Privacy Policy

This policy explains what NEET Prep, operated by NEET Prep, collects about you, why, who else sees it, and what you can do about it.

What we collect

• Account details. Your email address, and either a username and a password (stored only as a one-way hash — we never see it) or an identifier from your Google account if you sign in that way.
• What you answered, and whether you got it right. Every question you submit an answer to is recorded, with the option you chose, whether it was correct, and when. This is not incidental analytics — it is the product. Your chapter heatmap, accuracy, streak, history and mock results are all built from this record, and the service cannot work without it.
• Which days you used the app. We record the date each time you use NEET Prep, so we can see how many students are using it and whether that is growing. It is the calendar date only — not what you did that day, and not the time. This is kept per account rather than as an anonymous total, because otherwise we cannot tell one student returning for a month from thirty students arriving once.
• Payment records. The identifier, amount, status and what each payment bought. We never receive or store your card number, CVV, UPI PIN or bank credentials — those go directly to Razorpay.
• Technical data. IP address, browser and device information, and server logs, kept for security, rate-limiting and debugging.

Referral by a coaching centre

If you arrive through a coaching centre’s referral link, that centre is recorded against your account once, at signup, and never changes afterwards. If you later buy Pro access, that centre is credited with a commission, which means the centre is told that a student they referred has paid. They are not shown your answers, your scores or your activity.

Why we hold it, and for how long

• To provide the service you asked for — your account, your progress, your paid access. This is the contract between us.
• To keep the service secure and working: rate limiting, abuse prevention, fault diagnosis.
• To meet legal obligations, principally around financial records, which we are required to retain.

We keep account and activity data while your account is open. Financial records are kept for as long as the law requires, whatever happens to your account.

Who else processes it

We do not sell your data, and we do not use it for advertising. We use:

• Razorpay — payment processing.
• Google Firebase — only if you choose to sign in with Google.
• Our email provider — to send transactional mail such as a password reset.
• Our hosting provider — to run the service and store its database.

We may also disclose data where the law requires it.

Cookies and local storage

We store your session token and a few preferences in your browser so you stay signed in. There are no third-party advertising or tracking cookies. Clearing your browser storage signs you out and nothing else.

Your rights

• Ask for a copy of the data we hold about you.
• Ask us to correct anything inaccurate.
• Ask us to delete your account.
• Withdraw consent where we relied on it.

Write to [email protected] from the address on your account and we will respond within 30 days.

What deletion actually does, honestly: we remove your account, your answers, your history and your personal details. Records of payments are not deleted — they are kept, with the link to you removed, because we are required to retain financial records. Deleting your account does not refund anything; see the Refund & Cancellation Policy. If you have an active subscription, cancel it before deleting your account, or the mandate may keep billing.

Students under 18

Many candidates preparing for this exam are under 18. If you are, a parent or guardian should read this policy and agree to it on your behalf, and should be the one making any payment. If you believe a child’s data has been collected without that agreement, write to us and we will remove it.

Security

Passwords are stored only as one-way hashes. Traffic is encrypted in transit. Access to the database is restricted, and administrative accounts are separate from student accounts. No system is perfectly secure; if we discover a breach affecting your data we will tell you and the relevant authority without undue delay.

Changes, and complaints

We may update this policy; the date at the top says which version is in force. If you are unhappy with how we have handled your data, our Grievance Officer is listed on the Contact & Grievance Redressal page.