NEXTOverview & Platform Commitment
Welcome to NextEdu ("we", "our", or "us"). We are committed to safeguarding the privacy and personal data of our learners, educators, and visitors. This Privacy Policy details the types of personal and academic information collected through the NextEdu web platform, PWA application, and APIs, how that data is secured, and your legal rights regarding your information.
By accessing NextEdu, registering an account, or purchasing an exam pack or subscription, you acknowledge and agree to the data collection and processing practices described herein.
Information We Collect
We collect only the minimum information necessary to deliver a high-performance, personalized educational experience:
Account Identification
Full name, verified mobile phone number, email address, username, and encrypted password hash (Argon2id / Bcrypt).
Academic & Practice Records
Exam categories selected, quiz attempts, mock test scores, time spent per question, bookmarked questions, rank points, and duel statistics.
Device & Session Telemetry
Anonymized client IP address, browser type, device category (Mobile, Tablet, Desktop), active session identifiers, and optional geolocation for proctoring.
User-Generated Study Material
Questions submitted to Ask AI, uploaded handwritten notes, or images submitted for OCR doubt resolution.
How We Use Your Data
Your data is processed strictly for educational delivery, security enforcement, and platform integrity:
- Account Provisioning: To provision your user account, verify authentication, and maintain secure persistent logins across devices.
- Performance Analytics: To compute accurate leaderboards, calculate merit ranks, and reward performance streak bonuses.
- Session Integrity: To prevent account sharing, enforce single-session concurrency, and protect exam question bank integrity.
- AI Revision Strategies: To generate comprehensive student performance analytics and AI-powered revision strategies.
- Transactional Alerts: To deliver transactional notifications (e.g., OTP codes, plan purchase confirmations, account security alerts) via Telegram or SMS.
Zero Commercial Data Monetization Guarantee
NextEdu does NOT sell, rent, monetize, or broker your personal or academic records to third-party commercial advertising networks. Your learning data is yours alone.
AI Tutor & Multimodal Image Processing
NextEdu integrates generative AI capabilities (including Ask AI Tutor, Doubt Solver, and Handwritten OCR). When using these tools:
Multimodal AI Processing Protocols
AI queries are handled through enterprise-grade endpoints designed for academic precision:
- In-Memory Processing: Prompts, math formulas, and study questions are processed in real-time to generate academic explanations and step-by-step solutions.
- Zero Public Model Training: Uploaded handwritten images for OCR analysis are processed in volatile memory and validated against safe content filters. Images are not retained for public model fine-tuning.
- Fair Usage Limits: AI usage is governed by daily prompt limits and credit allowances to ensure fair server allocation for all active students.
Payments & Financial Safety
Financial integrity and absolute transaction isolation are fundamental to NextEdu:
- PCI-DSS Certified Gateways: Online transactions are handled through certified PCI-DSS Level 1 compliant gateways (including Razorpay and approved UPI providers).
- No Stored Financial Credentials: NextEdu servers NEVER store credit card numbers, debit card CVVs, UPI MPINs, or net banking passwords.
- Atomic Double-Entry Ledger: All wallet top-ups, referral credits, and subscription deductions are recorded in a double-entry ledger with atomic row locking to prevent overdrafts and duplicate debits.
- Cryptographic Webhook Verification: Inbound payment webhooks require strict cryptographic HMAC-SHA256 signature verification before any wallet balance is credited.
Security & Anti-Cheating Telemetry
To ensure that competitive mock tests, 1v1 PvP quiz duels, and state merit ranks remain completely trustworthy:
Concurrency Control
An active session is bound to a single authorized device. Logging in on a new device gracefully terminates prior sessions to prevent credential sharing.
Fullscreen & Tab Detection
During proctored mock examinations, client-side event listeners track fullscreen exits and tab switching. Excessive violations are flagged automatically.
Rate Limiting & Lockout
Automated brute-force attacks on login and OTP verification endpoints trigger progressive IP-based rate limiting and temporary lockout periods.
Cookies & Client Storage Matrix
NextEdu uses client storage technologies strictly for necessary session, theme rendering, and caching operations:
Data Retention & Account Deletion
Your data is retained only for as long as your account is active and in good standing. You retain full control over your personal data:
- Self-Serve Account Deletion: You may request permanent deletion of your account and associated personal data at any time by submitting a ticket via the student Support Desk.
- Statutory Financial Retention: Financial transaction ledgers and purchase invoices must be retained for the minimum statutory period required by Indian accounting and taxation regulations.
- Anti-Abuse Hash Preservation: Accounts suspended for cheating or malicious activity will have identifying one-way hashes preserved to prevent re-registration and protect platform security.
Grievance Redressal & Official Inquiries
If you have questions, concerns, or statutory requests regarding this Privacy Policy or your personal information under the DPDP Act, please reach our Data Grievance Officer: