Legal
Privacy Policy
What we collect, why, and how to get rid of it. In plain English, because most of the people reading this are 16 or 17.
Last updated 9 October 2026
The short version. You sign in with your WhatsApp number, so your progress follows you to a new phone. The sign-in code comes on WhatsApp, so Meta, who run WhatsApp, see your number. Your plan stays on your phone until you sign in. Your quick check answers never leave it: only the level they give you is saved. There are no ads in the app, and we do not sell anything to anyone. If we send you news about BrainIt on WhatsApp, reply STOP and we send no more. This website (not the app) uses Google Analytics, which sets a cookie to count visits. If you want everything deleted, there is a page for that and it takes one request.
Who we are
BrainIt is an app for practising for NEET, made by BrainItPro Private Limited, a company registered in India (CIN U85491KL2026PTC106050) at Door No 68/1523, 5th Floor, CM Mathew Brothers Arcade, Eranhipalam, Kozhikode 673006, Kerala. For anything in this policy, write to hello@brainit.pro.
That company is the data fiduciary for everything described here, which under India's Digital Personal Data Protection Act means it is the one answerable for it.
What we collect
Four things, and nothing else.
What you do in the app
Which questions you answered, what you picked, whether it was right, and how long you took. This is the entire point of the app: it is what lets it tell you which chapters you are weak in. It is stored against your account.
What you tell us
Your name and your WhatsApp number, at the end of setup, so you can sign in. The name is only so the app can greet you. The number is how you sign in: we send a code to it on WhatsApp, and the same number on a new phone brings back the same account. It is an Indian (+91) number unless you pick another country in the number field. When you ask for a code, your number goes to Supabase, which makes the code, and to Meta, which delivers it. Meta gets your number and the code, and nothing of your practice.
If the code does not come, you can continue with Google instead, or with Apple on an iPhone or iPad. You can add them later in Profile too. Either one then shares the email address on that account with us. Apple can give a private relay address in place of your real one. Google also shares the name and profile photo on the account. The app does not use them.
Your plan: your class, your exam year, how many questions a day you want, and your level from the quick check. Until you sign in, these stay on your phone. You can also add a mobile number or an email address in Profile. Nothing else. We never ask for your school, your address, your parents' details or your marks.
We used to ask for a PIN code on the profile screen. Nothing in the app ever used it, so in September 2026 the field was removed and the stored values were deleted with the column they sat in. If you had entered one, it is gone.
What you send us on WhatsApp
If you message our WhatsApp number, we keep your message, your number and your WhatsApp name, so our team can read it and reply. Only our team can see it. Our team can also save a name for your number, the way a phone saves a contact. When we send you a sign-in code, a reply or news on WhatsApp, WhatsApp tells us whether it was delivered, read or not delivered, and we keep that with your number, even if you never wrote back.
A voice message, photo or file you send stays on WhatsApp's servers, and WhatsApp deletes it within 30 days. We keep its details, such as its type, its file name and any words you wrote with it. Our team can play or open it from WhatsApp for the first 7 days, and can download it if a browser cannot play it. We do not store the file on our own servers.
What the app sends about your device
Two things, and you can see exactly what they are.
Crash reports. If the app crashes, we get the phone model, the OS version and the line of code it died on. That is how a crash on your phone becomes a fix for everyone. It carries no name, no number and no advertising ID, and it only fires when something has actually gone wrong.
How the app gets used. Which screens you open, which buttons you tap, how long a screen holds your attention. It tells us that the Review button earns its place on the home screen and the CBT one does not. It carries the same account id your progress uses, never your name or your number, and it is never used for ads. It is on unless you turn it off in Profile.
What we do not record. Your screen. Some apps record video of everything you tap and read back; ours does not, and the setting that would turn it on is switched off in the code. If that ever changes for adults who have agreed to it, this page changes first and it will never apply to anyone under 18.
No location, no contacts, no photos, no advertising ID, no device fingerprint. On Android we explicitly strip the advertising ID permissions out of the app, so the ID your phone would hand out reads as zeros.
Messages from us on WhatsApp
We send you three kinds of message, and nothing else.
- Your sign-in code, when you ask for one.
- Replies, when you message us on WhatsApp.
- News about BrainIt, such as a launch or a new feature.
To stop the news, reply STOP to any news message, or email hello@brainit.pro. We send no more news to that number. Your sign-in code still comes when you ask for one.
What we do not do
- No ads in the app, and no advertising networks in it.
- No tracking you across other apps or websites, and no advertising profile built from your visit.
- No selling or renting your data. There is no version of this where we do.
- No cold calls. Giving us your number for a sign-in code does not let us call you or send you news.
- No analytics that follows you anywhere else. The app records which screens and buttons you use, to decide what to build next; it is never joined to an advertising profile and never leaves for an ad network.
Cookies on this website
This website uses Google Analytics to count visits and to see which pages people read. It sets a cookie and gives your browser a random id, so a return visit is not counted twice. It tells us pages and numbers, never who you are. The app reports separately, and what it reports is described above.
What it is for. One thing: making this better. Which guides get read, which get abandoned, whether the mock test is finished or quit halfway. That tells us what to fix and what to write next. It is not used to advertise to you, it is not sold or rented to anyone, and it is not shared with anybody outside Google, who process it for us and nothing else.
If you would rather not be counted, any browser can block cookies for this site, and Google publishes an opt-out add-on that works on every site using it.
If you are under 18
Most people using BrainIt are. India's Digital Personal Data Protection Act treats everyone under 18 as a child, and it sets two rules we follow:
- We never target ads at you. The law bans targeted advertising directed at children. There are no ads in BrainIt, and what the app records about how it gets used is for improving BrainIt only, never for an advertising profile. You can turn that off in Profile.
- A parent or guardian can ask for your data. They can request a copy or ask for it all to be deleted, using the same address below, and we will act on it.
If you are under 18, use BrainIt with your parent or guardian's knowledge.
Where it is stored, and who else sees it
On servers run by the companies below. Nobody else receives your data, and it is not shared with coaching institutes, schools or advertisers.
| Who | What they do | Where |
|---|---|---|
| Supabase | Stores your account, your practice history and your progress. Also the WhatsApp messages between you and us, whether each one we sent was delivered or read, and any name our team saved for your number. Makes and checks your sign-in code. | Servers in Asia Pacific |
| Meta (WhatsApp) | Carries WhatsApp messages between you and us: your sign-in code, what you send our number, our replies, and news about BrainIt. Keeps a voice message, photo or file you send for up to 30 days. Gets your number and those messages, and nothing of your practice. | Meta's servers |
| Google and Apple sign-in | Confirm it is you, if you continue with Google or Apple or add one in Profile. They share the email address on that account, and Google also shares the name and photo on it. They collect their own data under their own policies. | Per their terms |
| Sentry | Reports when the app fails or hits an error, so a crash on one phone becomes a fix for everyone. Carries the fault and the screen it happened on, tied to your account id. No name, number or screenshot. | Servers in the European Union |
| PostHog | Which screens and buttons get used, so we know what to build next. On unless you turn it off in Profile. Tied to your account id, never to your name or number, and never used for ads. Screen recording is not switched on. | Servers in the European Union |
| Apple App Store and Google Play | Deliver the app and handle downloads. They collect their own data under their own policies. | Per their terms |
We will hand over data if a law or a court requires it. If that ever happens and we are allowed to tell you, we will.
How long we keep it
Your practice history stays while your account exists, because it is what the app is for. Delete your account and it goes with it, within 30 days across backups. Afterwards we keep nothing about you except what a law makes us keep, and any WhatsApp messages you have not asked us to delete (below).
WhatsApp messages between us, and the record of what we sent your number, are kept by your number, not with your account. Deleting your account does not remove them. They stay until you ask us to delete them. Write to hello@brainit.pro from anywhere, or message the same number, and we will.
What you can ask for
- A copy of what we hold about you.
- A correction, if something is wrong.
- Deletion of everything. See deleting your account.
- To stop news on WhatsApp. Reply STOP to any news message, or email us.
- To turn off usage analytics. There is a switch in Profile.
- To withdraw consent for anything else. Here, that means deleting your account.
Email hello@brainit.pro and we will do it within 30 days.
Complaints
If we get this wrong, tell our grievance officer, Irshad P C, at hello@brainit.pro. If we have not sorted it out, you can complain to the Data Protection Board of India.
Changes
If we change what we collect, we will say so in the app before the change applies, not quietly edit this page.