Privacy Policy

1. Introduction

This Privacy Policy explains how Neetarded (“we”, “us”, “our”) — a service owned and operated by Nashim Aktar Mondal, an individual proprietor based in India — collects, uses, discloses, and protects your personal data when you use our website and application (the “Service”). We are the “data fiduciary” in respect of the personal data we process about you under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable rules.

By using the Service and agreeing to our Terms & Conditions, you consent to the practices described here. If you do not agree, please do not use the Service.

2. The personal data we collect

We collect the following categories of data:

2.1 Information you give us

• Account data: your name, email address, and password (we never store your password in plain text — authentication is handled securely by our authentication provider). If you sign in with Google, we receive basic profile information (such as your name, email, and profile picture) from your Google account.
• Profile data: full name, phone number, date of birth, gender, the exam you are preparing for, your class (e.g. 11th, 12th, dropper), target exam year, and your address, state, and PIN code. This is used to personalise your experience and operate your account.
• User Content: documents (such as PDFs) you upload and the questions, text, and images extracted from them.
• Communications: messages you send us (for example, support requests or copyright notices).

2.2 Information generated through your use

• Activity & performance data: quizzes and tests you take, your answers, scores, time spent, streaks, “aura” and progress metrics, question history, and starred or flagged questions.
• Payment data: when you buy a plan, our payment processor (Razorpay) processes your payment. We receive and store transaction metadata such as order and payment identifiers, amount, currency, plan purchased, and payment status. We do not store your full card number, UPI PIN, CVV, or net-banking credentials.
• Device, technical & approximate location data: your IP address, and an approximate location (such as city, region, and country) derived from that IP address; pages you view, referring URLs, and a session identifier; and similar diagnostic information used for analytics, security, and to show certain features (for example, presence and usage insights).
• Notification tokens: if you enable push notifications, we store the device push token needed to deliver them.

3. How we use your data

We use personal data to:

• create and manage your account and authenticate you;
• provide, personalise, and improve the Service and its features (including generating practice tests, scoring, explanations, and analysis);
• process the documents you upload and maintain your private library;
• process payments, activate plans, prevent payment fraud, and keep billing and tax records;
• send you service-related communications, such as verification and password-reset emails, receipts, and notifications you have enabled;
• understand usage through analytics, maintain security, prevent abuse, and debug problems; and
• comply with legal obligations and enforce our Terms.

Our lawful bases include your consent (which you may withdraw), the performance of our contract with you (providing the Service you signed up for), our legitimate interests in operating and securing the Service, and compliance with law.

4. AI & automated processing

To provide features such as question extraction, answer scoring, and explanations or analysis, relevant content and performance data may be processed by automated systems and by trusted artificial-intelligence service providers. This processing is used to generate study output for you. Such output may contain errors and should be independently verified.

5. How we share your data

We do not sell your personal data. We share it only as described below:

• Service providers / processors, who process data on our behalf under appropriate obligations, including:
  • our cloud database, authentication, and file-storage provider (Supabase);
  • our payment processor (Razorpay);
  • Google services — for Google Sign-In and for the artificial-intelligence processing that powers parsing, scoring, and analysis;
  • our push-notification delivery provider (Firebase Cloud Messaging);
  • cloud-compute and email-delivery providers used to process uploaded documents and to send transactional emails (such as verification, password-reset, and receipt emails).
• Legal & safety: where required by law, legal process, or to protect the rights, safety, and security of our users, the public, or us.
• Business transfers: in connection with a merger, acquisition, reorganisation, or sale of assets, subject to this Policy.

Some of these providers may process or store data on servers located outside India. Where data is transferred internationally, we take reasonable steps for it to be handled in line with this Policy and applicable law.

6. Cookies & similar technologies

We use essential cookies and similar local-storage technologies to keep you signed in, maintain your session, remember preferences, and operate the Service securely. We also use limited analytics to understand usage (such as which pages are viewed) and approximate, IP-derived location for analytics and feature purposes. Essential cookies are necessary for the Service to function; if you block them, parts of the Service may not work. You can manage cookies through your browser settings.

7. Children’s data

The Service is used by students preparing for competitive exams, who may be under 18 years of age. Under the DPDP Act, processing the personal data of a child requires the verifiable consent of a parent or legal guardian. If you are under 18, you may use the Service only with such consent, and your parent or guardian must accept our Terms on your behalf. We do not knowingly use children’s data for targeted advertising or in any manner likely to cause harm. If you believe a child has provided us personal data without the required parental consent, contact us at neetardedsupport@gmail.com and we will take appropriate steps, including deletion where required.

8. Data retention

We retain personal data for as long as your account is active and for as long as needed to provide the Service, and thereafter only as necessary to: comply with our legal, tax, and accounting obligations (for example, retaining payment and transaction records for the period required by law); resolve disputes; and enforce our agreements. When data is no longer needed, we delete or anonymise it. Residual copies may persist in routine backups for a limited period before being overwritten.

9. Your rights

Subject to applicable law, including the DPDP Act, you have the right to:

• access and obtain a summary of the personal data we hold about you;
• correct, complete, or update inaccurate or incomplete data;
• request erasure of your personal data;
• withdraw consent you previously gave (this does not affect prior, lawful processing);
• nominate another person to exercise your rights in case of death or incapacity; and
• grievance redressal (see below).

You can edit much of your profile directly in the app. To exercise any other right, email us at neetardedsupport@gmail.com from your registered email address. We may need to verify your identity before acting on a request, and some data may be retained where the law requires or permits.

10. How we protect your data

We use reasonable technical and organisational measures designed to protect personal data, including encrypted connections (HTTPS), access controls, and reliance on reputable infrastructure providers. Payment-sensitive data is handled by our payment processor. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. If we become aware of a personal-data breach affecting you, we will act in accordance with applicable law.

11. Third-party links

The Service may contain links to third-party websites or services that we do not control. This Policy does not apply to them, and we are not responsible for their privacy practices. Please review their policies.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after changes take effect indicates your acceptance of the updated Policy.

13. Contact & grievance officer

For any privacy questions, requests, or complaints, contact our Grievance Officer:

• Grievance Officer: Nashim Aktar Mondal
• Email: neetardedsupport@gmail.com

We will acknowledge and address grievances within the timelines required by applicable law.