What we collect.
And what leaves your device.

The Data Fiduciary is Veranox Systems Private Limited (CIN U62099TN2026PTC195728), based in Chennai, Tamil Nadu, India. Questions, corrections, deletions and grievances go to our Grievance Officer in section 12.

• ·Account — your email address and a password (stored only as a secure hash by our authentication provider). Used to sign you in.
• ·Your first name and exam — whatever you type at setup, used to address you and to scope your syllabus. A nickname is fine.
• ·Practice activity — which questions you attempted, whether you were right, how sure you said you were, and how long you took. This is the evidence your readiness and capability scores are computed from.
• ·Questions you type into the AI features — see section 05, which explains where they go.
• ·The survey and the waitlist, only if you choose them — your answers to a few questions about how you prepare (including a rough band for what you spend on study help today), and, if you join the waitlist, your email and the words you agreed to. Used to decide what we build next and to tell you when the full OrbitOne opens. Both are optional, both are erased with your account, and you can leave the waitlist in the app at any time.

We do not run advertising trackers and we do not build behavioural profiles. We do not ask for your phone number, address, school, date of birth, or any government identifier.

Your practice history — every attempt, score and schedule — is stored in your own browser on your own device first. Without an account, nothing leaves it: clearing your browser storage erases it, and we cannot recover it, because we never had it.

If you sign in, your recorded answers sync to your account in our database (Supabase, Mumbai region) so that your progress follows you to another device — and so that a parent you choose to link can be shown a report. That is the only reason the data leaves your device, and you can erase it from Settings at any time.

Solely to run the service: to sign you in, to work out where you stand, to schedule what you should revise, to generate answers you asked for, and to show a progress summary to a parent or guardian you have linked. We do not sell your data. We do not show third-party advertising. We do not repurpose your data for anything you did not ask for.

When you use the Quick answer or Tutor features, the text of your question is sent to third-party AI providers to be processed — currently Groq and Google (Gemini). Their servers are outside India, so this is a cross-border transfer of whatever you typed into that box.

• ·We send the question text and nothing else — not your name, not your email, not your practice history.
• ·Those providers process it under their own terms and may retain it under their own policies. We do not control their retention.
• ·Practice and the 20-question check do NOT use these providers. They are graded entirely on your own device, so nothing you do there leaves it.

Most JEE aspirants are minors, and the Digital Personal Data Protection Act, 2023 treats a child’s data differently. If you are under 18, use OrbitOne with the consent of a parent or guardian. A parent or guardian may contact us at the address in section 12 to see, correct or delete their child’s data.

We do not use children’s data for behavioural monitoring or targeted advertising, and we do not run advertising on this product at all. Our detailed position on the Act is on the DPDP Act 2023 page.

If you link a parent or guardian, they see your readiness band and trend, how consistently you have been working, which chapters and capabilities are weak, and what the app has scheduled to fix them.

They do not see the individual questions you asked for help with, your wrong answers one by one, or any tutor conversation. That boundary is deliberate: a student who believes every admission of confusion is being read stops asking for help.

If your school or coaching institute gives you an invite link and you choose to join, its staff see the same kind of progress and analysis: your readiness, your chapters and skills, and how often you practise. The same boundary holds, and it is enforced in the database: they never see what you type to the AI Tutor, your answers word for word, or who your parents are. Your institute can give you a one-time password reset link, and every such link is recorded. You can leave from Settings at any time; the institute loses access at once, and your work stays with you.

• ·Supabase — authentication and, once you sign in, your account-backed progress.
• ·Vercel and Cloudflare — hosting and delivery of this site. They process standard request logs (including IP address) transiently to serve and secure the site.
• ·Groq and Google — AI processing, as set out in section 05.
• ·Razorpay — if and when payments go live. We never see or store your card or UPI details.

Practice data lives on your device until you clear it. Account data is kept while your account is in use, and erased automatically once the account has had no activity for 24 months. Erase it sooner from Settings, or ask us to, and the personal data goes with it.

If OrbitOne closes or Veranox Systems Private Limited is sold, your data is erased, not handed over, unless you agree again.

Passwords are hashed by our authentication provider and never visible to us. Credit and account rules are enforced on the server, not in your browser. The site is served over HTTPS with a strict content-security policy. No system is perfect, and we will tell you plainly if something material happens to your data.

Under the DPDP Act you may ask us to give you a copy of your personal data, correct it, delete it, or withdraw the consent you gave — and withdrawing consent must be as easy as giving it. Email the address below and we will action it. If you are under 18, your parent or guardian may exercise these rights for you.

Grievance Officer: Uday Vamsidhar Volety, Veranox Systems Private Limited, Chennai, Tamil Nadu, India.
Email: uday@veranox.in. We aim to respond within 3 working days.