Privacy Policy

Data We Collect

• Email address (when you sign up)
• Account profile details from Google sign-in (name, email, profile photo) when you use Google OAuth
• Daily usage counts (questions asked per day)
• Question and answer history (to provide you with chat history)
• Mock test analysis results (when you use the Mock Analyser)
• Payment and subscription records (when you upgrade to Pro) — processed by our payment gateway; we do not store your full card details
• Technical data such as IP address, device/browser type, and cookies (see Cookies & Advertising below)

How We Use Your Data

Your data is used solely to provide and improve the JEE Genius service. We use your question history to enable chat history and personalized learning, enforce daily usage limits, process subscriptions, and keep the service secure. We do not sell your data to third parties. We process your personal data on the basis of the consent you provide when you sign up and use the service, which you may withdraw at any time (see Your Rights as a Data Principal).

Data Retention

We retain personal data only for as long as it is needed for the purposes described above or as required by law. Specific retention periods:

• Account & profile data (email, name): retained while your account is active, and deleted within 30 days of account deletion.
• Chat / question & answer history: retained while your account is active; deleted within 30 days of account deletion or earlier on request.
• Mock analysis results: retained while your account is active; deleted within 30 days of account deletion.
• Daily usage counts: retained for up to 12 months for abuse prevention and limit enforcement, then anonymized or deleted.
• Payment & subscription records: retained for up to 8 years as required by Indian tax and accounting law, even after account deletion.
• Locally stored data (browser localStorage): remains on your device until you clear browser storage.

Cookies & Advertising

We use cookies and similar technologies for essential functionality (keeping you signed in, remembering your theme preference, enforcing usage limits) and, for non-Pro users, for advertising.

We use Google AdSense to serve advertisements to non-Pro users. Google and its partners use cookies and device identifiers to serve and measure ads, including personalized ads based on your prior visits to this and other websites. Google's use of advertising cookies is governed by Google's Advertising policies. You can manage or opt out of personalized advertising at Google Ads Settings and aboutads.info/choices. We do not show personalized ads to users we know to be under 18 (see Children's Data), and Pro subscribers are not shown ads at all.

Data Storage & Security

Your data is stored securely using Supabase (PostgreSQL) with row-level security enabled. Some data (chat history, theme preference) is also stored locally in your browser's localStorage for offline access and faster loading. We apply reasonable security practices to protect your data against unauthorized access, but no method of transmission or storage is completely secure.

Data Sharing

We do not sell, trade, or rent your personal data to third parties. We share data only with service providers who help us operate the service, namely: Google Gemini AI (your questions are sent for processing — Google's privacy policy applies to that data), Supabase (database & authentication), Vercel (hosting), Google AdSense (advertising for non-Pro users), and our payment gateway (for Pro subscriptions). We may also disclose data where required by law.

Your Rights as a Data Principal

Under the DPDP Act, 2023 you have the following rights over your personal data:

• Right to access: request a summary of the personal data we hold about you and how it is processed.
• Right to correction: request that we correct inaccurate or incomplete data, or update or complete it.
• Right to erasure: request that we delete your personal data where it is no longer needed for the purpose it was collected (subject to legal retention obligations such as payment records).
• Right to withdraw consent: withdraw your consent to processing at any time, as easily as you gave it.
• Right to grievance redressal: raise a complaint with our Grievance Officer (below).
• Right to nominate: nominate another individual to exercise your rights in the event of your death or incapacity.

Withdraw Consent & Delete My Data

You can withdraw consent and request deletion of your account and associated personal data at any time. To do so, email our Grievance Officer at jeegeniustutor@gmail.com with the subject "Delete my data" from the email address linked to your account. We will verify your request and action it within 30 days. You can also clear locally stored data at any time by clearing your browser storage. Note that some records (e.g. payment and subscription records) must be retained to meet legal obligations even after deletion of your account.

Children's Data

JEE Genius is intended for students preparing for the JEE. We recognize that some of our users are under the age of 18. In line with the DPDP Act, 2023, where a user is a child (under 18), we require verifiable consent from a parent or lawful guardian before processing the child's personal data, and we do not undertake tracking, behavioral monitoring, or targeted (personalized) advertising directed at children. Users we know to be under 18 are shown only non-personalized ads or no ads. If you believe we have collected a child's data without appropriate parental consent, please contact our Grievance Officer and we will delete it.

Grievance Officer

In accordance with the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the contact details of our Grievance Officer are:

We aim to acknowledge grievances within 24 hours and resolve them within 30 days of receipt.

Contact

For any general privacy-related questions, reach us at jeegeniustutor@gmail.com.