Privacy Policy

Effective date: 9 July 2026

Grit (getgrit.in) is operated by Gritmindspace Private Limited(CIN: US8549KA2026PTC221759), Bengaluru, Karnataka, India ("Grit", "we", "us").

Grit is a NEET preparation platform used mostly by students aged 16–19, often with accounts arranged and paid for by parents. Because many of our users are minors, we hold ourselves to a conservative standard with data. This policy explains, in plain language, what we collect, why, who touches it, and what you can ask of us.

The short version: we collect what the product needs to work, we never sell your data, we never show ads, and we never use a child's data for advertising or profiling beyond study analytics you can see yourself.

1. If you are under 18

If you are under 18, you may use Grit only with the knowledge and consent of a parent or legal guardian. By creating an account for a minor, or by permitting a minor to use an account, the parent or guardian consents to the processing of the student's data as described in this policy.

Parents and guardians of a minor user may at any time ask us to show, correct, or delete the student's data, or close the account, by writing to hello@getgrit.in from the account email or with proof of guardianship.

We do not use minors' data for advertising, behavioural targeting, or any purpose other than providing and improving the study experience described below.

2. What we collect

Account information. Name, email address, password (stored only as a secure hash — we cannot see it), and the study profile you give us during onboarding: class (11/12/Dropper), target exam year, schedule preferences, and similar.

Study data. This is the heart of Grit: questions attempted, answers, scores, time per question, mock test results, chapter progress, streaks, study plans, and check-in responses. This data exists to power your diagnostics, adaptive timetable, and progress views.

Payment information. Payments are processed by Razorpay. We never see or store your card number, UPI PIN, or banking credentials. We store only what we need to manage your plan: the payment ID, amount, plan purchased, and dates.

Support messages. If you write to us or use the in-app support widget, we keep the conversation so we can help you and improve.

Technical data. Standard logs (IP address, device/browser type, pages visited, errors) collected by our hosting infrastructure for security and reliability. We use cookies and browser storage only for keeping you signed in, remembering preferences like light/dark theme, and similar functional purposes. We do not use third-party advertising trackers.

3. How we use your data

• To run the product: generate your diagnostics, adaptive study plan, mock analytics, streaks, and progress views.
• AI features: parts of Grit (such as study-plan narratives and support answers) are generated by AI. To do this, relevant slices of your study data (for example, weekly performance summaries) are processed through our AI provider, Anthropic. Under our API agreement, this data is not used to train AI models.
• Payments and plan management: activating plans, processing refunds, meeting tax obligations.
• Communication: transactional emails (account confirmation, payment receipts, weekly summaries you opt into). We do not send third-party marketing.
• Safety and improvement: debugging, preventing fraud and abuse, and improving Grit using aggregated, de-identified usage patterns.

4. What we never do

• We never sell or rent your personal data to anyone.
• We show no ads and share no data with advertisers or ad networks.
• We never use a minor's data for behavioural advertising or profiling unrelated to their studies.
• We never post your scores or identity publicly. Comparative features (such as rankings) show you your position; other users do not see your name unless a future feature explicitly asks for your opt-in.

5. Who processes your data on our behalf

We use a small set of well-known service providers, each only for its function:

• Supabase — database, authentication, and file storage (servers located in Tokyo, Japan)
• Vercel — website hosting and serverless infrastructure
• Razorpay — payment processing (India)
• Anthropic — AI processing for study narratives and support (API data not used for model training)
• Resend — transactional email delivery
• Google — sign-in with Google, if you choose to use it

Because some of these providers run infrastructure outside India, your data may be stored or processed outside India (currently, primarily Japan for our database). We choose providers with strong security practices and contractual data-protection commitments, and we remain responsible to you for their handling of your data.

6. How long we keep it

• Account and study data: for as long as your account is active. If you ask us to delete your account, we delete or irreversibly anonymise your personal data within 30 days, except where the law requires longer retention.
• Payment records: retained as required by Indian tax and company law, even after account deletion.
• Support conversations: up to 2 years, for quality and dispute resolution.

7. Your rights

Whether you are a student or a parent acting for one, you can ask us to:

• See the personal data we hold about you;
• Correct anything inaccurate;
• Delete your account and personal data (subject to the legal retention above);
• Withdraw consent for optional processing (for example, opting out of weekly summary emails);
• Complain — first to us, and if unsatisfied, to the relevant data protection authority in India.

Write to hello@getgrit.in from your registered email. We aim to acknowledge within 2 business days and resolve within 15.

8. Security

Data is encrypted in transit (HTTPS everywhere). Database access is protected by row-level security so each account can only read its own records; administrative access is restricted and credentialed. Payment credentials never touch our servers. No system is perfectly secure, but if we ever become aware of a breach affecting your personal data, we will inform affected users and authorities as required by law.

9. Changes to this policy

We may update this policy as Grit and the law evolve. Material changes will be announced on this page with a new effective date, and — for changes affecting how we process minors' data — by email to registered accounts.

10. Grievance and contact

Grievance Officer: Ambika Prasanna
Gritmindspace Private Limited
Email: hello@getgrit.in

This policy is governed by the laws of India, and courts at Bengaluru, Karnataka shall have exclusive jurisdiction over any dispute arising from it.