What we collect.
And what leaves your device.

The Data Fiduciary is Veranox Systems Private Limited (incorporation in progress), based in Chennai, Tamil Nadu, India. Questions, corrections, deletions and grievances go to our Grievance Officer in section 12.

• ·Account — your email address and a password (stored only as a secure hash by our authentication provider). Used to sign you in.
• ·Your first name and exam — whatever you type at setup, used to address you and to scope your syllabus. A nickname is fine.
• ·Practice activity — which questions you attempted, whether you were right, how sure you said you were, and how long you took. This is the evidence your readiness and capability scores are computed from.
• ·Questions you type into the AI features — see section 05, which explains where they go.
• ·Waitlist email, if you join the waitlist.

We do not run advertising trackers and we do not build behavioural profiles. We do not ask for your phone number, address, school, date of birth, or any government identifier.

In the current build, your practice history — every attempt, score and schedule — is stored in your own browser on your own device, and is not transmitted to us. Clearing your browser storage erases it, and we cannot recover it, because we never had it.

Solely to run the service: to sign you in, to work out where you stand, to schedule what you should revise, to generate answers you asked for, and to show a progress summary to a parent or guardian you have linked. We do not sell your data. We do not show third-party advertising. We do not repurpose your data for anything you did not ask for.

When you use the Quick answer or Tutor features, the text of your question is sent to third-party AI providers to be processed — currently Groq and Google (Gemini). Their servers are outside India, so this is a cross-border transfer of whatever you typed into that box.

• ·We send the question text and nothing else — not your name, not your email, not your practice history.
• ·Those providers process it under their own terms and may retain it under their own policies. We do not control their retention.
• ·The Practice and Drill features do NOT use these providers. They are graded entirely on your own device, so nothing you do there leaves it.

Most JEE and NEET aspirants are minors, and the Digital Personal Data Protection Act, 2023 treats a child’s data differently. If you are under 18, use Gradium Prepwith the consent of a parent or guardian. A parent or guardian may contact us at the address in section 12 to see, correct or delete their child’s data.

We do not use children’s data for behavioural monitoring or targeted advertising, and we do not run advertising on this product at all. Our detailed position on the Act is on the DPDP Act 2023 page.

If you link a parent or guardian, they see your readiness band and trend, how consistently you have been working, which chapters and capabilities are weak, and what the app has scheduled to fix them.

They do not see the individual questions you asked for help with, your wrong answers one by one, or any tutor conversation. That boundary is deliberate: a student who believes every admission of confusion is being read stops asking for help.

• ·Supabase — authentication and, in future, your account-backed progress.
• ·Vercel and Cloudflare — hosting and delivery of this site. They process standard request logs (including IP address) transiently to serve and secure the site.
• ·Groq and Google — AI processing, as set out in section 05.
• ·Razorpay — if and when payments go live. We never see or store your card or UPI details.

Practice data lives on your device until you clear it. Account data is kept while your account exists; ask us to delete the account and the personal data goes with it. Waitlist emails are kept until launch, or until you ask us to remove yours.

Passwords are hashed by our authentication provider and never visible to us. Credit and account rules are enforced on the server, not in your browser. The site is served over HTTPS with a strict content-security policy. No system is perfect, and we will tell you plainly if something material happens to your data.

Under the DPDP Act you may ask us to give you a copy of your personal data, correct it, delete it, or withdraw the consent you gave — and withdrawing consent must be as easy as giving it. Email the address below and we will action it. If you are under 18, your parent or guardian may exercise these rights for you.

Grievance Officer: Uday Vamsidhar Volety, Veranox Systems Private Limited, Chennai, Tamil Nadu, India.
Email: uday@veranox.in. We aim to respond within 3 working days.