Privacy Policy

1. Introduction

NEET Prep Easy is operated by HLSR Technologies Private Limited ("we," "our," or "us"), a company incorporated under the Companies Act, 2013, having its registered office at Desk ID: VO-222, Embassy Golf Links, Cinnabar Hills, Off Intermediate Ring Road, Domlur, Bengaluru, Karnataka 560071, India.

Where we determine the purpose and means of processing personal data collected from Users, we act as a Data Fiduciary within the meaning of the Digital Personal Data Protection Act, 2023 ("DPDPA"). We are committed to protecting your privacy and processing your personal data in a manner intended to align with the DPDPA and other applicable Indian data protection laws.

This Privacy Policy explains how we collect, use, share, retain, and safeguard your information when you use our mobile application and services. This Policy should be read together with our Terms of Service.

2. Information We Collect

Account Information

• Name
• Email address
• Phone number
• Class/Grade

Usage Data

• Questions you ask within the app
• Photos you submit with a doubt (the image you capture or upload, including the cropped portion sent to the AI) — see Section 2.2
• Your question and answer history
• App preferences (language, teaching style, answer mode)

Technical Data

• Device type and operating system
• App version
• General usage analytics

2.1 Referral Programme Information

Where we operate a referral or invite programme (for example, a programme under which a User and a friend they invite may each receive a period of free access), we process the following additional information:

Referral link data

• The referral code contained in the invite link that was opened
• IP address, device type, browser/user-agent string, approximate country, and language of the device that opened the link
• Date and time the link was opened, and whether it subsequently led to an app installation

This information is collected when a person opens a referral link, including before any account is created, and is used solely to attribute an installation to the referral that led to it, to prevent duplicate or fraudulent reward claims, and to measure the effectiveness of the programme.

Install attribution data

• Referral, campaign, and source parameters supplied by the app store at the time of installation (on Android, via the Google Play install-referrer mechanism)
• On platforms that do not provide install-referrer data (such as iOS), a best-effort, time-limited match between a recent referral link click and a new installation, based on IP address and device type

IP-based matching is inherently approximate and is used only to link an installation to a referral for the purpose of granting programme benefits. It is not used to determine your precise location, and we do not use it to build a location profile about you.

Phone number entered to claim a referral benefit

• Where automatic attribution does not succeed, you may optionally enter the mobile number of the friend who invited you, or of a friend you invited, so that we can verify the referral
• We use that number only to check whether it corresponds to an existing NEET Prep Easy account and to link the two accounts for the purpose of the programme
• If the number does not match an existing account, it is not stored
• Entering a number is always optional; you may skip it and continue to use the app normally

What we disclose to the other participant

• We never disclose your phone number, email address, account identifier, results, scores, or activity to another User through the referral programme
• Where a referral is attributed automatically because a User shared their own invite link, we may display that User's first name or chosen display name to the person who opened the link, and may confirm to the inviting User that a friend they invited has begun using the app
• Where a referral is established because someone typed in a mobile number, we do not disclose any name to either party, and we do not confirm whether a given number is or is not registered with us; such requests receive a neutral response regardless of outcome
• You may ask us to suppress your display name from the referral programme at any time using the contact details in this Policy

Retention. Referral link-click records (including IP address and user-agent) are kept only for as long as reasonably necessary for attribution, fraud prevention and programme measurement, and are then deleted. Records linking two accounts for the purposes of the programme, and records of any free-access period granted, are retained for the duration of your account, as they form part of your entitlement history, and are deleted or anonymised on account deletion in accordance with Section 7.

Participation in any referral programme is voluntary. The programme is a promotional offering and may be modified, suspended, or withdrawn at any time, as described in our Terms of Service.

2.2 Photos Submitted with Doubts

When you use the camera or gallery to ask a doubt, the photo you submit is sent to our AI service to generate your answer. We also retain a copy of the submitted photo — both the full frame you captured and the cropped portion the AI analysed — on our secure servers.

• Why we keep it — for internal research and quality analysis: understanding how students scan questions, debugging incorrect answers, and improving answer quality
• How it is stored — in a private storage bucket with access restricted to our team; photos are never made publicly accessible and are not shared with anyone beyond the service providers listed in Section 4
• How long — photos are automatically deleted within 90 days of submission, and as part of account deletion if you delete your account

Photos are used only for the purposes described in this Policy. They are not used to identify you, are not used for advertising, and are not sold or licensed to anyone.

3. Legal Basis and Purposes of Processing

We process your personal data based on your consent, which you provide through a clear affirmative action (accepting our Terms of Service and Privacy Policy) at the time of registration. Where consent is the legal basis, such consent is intended to be specific, informed, unambiguous, and freely given — not through pre-selected boxes or passive acquiescence.

We may also process personal data where it falls within recognised legitimate uses under applicable law, including situations where you have voluntarily provided personal data for a specified purpose and have not indicated non-consent, or where processing is reasonably necessary for fraud prevention, security, or legal compliance.

We use your information for the following purposes:

• To provide and personalise our educational AI tutoring service
• To create and maintain your user account
• To authenticate your login credentials and send verification codes
• To maintain your question history for your reference
• To remember your preferences across sessions
• To improve our service, content quality, and user experience
• To respond to support requests, complaints, and grievances
• To maintain audit trails, prevent fraud, and ensure platform security
• To comply with legal, regulatory, or law-enforcement requirements
• To send you service-related communications (see Section 8)

4. Third-Party Services

We use the following third-party services to operate our app. Your data may be shared with these services on a need-to-know and purpose-bound basis:

• Supabase — Cloud database for user authentication, account storage, question history, and preferences
• OpenRouter — AI service provider for routing queries to large language models (LLMs) that generate educational explanations and text-to-speech narration
• Vercel — Cloud infrastructure for hosting and serving the application and its API functions
• Fast2SMS — SMS gateway for delivering OTP (one-time password) verification codes to your phone number
• PostHog — Product analytics service that captures app usage events, screen views, and behavioural data to help us understand how users interact with the App, debug issues, and improve the learning experience. PostHog may also store anonymised device identifiers. A sample of in-app sessions is recorded as session replays for debugging and product improvement.
• Meta (Facebook / Instagram) — Advertising measurement. Where the App is installed from a Meta advertisement, the Meta SDK included in the App reports standard app events (such as installation and app opens) and may collect your device advertising identifier, so that Meta can measure whether its advertisement led to an installation. From our servers we additionally send two conversion signals — that you reached a learning milestone in the App, and that a purchase occurred (together with its amount) — identified only by an irreversible cryptographic hash of your phone number or email address. We do not send Meta your name, your readable phone number or email address, your questions, your answers, your scores, or any other study data
• Google (Firebase Analytics / Google Ads) — Advertising measurement. Where the App is installed from a Google advertisement, Firebase Analytics reports app events to Google Ads so that it can measure whether its advertisement led to an installation and to engaged use. The events reported are: first app open, app open, sign-up completion, reaching a learning milestone, submitting a full mock test, and indicating interest in a paid plan. These events are linked to a device identifier rather than to your name or contact details, and carry no study content

These services process data as necessary to provide our App's functionality. Each service is governed by its own privacy practices and terms. To the extent reasonably practicable, data shared with these providers is subject to confidentiality obligations, access restrictions, and use limitations appropriate to their role.

Personal data shall not be sold as a standalone data commodity. However, disclosure may occur where required to comply with law, court order, government requisition, regulatory direction, legal process, or the protection of rights, property, safety, or platform integrity.

5. Cross-Border Data Transfer

Your personal data may be processed on servers located outside India, including in the United States, through the third-party services listed in Section 4. Such transfers are made in accordance with applicable law. As of the date of this Policy, no country has been restricted for data transfer under the DPDPA. Should such restrictions be notified in the future, we will take appropriate steps to comply.

6. Communications

By creating an account and providing your phone number and/or email address, you consent to receive communications from us through SMS, phone calls, push notifications, in-app messages, emails, or other electronic means for purposes including:

• Login verification codes and OTPs
• Account administration and security alerts
• Service updates and important notices
• Support responses and grievance handling
• Educational content, study reminders, and recommendations
• Promotional offers (where permitted by law)

You may opt out of promotional communications by contacting us at support@hlsrtech.com. Service-related communications (OTPs, security alerts, legal notices) cannot be opted out of while your account remains active.

7. Data Retention

We retain your personal data for as long as your account is active and as reasonably necessary to fulfil the purposes for which it was collected. Your question history is stored to allow you to review past learning sessions.

Upon account deletion, we will delete or anonymise your personal data (including your phone number, email, question history, and preferences) within 30 days, except where retention is required for legal compliance, fraud prevention, dispute resolution, audit purposes, or other lawful grounds.

If you withdraw consent for processing that is essential to a requested service, we may be unable to continue providing that service to you. Such inability shall not constitute a deficiency of service where the withdrawn data was reasonably necessary for the relevant function.

Referral programme data. Referral link-click records, including IP address and user-agent, are retained only as long as reasonably necessary for attribution and fraud prevention, and are then purged. Records linking two accounts under a referral programme, and records of free-access periods granted, are retained while your account remains active and are deleted or anonymised on account deletion in line with this Section. See Section 2.1 for full details.

Doubt photos. Photos submitted with doubts are retained for a maximum of 90 days and then automatically deleted. Photos belonging to deleted accounts are removed as part of the account-deletion process. See Section 2.2 for full details.

8. Data Security

We implement reasonable security safeguards commensurate with the nature and volume of personal data processed, including:

• Encrypted data transmission using HTTPS/TLS
• Access controls and need-based permissions for data access
• Secure cloud hosting with reputable infrastructure providers
• Secure authentication using one-time passwords (OTPs)
• Regular monitoring for security incidents

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot warrant absolute security, and you acknowledge that residual risk is an inherent aspect of all digital interaction.

9. Your Rights

Subject to applicable law and reasonable identity verification, you have the following rights regarding your personal data:

• Access — View your question history and account information within the App
• Correction — Request correction or completion of inaccurate or incomplete personal data
• Deletion — Permanently delete your account and all associated data through Settings → Support & Legal → Delete Account
• Consent Withdrawal — Withdraw your consent for data processing at any time (see Section 10)
• Grievance Redressal — Raise concerns about how your data is processed (see Section 14)
• Regulatory Recourse — Approach the Data Protection Board of India if you believe your data rights have been violated

To exercise any of these rights (other than in-app actions like account deletion), please contact us at support@hlsrtech.com. We will respond to your request within a reasonable timeframe in accordance with applicable law.

10. Consent Withdrawal

You have the right to withdraw your consent for data processing at any time. You may do so by:

• Deleting your account — Through Settings → Support & Legal → Delete Account, which removes all your data
• Contacting us — Email support@hlsrtech.com to request specific consent withdrawal

Please note that withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Additionally, certain portions of the App are inherently account-dependent and cannot function without processing essential personal data (such as your phone number for authentication and question history for the learning experience). If you withdraw consent for such essential processing, we may be unable to continue providing the relevant service.

11. Age Requirement and Children's Data

Please ensure that you are 18 years of age or older to use NEET Prep Easy. We do not knowingly collect information from individuals under 18 without the involvement of a parent or lawful guardian.

Where the App is used by or for the benefit of a minor, the parent or lawful guardian assumes full responsibility for supervising and evaluating the suitability of the minor's use of the App, including all digital interactions and data submitted. We may require parental or guardian involvement, declarations, or consent as we deem appropriate or as required under applicable law.

12. AI-Generated Content

Our app uses artificial intelligence to provide educational content. This includes both real-time AI-generated responses to your questions and pre-generated educational material available within the App. All content, whether generated on-demand or prepared in advance, is produced using AI and may contain inaccuracies. Users should verify information with authoritative sources such as textbooks, teachers, and official NCERT materials.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by publishing the new policy within the App or on our website. Your continued use of the App after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

14. Grievance Officer

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, the following Grievance Officer has been appointed to address your concerns, complaints, or data-related requests:

If you are not satisfied with our resolution, you may approach the Data Protection Board of India as established under the DPDPA for further recourse.

15. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

HLSR Technologies Private Limited
Email: support@hlsrtech.com
Address: Desk ID: VO-222, Embassy Golf Links, Cinnabar Hills, Off Intermediate Ring Road, Domlur, Bengaluru, Karnataka 560071, India