Privacy Policy

NOXTIVE ("we", "us" or "our") operates the NOXTIVE Study Operating System (the "Service") available at noxtive.com and on the Google Play Store. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have. By using the Service you agree to this policy.

1. Information we collect

• Account information — when you sign in with Google we receive your name, email address and profile photo URL. We do not receive your Google password.
• Learning activity — focus sessions, tasks, chapter progress, test attempts, XP, streaks and leaderboard rank. This is required for the Service to function and to show you your own progress.
• Preferences — theme (dark/light), daily goal, sound and privacy settings you configure inside the app.
• Device information — a rotating device identifier, app version, operating system and screen size, used purely for diagnostics.
• Payment metadata — if you subscribe to NOXTIVE PRIME, our payment processor (Razorpay) returns a payment ID and subscription status. We do not store your card number, UPI ID or bank details.

2. How we use your data

We use your information only to:

• Provide and personalise the Service (dashboards, stats, ranks).
• Show public leaderboard entries — only if your privacy is set to public in Settings.
• Deliver in-app notifications about your tasks, tests and streaks.
• Prevent abuse, detect fraudulent access and secure our systems.
• Improve NOXTIVE via aggregated, non-identifiable usage patterns.

We do not sell, rent, or trade your personal data. We do not use your content to train third-party AI models.

3. Third-party services

• Google (Firebase Authentication) — for sign-in only. See Google's Privacy Policy.
• Razorpay — for processing NOXTIVE PRIME payments in India. See Razorpay's Privacy Policy.
• MongoDB Atlas — encrypted database storage for your account, tasks and stats.

These processors are contractually bound to protect your data and to use it only to provide their service to us.

4. Data security

All traffic to and from the Service is encrypted in transit via HTTPS/TLS 1.2+. Data at rest is encrypted by our infrastructure provider. Payment signatures are verified server-side using HMAC-SHA256 before any subscription is activated.

5. Data retention

We keep your account data for as long as your account is active. If you delete your account from Settings, we permanently delete your profile, tasks, sessions and test attempts within 30 days. Aggregated, non-identifiable analytics may be retained indefinitely.

6. Your rights

You have the right to:

• Access, correct or update your personal data at any time from Settings.
• Export a copy of your data by contacting us.
• Delete your account and all associated data.
• Set your leaderboard visibility to private so your profile does not appear publicly.
• Withdraw consent for optional notifications at any time.

7. Children's privacy

NOXTIVE is intended for NEET aspirants who are typically 15 years or older. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us data, please contact us and we will delete it.

8. International transfers

Data is primarily stored on servers located in Asia-Pacific. By using the Service you consent to your data being processed in these regions.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we update the "Last updated" date at the top and — for material changes — notify you in-app or via email.

10. Contact

Questions or requests about your data? Email us at noxtive.co@gmail.com. We respond within 7 business days.