Privacy policy

This policy explains what personal data ridhww ("we") collects, why, and the choices you have. We collect only what we need to run the service.

What we collect

• Account: name, email, password (stored only as a bcrypt hash), date of birth and target exam. We ask for date of birth only to apply the rules for under-18s. We do not ask for phone number, address or ID.
• Parent's email, for users under 18, used only to ask for and record consent.
• Study activity: tests, answers, time per question, flags and notes, used to show your analytics, mock test ranks and percentiles, streaks and badges.
• Study tools: your flashcard decks, cards and review history, your notes, highlights and bookmarks. These are private to you. Decks and chapter notes that educators publish for everyone show the educator's name.
• Forum posts: threads, replies and votes. Posts are visible to every signed-in user, with your name.
• Messages you send in chat, and images you share there.
• Research Hub: the reference lists and PDFs you upload to a review, your screening decisions, notes and labels. These are visible to the members of that review, within its blinding settings.
• Payments: handled by Stripe. Card details go directly to Stripe and never reach our servers. We keep the plan, amount, date and Stripe reference.
• Security data: IP address and a random device identifier, used for rate limiting, the device limit on paid plans, and fraud prevention.
• Consents: the date and version of the terms you accepted, and your marketing choice.

Why we use it

• To provide the service you signed up for (contract).
• To keep accounts secure and prevent abuse (legitimate interest).
• To send account emails such as receipts, password resets and verification (contract).
• To send product news, only if you opted in (consent). You can withdraw consent at any time from Settings or from the unsubscribe link in any such email.

Children and users under 18

Many NEET aspirants are 16 or 17. India's Digital Personal Data Protection Act treats anyone under 18 as a child. For these users we require a parent's or guardian's consent by email before the account is activated. Their name is hidden on public leaderboards by default, and they never receive marketing emails. Users must be at least 13 to sign up.

Who we share it with

We do not sell personal data. We use these service providers, only for the purposes listed:

• Stripe: payments and invoices.
• Pusher: delivers chat messages in real time.
• Google: only if you choose "Continue with Google", to confirm your identity.
• Cloudflare Turnstile: checks that sign-up and contact forms are used by people, not bots.
• US National Library of Medicine (PubMed): only the search terms you type when you search PubMed from a review. No personal data is sent.
• Our hosting provider: stores the database and files.

Other chat members see your name and the messages you send to them. Signed-in users see your name on your forum posts (under-18s: first name only).

Leaderboards

Mock test leaderboards and the weekly leaderboard show your name, or "Anonymous student" if you choose to hide it in Settings. Under-18s always appear as "Anonymous student". You can also leave the weekly leaderboard completely. Your mock percentile always counts you, without showing your name to anyone who isn't you.

How long we keep it

We keep your data while your account is open. If you delete your account, your personal data is removed within 30 days. Reviews you shared with others are handed to the next member of each review so their work isn't lost; your own decisions in them are kept without your name. Your forum replies are deleted; a thread you started that others answered keeps their replies, but your text and name are removed. Educator decks and notes stay available to students without the author's name. Payment records are kept as long as tax law requires.

Your rights

You can see, correct, download and delete your data. Download a copy from Settings → Privacy, and delete your account from the same page. To ask about your data, or to complain, email [email protected]. You may also complain to your local data protection authority.

Security

We use HTTPS everywhere, hashed passwords, encrypted storage for secrets, rate limits on sign-in, and optional two-factor sign-in for staff and educators.

Changes

If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.