Legal
Privacy Policy
What we collect, why, who else sees it, and what you can ask us to do about it. Clause 4 lists every provider that receives your data and the country it sits in.
1. Who This Applies to
1.1 Anyone who uses NAADI AI — a student, a parent or guardian, a teacher, or a school administrator.
1.2 We are the Data Fiduciary for the personal data described here, under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
1.3 Where a school, college or institute purchases NAADI AI for its students, we remain the Data Fiduciary for the student data we hold. The institution decides who is enrolled; it decides nothing else about a student that is not described in this policy.
2. What We Collect
2.1 What you give us
- Account details — name, email address, and a password. If you sign in with Google we receive your name, email and profile photo from Google instead of a password.
- Profile details — class, target examination year, school or class code, and roll number, where you provide them.
- Date of birth — collected so that we know whether you are under eighteen. See §7.
- Guardian contact — a parent or guardian's name, phone number and email address. Where a student is under eighteen we hold a guardian's contact rather than the student's own phone number.
- Payout details — a UPI ID and a WhatsApp number belonging to the parent or guardian, and only where a referral reward has been earned and is to be paid. Rewards are never paid to a student under eighteen.
- What you write — your messages to Nia, your notes, and free-text answers you type. This includes answers to the short questionnaire we ask when you delete your account (§10.3).
2.2 What the Service records as you use it
- Study activity — which chapters and cases you opened, the questions you answered, whether each was right or wrong, how long you took, your scores, streaks and progress over time.
- Payment records — the payment identifier from Razorpay, the amount, the plan, the status and the date. We never receive or store your card number, CVV, UPI PIN or bank credentials.
- Technical data — IP address, device and browser type, and error logs, kept for security and debugging.
- The consent record, where the student is under eighteen — who consented, when, from which address, by which route, and which version of the wording they were shown. See §7.6.
2.3 What we do not collect
We do not collect location data. We do not read your contacts. We do not run advertising, and we embed no third-party advertising or social tracking pixels.
3. Why We Use it
| Purpose | What it covers |
|---|---|
| Providing the Service | Your account, your access, your study history, your progress |
| Teaching | Adapting what you are shown to what you have got wrong |
| Nia | Answering your questions with the context of what you are working on |
| Parent and teacher portals | Showing a linked adult your progress — see §5 |
| Payments | Taking payment, issuing refunds, paying referral rewards |
| Safety | Detecting misuse, protecting other users, and §9 |
| Legal | Tax records, and responding to lawful requests |
3.1 Where you are eighteen or above we rely on your consent, and on the necessity of processing to provide the Service you asked for. Where you are under eighteen we rely on the verifiable consent of your parent or guardian (§7).
4. NIA, and the AI Processor
4.1 Nia is an artificial intelligence assistant. It is not a person, and every answer it gives is machine-generated. Answers are labelled as such wherever they appear.
4.2 Nia is powered by DeepSeek, whose servers are outside India.
4.3 What is sent, and what is not
Sent — your question, and an anonymised description of what you are working on: the chapter, the paper, the question in front of you, and how you have performed on that topic, expressed as identifiers and scores.
Not sent — your name, your email address, your phone number, your guardian's contact details, your payment records, or your date of birth.
4.4 Nia is not a doctor. It does not give medical advice, and nothing it says about a symptom, a condition or a treatment should be relied on outside your NEET preparation.
4.5 Answers can be wrong. Check anything that matters against your textbook.
4.6 Reporting an answer
Every answer Nia gives carries a Report button. If an answer is wrong, inappropriate or unsafe, use it.
The report goes to the NAADI team — not to your teacher and not to your school — and it carries the question and the answer with it, so that we are looking at exactly what you saw. You do not have to give a reason, although there is a box if you want to.
We read reports to correct answers and to tighten what Nia is allowed to discuss. Reporting an answer never affects your account.
4.7 Legal basis for the transfer
Section 16 of the DPDP Act permits transfer of personal data to any country the Central Government has not notified as restricted. No such notification affects this transfer at the date of this policy. If one is made, we will change providers or stop the transfer.
5. What Parents and Teachers Can See
5.1 NAADI AI deliberately shows a linked adult less than the student sees.
5.2 A parent can see progress, scores, time spent, streaks and weak topics — only for a child who has invited them, or to whom they have been linked and verified.
5.3 A teacher can see the same kind of progress data for students in their own class at their own school, once the class link exists on both sides.
5.4 Nobody except you sees your conversations with Nia. They do not appear in the parent portal or the teacher portal.
5.5 Where a teacher asks Nia about their class, student identifiers are pseudonymised before transmission and restored in the answer shown to the teacher. This is a best-effort control, not a guarantee: a teacher who types a student's name into their own question sends that name as written.
5.6 There is one exception to §5.1, and it is deliberate: if you begin deleting your account, a linked guardian and your class teachers are told. See §10.4.
5.7 A student may ask us to remove a parent or teacher link at any time.
7. Students Under Eighteen
7.1 Most NEET aspirants are between sixteen and eighteen, so this section matters more here than in most services.
7.2 A person under eighteen is a Child under the DPDP Act. We collect a date of birth so that we know.
7.3 Where the user is a Child, a parent or legal guardian must give verifiable consent before access is granted. The account is created and then held closed. Until consent is given the student can reach nothing in it — no chapters, no tests, no Nia — and can make no payment. They can still delete the account, which we never prevent.
7.4 That consent covers all processing described in this policy, not only Nia.
7.5 There are two ways it can be given.
a. We ask the guardian directly. The student gives us a parent or guardian's email address and mobile number. We email that address a link to a page setting out what NAADI AI does, what the account costs, what we collect, and what leaves India. The guardian ticks a box and chooses to give or refuse permission. The link is theirs alone, expires in fourteen days, and a fresh one is sent if the student asks again.
b. A school stands behind its students. Where a school, college or institute has bought NAADI AI for a class, it signs an order form warranting that it holds written consent from the parent or guardian of every student under eighteen it enrols, and it gives those students a confidential password for their section. A student who enters it is recorded as covered by that warranty, and we do not email their parent separately. We can require the school to produce that written consent, and a school that does not hold it must not issue the password.
7.6 What we record when consent is given, and keep for as long as the account exists: the guardian's email address and mobile number, the date and time, the IP address it was given from, which of the two routes above was used, and which version of the consent wording was on screen at the time. That last one matters: if we later change what the form says, an older consent covers what that guardian actually read, and not the new wording.
If the account is later deleted, this record is stripped of every identifying field — the guardian's address and phone number, the IP it came from, and the student's own name, email and date of birth all go — and what is left is kept as anonymous evidence that consent was properly obtained. It is listed in §10.6.
7.7 If a guardian refuses, we record the refusal and the reason if they give one, and the account stays closed. The student may ask again at any time, and the guardian gets a new link. Nothing they had set up is lost while they wait.
7.8 The account is created in the Child's name and used by the Child. The guardian is the person who consented, and who may exercise the rights in §12 on the Child's behalf.
7.9 For a Child's account we carry out no tracking or behavioural monitoring for advertising, and we serve no targeted advertising. The only monitoring we do is educational progress, shown to the student and to a linked adult.
7.10 A guardian may withdraw consent at any time. There is a withdrawal link in the confirmation email we send when consent is given, and you can also write to admin@naadiai.in. Withdrawing closes the student's access until permission is given again; it does not by itself delete the account. If you want the account and its contents erased, use §10.
7.11 A guardian may ask to see what we hold about their child, correct it, or have it deleted. We will ask for enough information to confirm the relationship first.
7.12 Date of birth. We ask for it at sign-up, because without it we cannot tell who is a Child, and guessing from a school class is not good enough for a decision this size. It is not shown to other students, not used for advertising, and not used for anything except this. A student may correct it once; after that, or once a consent request has gone out, it is fixed and only we can change it.
9. When We Look at What You Write
9.1 We do not read your messages routinely, and no human sees them as a matter of course.
9.2 Two automated checks run on text you write.
- Messages to Nia are checked for safety before they are answered.
- Anything you type into the questionnaire when deleting your account is checked for signs that you may be in distress. If it matches, we show you a mental-health helpline.
9.3 Neither check stops you doing anything. The helpline is shown alongside your deletion, which goes ahead exactly as you asked. We record that it was shown; we do not record the words that triggered it.
9.4 A human reads a message only where it has been reported, where one of these checks has flagged it and it needs review, or where we are lawfully required to.
10. Deleting Your Account
10.1 It is yours to do, and it is immediate
You can delete your account yourself, at any time, from your profile in the app or at naadiai.in/delete-account. There is nothing to ask for and nobody to wait for. Your sign-in is revoked immediately and your data is removed within minutes, except for the records in §10.6.
10.2 It cannot be undone
There is no grace period, no restore, and no backup we can go to. Once confirmed, your attempts, notes, progress and conversations are gone permanently.
10.3 We ask four questions first
Every one can be skipped, none of them changes anything, and no answer is required to delete your account. Anything you type is limited to 200 characters and kept with the deletion record for 24 months. We ask because it is the only chance we get to find out why people leave.
10.4 A guardian and your class are told
If you start deleting your account, we tell a guardian linked to you and the teachers of your class — by email and in their app — that you have begun, and again once it is done. The message names you. Your guardian is told what the deletion would cost financially; your teachers are not.
Nobody can stop or delay your deletion. It is a notification, not a request for permission, and it never waits for a reply. If you close the screen without going ahead, the in-app message is withdrawn; the email has already been sent and cannot be recalled.
10.5 Refunds
If you are inside the refund window when you delete, any refund due is paid automatically as part of the same step. See the Refund Policy.
If the refund cannot be processed, we stop and delete nothing — once the account is gone we have no account to pay into and no way to reach you. You can still choose to delete anyway, and we will keep a record of what we owe you so it can be paid by hand. That record is listed in §10.6.
10.6 What survives a deletion, and why
Seven things can outlive the account. Every one is deliberate, and every one has an end.
| What | Why | How long |
|---|---|---|
| Anonymised order record — amount, date, plan, payment reference. Name, email, phone and contact details are removed. | Tax law requires transaction records | 8 years |
| Deletion record — user id, name, date, what was deleted, what was refunded, questionnaire answers | So an erasure that failed can be found and finished — your login is already gone, so you cannot tell us. And so a school can be told which student left. | 24 months, then purged |
| One line on a guardian's and your class's notice board, naming you | So a name disappearing from a roster has an explanation | Until dismissed |
| Your messages in shared conversations with a teacher — kept, with your name replaced by "Deleted student" | They are the teacher's record too, and not yours alone to erase | Indefinitely, anonymised |
| Safety reports made about you | A record you can erase by deleting your account is not a record | Indefinitely |
| A record of money we still owe you — your name, email address and the amount. Kept only where you chose to delete while a refund could not be processed. | We cannot pay you without a way to reach you, and the alternative is quietly keeping your money | Until paid, then removed |
| An anonymised consent record, where you were under eighteen — that a consent was given or refused, on what date, by which route, and under which version of the wording. Your guardian's email address, their phone number, the IP it came from, and your own name, email and date of birth are all removed. | It is the evidence that a Child's data was processed with permission, and a question about that can arrive after the account is gone. What is left identifies nobody. | Indefinitely, anonymised |
11. How Long We Keep Everything Else
| Account and study data | While your account is active, and 12 months after your access term ends, so a returning student does not lose their history |
| Nia conversations | Until you delete them, or until your account is deleted |
| Technical logs | Up to 90 days |
| Payment records | 8 years, as tax law requires — anonymised on deletion (§10.6) |
| Consent records (§7.6) | While the account exists. If the account is deleted the record is anonymised rather than removed — see §10.6 |
12. Your Rights
12.1 Under the DPDP Act you may ask us to:
- tell you what personal data we hold about you, and who we have shared it with;
- correct anything inaccurate, or complete anything incomplete;
- delete your data — which you can also do yourself, in seconds, from your profile or at naadiai.in/delete-account;
- withdraw consent you have given, though this may mean parts of the Service stop working; and
- nominate someone to exercise these rights for you if you die or become incapacitated.
12.2 Write to admin@naadiai.in. We respond within 30 days. There is no charge.
12.3 You may complain to the Data Protection Board of India, though we would ask for a chance to fix it first.
12.4 The Act also places a duty on you: give us accurate information, and do not impersonate anybody.
13. How We Protect it
13.1 Traffic is encrypted with HTTPS. Passwords are handled by Google Firebase Authentication and are never stored by us in readable form. Access to production data is tightly restricted. Payment credentials never touch our servers.
13.2 No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as the Act requires.
14. Changes
14.1 We may update this policy. The revised version takes effect when published at naadiai.in/privacy, and the effective date at the top will change.
14.2 If a change materially reduces your rights, we will tell you by email before it takes effect.
15. Grievance Redressal
15.1 Privacy questions, requests under §12, and complaints go to admin@naadiai.in.
15.2 Details of the Grievance Officer appointed under the DPDP Act and the Consumer Protection (E-Commerce) Rules, 2020:
- Name: Sirpi A S
- Designation: Founder & Grievance Officer
- Email: admin@naadiai.in
- Address: 97A Perambur Redhills Road, Kalpalayam, Kolathur, Chennai, Tamil Nadu 600099, India
15.3 The Grievance Officer acknowledges a complaint within forty-eight hours and will endeavour to redress it within one month of receipt.