

Payment Operations

• Payments are processed through the Atmos payment gateway. Card numbers are not stored on the platform
• Each payment is verified via SMS OTP (one-time code)
• All transactions are saved in the payment history and displayed to the user
• New users receive a one-time welcome bonus upon registration (added to bonus balance)

Transfer Exam Earnings

Paid exam creators can transfer earnings from the exam balance to their account. Two types of transfers are available:

Note: Funds transferred to bonus balance cannot be withdrawn to a card. Funds transferred to main balance can be withdrawn.

Withdrawal

• Only main balance can be withdrawn (not bonus balance)
• A 5% tax is deducted on withdrawals
• Example: withdrawing 100,000 UZS — 5,000 UZS tax, 95,000 UZS goes to your card
• Withdrawal requests are reviewed by an administrator and transferred to the card after approval
• When a request is submitted, funds are held from the balance. If rejected, funds are returned to the balance

Tax rates

Pricing

• Service prices are published on the platform and may change without prior notice
• Price changes do not affect already completed transactions
• Paid exam prices are set by the exam creator
• Tax rates are subject to change. Current rates are displayed in the API and platform interface

Payment data security

• Card numbers, expiry dates, and CVV codes are not stored on the platform
• Payment details are sent directly to the Atmos payment provider servers
• The platform only stores transaction ID, amount, and status information

• When using the Telegram bot, your Telegram user ID, name, and username are stored
• Messages and responses sent via the bot are transmitted through the Telegram API and are also stored on Telegram servers
• Linking your Telegram account to the platform is optional. You can unlink it at any time
• When making payments via Telegram Mini App, the same security measures as on the website are applied
• Only platform administrators have access to Telegram bot data

The platform does not use advertising or tracking cookies. You can manage cookies through your browser settings.

• View: you can view your personal data on the profile page
• Edit: you can change your name, email, phone, and other data at any time
• Results: you can view your full exam results and payment history
• Disconnect: you can disconnect your Google and Telegram accounts at any time
• Delete account: you can request to permanently delete your account. After deletion, all personal data will be irreversibly removed

Reset Password

If you forgot your password or signed in via Google/Telegram without setting a password, you can receive a new one:

• Telegram: If your Telegram account is linked, a new password will be sent via the Telegram bot
• Email: If your account has an email, a new password will be sent via email (from info@oson-test.uz)

A new random password is generated. We recommend changing it after logging in.

Usage rules:

• Use the platform only for lawful purposes
• Do not share your account credentials with others
• Do not attempt to cheat or provide false answers during exams
• Respect the rights of other users
• Do not post content that violates intellectual property rights

Prohibited actions:

• Registering with false information
• Unauthorized use of others' accounts
• Uploading malware or conducting hacking attacks on the platform
• Distributing spam, malicious links, or prohibited content
• Attempting to disrupt the platform's technical systems
• Collecting data using automated tools (bots, scrapers)

Limitation of liability:

• The platform is provided on an 'as is' basis. Uninterrupted operation is not guaranteed
• The platform is not liable for damages caused by technical failures
• The content owner is responsible for user-generated content

The ability to take exams on different platforms depends on exam settings. The following table shows available platforms for each scenario:

Proctoring (Monitoring Mode)

• Fullscreen mode: the user must stay in fullscreen mode during the exam. Leaving fullscreen automatically ends the exam with a score of 0
• Camera monitoring: the user's face is captured via camera every 5 minutes
• When proctoring is enabled, the exam can only be taken via the website. Telegram bot and group game are automatically disabled
• Individual solving on mobile app depends on creator settings

Paid Exams

• Paid exams can be taken individually on the website, Telegram bot, and mobile app (depending on creator settings)
• Group game (Kahoot-style) is not available for paid exams
• The exam fee is deducted from the user's balance before the exam starts

Group Game (Kahoot-style)

• Group game is only available for free exams with proctoring disabled
• Only single-answer (select_one) type questions are used in group games
• Participants join the game using a 6-digit PIN code
• Extra questions are not asked in group games

Guruh quiz — bu bir vaqtning o'zida barcha ishtirokchilar real vaqtda savolga javob beradigan jonli o'yin. Veb-sayt va Telegram guruh chatlarida ishlaydi.

Qanday ishlaydi

1. Host (boshlovchi) imtihondan guruh quiz sessiyasini yaratadi
2. Ishtirokchilar 6 xonali PIN-kod orqali qo'shiladi
3. Host 'Boshlash' tugmasini bosadi
4. Har bir savol taymer bilan ko'rsatiladi (5-120 soniya)
5. Tezroq to'g'ri javob = ko'proq ball
6. Har bir savoldan keyin leaderboard (reytingi) ko'rsatiladi
7. Oxirida yakuniy natijalar chiqadi

Kim yarata oladi

Har qanday ro'yxatdan o'tgan foydalanuvchi istalgan faol imtihondan guruh quiz yarata oladi. Quyidagi cheklovlar mavjud:

• ✗ Proctoring (to'liq ekran yoki kamera) yoqilgan imtihonlar uchun guruh quiz yaratib bo'lmaydi
• ✗ Pullik imtihonlar uchun guruh quiz yaratib bo'lmaydi
• Faqat 'bitta to'g'ri javob' (select_one) turdagi savollar ishlatiladi. Boshqa turdagi savollar avtomatik o'tkazib yuboriladi

O'yin turlari (quiz type)

Telegram guruh chatida o'yin ikki xil rejimda o'tkazilishi mumkin:

Ball hisoblash

O'yin holatlari (State Machine)

Ketma-ketlik: WAITING → ACTIVE → BETWEEN → ACTIVE → ... → FINISHED

Ishtirok etish usullari

Ma'lumotlar va maxfiylik

• Guruh quiz natijalarida faqat ishtirokchining ko'rsatish ismi (display_name), umumiy bali va javoblar soni ko'rsatiladi
• Telegram orqali ishtirok etganda foydalanuvchining Telegram ismi ishlatiladi
• Guruh quiz sessiyasi tugagandan keyin natijalar saqlanadi, lekin shaxsiy ma'lumotlar (telefon, email) boshqa ishtirokchilarga ko'rsatilmaydi
• PIN-kod faqat bitta sessiya uchun amal qiladi va sessiya tugagandan keyin qayta ishlatilmaydi

The platform may not be used by persons under 14 years of age. Users aged 14-18 may use the platform with parental or legal guardian consent.

If we discover that we have collected data from a person under 14, such data will be immediately deleted.

We reserve the right to modify this privacy policy at any time. Significant changes will be announced on the platform.

Continued use of the platform after changes constitutes acceptance of the updated terms.