Privacy Policy
1. Who we are
Neuro Ninjas ("we", "us", "the app") is a free MCQ quiz platform for CBSE students in Grades 8–12 (and NCERT-aligned NMMS / JEE / NEET / CUET exam practice), available as a website and as an Android app that opens the same website. This policy explains what information we collect when you use either, why, and what control you have over it.
2. Information we collect
Playing without an account
You can take most quizzes without signing up. If you do, we only ask for a display name to show on the scoreboard at the end — it isn't linked to any account and can be anything you like, including a nickname.
Student accounts
Creating a student account to save your progress collects:
| Field | Required? | Notes |
|---|---|---|
| Username | Yes | Chosen by you — doesn't need to be your real name. |
| PIN (4 or 6 digits) | Yes | Stored only as a one-way bcrypt hash — we never store or can see your actual PIN. |
| Email address | Optional | Only used for account recovery (a reset link), never for marketing. |
| Security question & answer | Optional | Alternative recovery method. The answer is stored hashed, not in plain text. |
Teacher accounts
Teacher registration (currently subject to manual admin approval) collects your name, email, subject, grade level, and optionally your school and location, plus a password (bcrypt-hashed, never stored in plain text).
Quiz & test activity
If you're logged in, we save your quiz and mock-test attempts — which paper, your score, and which questions you got right or wrong — so features like "My Analytics" can show your progress over time. Guest (not logged in) play is recorded only anonymously against the display name you typed in, with no link back to any account.
Multiplayer
Live multiplayer rooms exist only in server memory while the game is running — room codes, player names, and avatars used in a match aren't written to a database, except that your final score is saved the same way a solo quiz score is.
Feedback & question reports
If you submit a testimonial/feedback or flag a question as wrong, we store the name and message you provide (and profession, for testimonials) so we can review and, if you allow it, display it on the site.
Automatically collected
We keep a lightweight, hashed record of page visits (not your raw IP address) to understand overall traffic. Standard web server logs (IP address, browser type, timestamps) are generated by our hosting provider for operating the service and are not linked to your account.
3. How we use it
- To operate your account: logging you in, remembering your quiz history, letting you recover a forgotten PIN/password.
- To run multiplayer games and leaderboards.
- To improve the question bank: fixing questions flagged as wrong, reviewing feedback.
- To send account-related emails only: password reset links and teacher-approval notifications. We do not send marketing email.
- To keep the service secure: rate-limiting login attempts, detecting abuse.
We do not use your data for advertising, and we don't run ad networks or ad-tracking SDKs on the site or in the app.
5. Third-party services
We rely on a small number of infrastructure providers to run Neuro Ninjas:
- Render — hosts our web server and database.
- Resend — sends transactional emails on our behalf (password-reset links, teacher-approval notices). Resend processes the recipient email address and message content solely to deliver that email.
- Anthropic (Claude) — used server-side to help generate practice questions from NCERT textbook content. It does not process your personal account data or quiz answers.
We don't share your data with data brokers, ad networks, or any other party for their own marketing purposes.
7. Retention & deletion
We keep account and quiz-history data for as long as your account exists, so your progress stays available to you. Both student and teacher accounts have a Delete Account button (Account screen → Delete Account) that immediately and permanently deletes your account and every quiz/mock-test record tied to it — there's no waiting period and no manual review. You'll be asked to re-enter your PIN or password first, since this can't be undone. If you'd rather not use the in-app option, you can also email us at the address below and we'll process the deletion manually. Anonymous guest scoreboard entries aren't tied to an identity we can look up or delete on request, since nothing links them back to you.
8. Children's privacy
Neuro Ninjas is built for students roughly in Grades 8–12 (typically ages 13 and up). We don't knowingly design the product for children under 13, and we don't ask for information beyond what's listed in Section 2. If you believe a child under 13 has created an account or shared personal information with us, please contact us and we'll take appropriate action, including deleting the account.
Parents/guardians and teachers using this with students in that age range are welcome to contact us with any questions about what a student's account contains.
9. Security
- PINs and passwords are never stored in plain text — only bcrypt hashes.
- Session tokens are cryptographically random, stored server-side, and sent only via
HttpOnlycookies. - Login and PIN-recovery endpoints are rate-limited to resist brute-forcing.
No system is 100% secure, but we design with these safeguards as a baseline and keep improving them.
10. Your rights & choices
- Access/correction: most of your data (username, email, quiz history) is visible directly in your account on the site.
- Deletion: use the Delete Account button on your Account screen, or email us to request deletion (see Section 7).
- Recovery contact: you can add or remove the optional recovery email on your account at any time.
Depending on where you live, you may have additional rights under applicable law (for example, India's Digital Personal Data Protection Act, 2023, or the EU/UK GDPR for visitors from those regions). Contact us and we'll do our best to help, though we'd note this policy is a good-faith description of our practices and not a substitute for formal legal advice.
11. Changes to this policy
If we make material changes to this policy, we'll update the "Last updated" date at the top of this page. We encourage checking back occasionally, especially before providing new personal information.
12. Contact us
Questions, feedback, or a data request (access/correction/deletion)? Email us at itzsskai@gmail.com.