Privacy Policy

1. Introduction

NEET Prep Easy is operated by HLSR Technologies Private Limited ("we," "our," or "us"), a company incorporated under the Companies Act, 2013, having its registered office at Desk ID: VO-222, Embassy Golf Links, Cinnabar Hills, Off Intermediate Ring Road, Domlur, Bengaluru, Karnataka 560071, India.

Where we determine the purpose and means of processing personal data collected from Users, we act as a Data Fiduciary within the meaning of the Digital Personal Data Protection Act, 2023 ("DPDPA"). We are committed to protecting your privacy and processing your personal data in a manner intended to align with the DPDPA and other applicable Indian data protection laws.

This Privacy Policy explains how we collect, use, share, retain, and safeguard your information when you use our mobile application and services. This Policy should be read together with our Terms of Service.

2. Information We Collect

Account Information

• Name
• Email address
• Phone number
• Class/Grade

Usage Data

• Questions you ask within the app
• Your question and answer history
• App preferences (language, teaching style, answer mode)

Technical Data

• Device type and operating system
• App version
• General usage analytics

3. Legal Basis and Purposes of Processing

We process your personal data based on your consent, which you provide through a clear affirmative action (accepting our Terms of Service and Privacy Policy) at the time of registration. Where consent is the legal basis, such consent is intended to be specific, informed, unambiguous, and freely given — not through pre-selected boxes or passive acquiescence.

We may also process personal data where it falls within recognised legitimate uses under applicable law, including situations where you have voluntarily provided personal data for a specified purpose and have not indicated non-consent, or where processing is reasonably necessary for fraud prevention, security, or legal compliance.

We use your information for the following purposes:

• To provide and personalise our educational AI tutoring service
• To create and maintain your user account
• To authenticate your login credentials and send verification codes
• To maintain your question history for your reference
• To remember your preferences across sessions
• To improve our service, content quality, and user experience
• To respond to support requests, complaints, and grievances
• To maintain audit trails, prevent fraud, and ensure platform security
• To comply with legal, regulatory, or law-enforcement requirements
• To send you service-related communications (see Section 8)

4. Third-Party Services

We use the following third-party services to operate our app. Your data may be shared with these services on a need-to-know and purpose-bound basis:

• Supabase — Cloud database for user authentication, account storage, question history, and preferences
• OpenRouter — AI service provider for routing queries to large language models (LLMs) that generate educational explanations and text-to-speech narration
• Vercel — Cloud infrastructure for hosting and serving the application and its API functions
• Fast2SMS — SMS gateway for delivering OTP (one-time password) verification codes to your phone number
• PostHog — Product analytics service that captures app usage events, screen views, and behavioural data to help us understand how users interact with the App, debug issues, and improve the learning experience. PostHog may also store anonymised device identifiers

These services process data as necessary to provide our App's functionality. Each service is governed by its own privacy practices and terms. To the extent reasonably practicable, data shared with these providers is subject to confidentiality obligations, access restrictions, and use limitations appropriate to their role.

Personal data shall not be sold as a standalone data commodity. However, disclosure may occur where required to comply with law, court order, government requisition, regulatory direction, legal process, or the protection of rights, property, safety, or platform integrity.

5. Cross-Border Data Transfer

Your personal data may be processed on servers located outside India, including in the United States, through the third-party services listed in Section 4. Such transfers are made in accordance with applicable law. As of the date of this Policy, no country has been restricted for data transfer under the DPDPA. Should such restrictions be notified in the future, we will take appropriate steps to comply.

6. Communications

By creating an account and providing your phone number and/or email address, you consent to receive communications from us through SMS, phone calls, push notifications, in-app messages, emails, or other electronic means for purposes including:

• Login verification codes and OTPs
• Account administration and security alerts
• Service updates and important notices
• Support responses and grievance handling
• Educational content, study reminders, and recommendations
• Promotional offers (where permitted by law)

You may opt out of promotional communications by contacting us at support@hlsrtech.com. Service-related communications (OTPs, security alerts, legal notices) cannot be opted out of while your account remains active.

7. Data Retention

We retain your personal data for as long as your account is active and as reasonably necessary to fulfil the purposes for which it was collected. Your question history is stored to allow you to review past learning sessions.

Upon account deletion, we will delete or anonymise your personal data (including your phone number, email, question history, and preferences) within 30 days, except where retention is required for legal compliance, fraud prevention, dispute resolution, audit purposes, or other lawful grounds.

If you withdraw consent for processing that is essential to a requested service, we may be unable to continue providing that service to you. Such inability shall not constitute a deficiency of service where the withdrawn data was reasonably necessary for the relevant function.

8. Data Security

We implement reasonable security safeguards commensurate with the nature and volume of personal data processed, including:

• Encrypted data transmission using HTTPS/TLS
• Access controls and need-based permissions for data access
• Secure cloud hosting with reputable infrastructure providers
• Secure authentication using one-time passwords (OTPs)
• Regular monitoring for security incidents

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot warrant absolute security, and you acknowledge that residual risk is an inherent aspect of all digital interaction.

9. Your Rights

Subject to applicable law and reasonable identity verification, you have the following rights regarding your personal data:

• Access — View your question history and account information within the App
• Correction — Request correction or completion of inaccurate or incomplete personal data
• Deletion — Permanently delete your account and all associated data through Settings → Support & Legal → Delete Account
• Consent Withdrawal — Withdraw your consent for data processing at any time (see Section 10)
• Grievance Redressal — Raise concerns about how your data is processed (see Section 14)
• Regulatory Recourse — Approach the Data Protection Board of India if you believe your data rights have been violated

To exercise any of these rights (other than in-app actions like account deletion), please contact us at support@hlsrtech.com. We will respond to your request within a reasonable timeframe in accordance with applicable law.

10. Consent Withdrawal

You have the right to withdraw your consent for data processing at any time. You may do so by:

• Deleting your account — Through Settings → Support & Legal → Delete Account, which removes all your data
• Contacting us — Email support@hlsrtech.com to request specific consent withdrawal

Please note that withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Additionally, certain portions of the App are inherently account-dependent and cannot function without processing essential personal data (such as your phone number for authentication and question history for the learning experience). If you withdraw consent for such essential processing, we may be unable to continue providing the relevant service.

11. Age Requirement and Children's Data

Please ensure that you are 18 years of age or older to use NEET Prep Easy. We do not knowingly collect information from individuals under 18 without the involvement of a parent or lawful guardian.

Where the App is used by or for the benefit of a minor, the parent or lawful guardian assumes full responsibility for supervising and evaluating the suitability of the minor's use of the App, including all digital interactions and data submitted. We may require parental or guardian involvement, declarations, or consent as we deem appropriate or as required under applicable law.

12. AI-Generated Content

Our app uses artificial intelligence to provide educational content. This includes both real-time AI-generated responses to your questions and pre-generated educational material available within the App. All content, whether generated on-demand or prepared in advance, is produced using AI and may contain inaccuracies. Users should verify information with authoritative sources such as textbooks, teachers, and official NCERT materials.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by publishing the new policy within the App or on our website. Your continued use of the App after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

14. Grievance Officer

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, the following Grievance Officer has been appointed to address your concerns, complaints, or data-related requests:

If you are not satisfied with our resolution, you may approach the Data Protection Board of India as established under the DPDPA for further recourse.

15. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

HLSR Technologies Private Limited
Email: support@hlsrtech.com
Address: Desk ID: VO-222, Embassy Golf Links, Cinnabar Hills, Off Intermediate Ring Road, Domlur, Bengaluru, Karnataka 560071, India