Privacy Policy

1. What we collect

• Account data. Email address (from sign-up via email magic link or Google OAuth), name, profile photo (Google OAuth only), and an auto-generated user ID.
• Study data. Your answers to the 5-minute readiness assessment, chapter mastery, block-level attempts, mistakes, streak, and target Biology score.
• Payment data. When you upgrade, Dodo Payments receives your payment method (UPI handle, card, etc.). We receive only the payment confirmation, amount, and payment ID, never your full card number or UPI PIN.
• Usage analytics. Anonymised event logs (page views, clicks on key CTAs, assessment completions) via PostHog. These are keyed to your user ID after sign-in; before sign-in they’re keyed to a rotating anonymous ID.
• Your NCERT PDF.When you upload a chapter PDF to the reader, it is saved in your browser’s local storage (IndexedDB) and never uploaded to our servers. The reader reads it locally on your device. If you clear your browser storage, the PDF is gone.

2. What we don’t collect

• Your phone number, address, date of birth, or ID documents.
• NCERT textbook contents from your device.
• Any browsing activity outside neet.bio.
• Microphone, camera, or location data.

3. How we use your data

• To give you access to the study platform, sign you in, remember your progress, compute your readiness score, and personalise your plan.
• To process payments via Dodo Payments when you upgrade.
• To improve the product, which chapters confuse students, which questions are mis-answered, where the funnel drops off.
• To email you about your account (sign-in links, payment receipts, policy changes). We don’t send marketing emails.

4. Who we share with

We share only what’s necessary, only with these processors:

• Supabase, hosts our database + authentication. Your account + study data lives here.
• Vercel, hosts the website. Serves pages and API responses.
• Dodo Payments, processes payments. Receives your payment instrument and returns a success/failure signal to us.
• PostHog, captures anonymised usage events for product analytics.
• Google (OAuth only, and only if you sign in with Google), verifies your email and returns your name + profile photo.

We do not sell or rent your data to advertisers or third parties. We do not have an ad network on neet.bio.

5. Cookies

We use two kinds of cookies, both functional:

• Session cookies (sb-*-auth-token) issued by Supabase to keep you signed in.
• Analytics cookies issued by PostHog to de-duplicate event streams. No cross-site tracking.

No third-party ad cookies. No Meta Pixel, no Google Ads tag.

6. Your rights

• Access, email hello@neet.bio and we’ll send you every row of data we have on you within 14 days.
• Delete, from Settings → Help → Delete my account, or email us directly. We delete your account, assessment responses, study progress, and PostHog events within 14 days. Payment records we are legally required to retain under Indian tax law (up to 8 years) are kept in anonymised form.
• Correct, edit your name and target score directly in Settings.
• Export, email us for a JSON dump of everything we hold on you.

7. Data retention

Active accounts: data retained while the account exists. Inactive accounts (no sign-in for 3 years): anonymised and then deleted. Explicit deletion requests are honoured within 14 days as above.

8. Children

NEET is taken by students aged 17+. The platform is intended for users 13 and older. If you are under 13, do not use the service. If we discover we’ve inadvertently collected data from a child under 13, we will delete it.

9. Changes to this policy

We’ll update the “Last updated” date at the top of this page when this policy changes. Material changes (new data we collect, new processors) will be flagged via email to signed-up users.

10. Contact

Questions, requests, or complaints, hello@neet.bio.