Privacy Policy

Last updated: 13 October 2026

POV: NCERT (“we”, “our”, “us”) respects your privacy. This policy explains what personal data we collect on the website and the mobile app, why, and the choices you have.

1. Who we are

POV: NCERT is operated by Yash Dhage. Address: Sarova Complex, Kandivali East, Mumbai 400101.

Email: hello@povncert.com · or use our Contact page.

Complaints and grievances (Grievance Officer: Yash Dhage): write to the same email address. We acknowledge a complaint within 48 hours and aim to resolve it within one month.

2. What we collect

  • Account: your name, email address, password (stored only as a hash), your Google account ID if you sign in with Google, and your NEET year.
  • Purchases: the plans you bought, the amount, order and payment IDs from Razorpay, promo codes used, and when each plan ends.
  • Delivery: for printed book orders, your name, phone number and shipping address.
  • Learning activity: chapters you open, highlights you make on notes, and your test attempts, answers and scores.
  • Location: your country and state or region, worked out from your IP address when you log in. We do not collect precise location.
  • Device and notifications: if you turn on notifications, a push token for your browser or phone.
  • Referrals and coins: your referral code, who referred you, and your Nucleus coin history.
  • Things you send us: contact form messages, book reviews and any photos you attach to them.

3. Why we use it

  • To create your account, log you in and keep it secure.
  • To unlock what you paid for, show your subscriptions and their end dates, and deliver book orders.
  • To save your highlights, test history and progress.
  • To send service messages: login codes, order updates, notices about changes to our terms, and a reminder before your access ends.
  • To send updates about new chapters, tests and offers. You can opt out of these at any time by turning off notifications or writing to us; service messages are not affected.
  • To prevent fraud, account sharing and content leaks. Notes are watermarked with your registered email address.
  • To understand in aggregate how the service is used and improve it.

4. Who we share it with

We do not sell your data and we do not share it with advertisers. It is processed for us by these service providers, only for the purpose listed:

  • Supabase: database and file storage.
  • Vercel: website hosting.
  • Razorpay: payment processing.
  • Resend: sending email.
  • Upstash: rate limiting, to block abuse.
  • Google: Google sign-in, if you choose it.
  • Expo and Google Firebase: push notifications in the mobile app.
  • Courier partners: your name, phone number and address, to deliver printed books.

We may also disclose information when the law requires it.

5. Payments

Card, UPI and bank details are entered on Razorpay and are never seen or stored by us. We keep only the order ID, payment ID, amount and status.

6. Cookies and browser storage

We use a cookie to keep you logged in, and your browser's storage to remember things like your theme and your cart. We do not use advertising or analytics cookies.

7. How long we keep it

We keep your account data for as long as your account exists. When you ask us to delete your account, we delete your personal data within 30 days, except order and payment records, which we keep for as long as tax and accounting laws require.

8. Your rights and deleting your account

You can ask us for a copy of your data, to correct it, to delete it, or to withdraw a consent you gave. You can also name another person to exercise these rights for you.

  • In the app: Account → Delete account.
  • On the website: send a request from your registered email address through the Contact page.

Deleting your account ends your access to anything you have paid for, and cannot be undone.

9. Children and students under 18

Many of our students are under 18. If you are under 18, please use POV: NCERT only with the consent of a parent or guardian. We do not show targeted advertising to anyone, and we do not track students for advertising. A parent or guardian can contact us to review or delete a child's data.

10. Security

All connections use HTTPS, passwords are stored only as hashes, and access to student data is limited to those who need it to run the service. No system is perfectly secure, so please keep your login details private and tell us at once if you think your account has been misused.

11. Where your data is stored

Our service providers may store and process data on servers outside India. We use providers that protect it to the standard this policy describes.

12. Changes to this policy

We may update this policy. For a significant change we will tell you at least 15 days before it takes effect, by email or by a notice in the app and on the website. The date at the top of this page shows when it was last updated.