Privacy Policy

This Privacy Policy explains how M B Patil Education Private Limited ("MBP MedGo", "we", "us", or "our"), operating the MBP MedGo website, student portal, student mobile app, parent mobile app, partner mobile app, admin console, and related services (together, the "Platform"), collects, uses, discloses and protects personal data of students, parents/guardians, institute partners, staff users, and visitors who use our NEET counselling, college prediction, test-series, and choice-filling services.

We are committed to handling your data in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian law. Our registered address is Shop No. 6 & 7, B Wing, UG Floor, Aditya Centeegra, Pune City, Shivajinagar, Pune, Haveli, Maharashtra, India, 411005.

We collect the following categories of personal data:

• Account and profile data: your name, mobile number (used to log in), email address, NEET AIR rank, score, category, state, quota preferences, target course, and account identifiers.
• Counselling activity data: the colleges, quotas, categories and ranks you search or compare on our predictor and closing-rank tools, and any choice lists you build and save.
• Learning and test data: test attempts, answers, scores, leaderboard entries, analytics, weak-topic insights, test history, and related performance information.
• Payment and package data: the package you purchase, amount paid, GST charged, and payment status. We do not store full card, UPI, wallet, or bank details ourselves; payments are processed through our licensed payment gateway partner, currently Easebuzz.
• Support and communication data: support tickets you raise, and your conversations with our AI Counsellor feature (including the messages you type and the profile details you share in that chat).
• Parent app data: parent mobile number, linked child invite code, linked student profile details, child test history, analytics, and support tickets visible to the linked parent/guardian account.
• Referral and partner data: if you use our student referral program, we collect the UPI ID you provide to receive payouts. If you represent a partner institute, we collect your institute name, contact name, email, phone number, referral code, commission, withdrawal, and referred student status information.
• Technical and usage data: pages visited, referral/UTM campaign parameters, device/browser information, push notification tokens, device/session records, crash or diagnostic logs, and login session identifiers (cookies) needed to keep you signed in.

• To create and manage your account, verify your identity at login, and provide access to the predictor, closing-rank, choice-filling and other counselling tools.
• To link parent/guardian accounts to student accounts when a student shares an invite code.
• To process payments for packages, issue invoices, and provide customer support.
• To generate AI Counsellor responses based on your stated rank, category, state and questions.
• To provide test series, practice analytics, saved choices, support ticket history, and app notifications.
• To calculate and pay out student referral rewards and institute partner commissions.
• To send you service updates, counselling deadline reminders, and (where you've agreed) marketing communications.
• To detect, investigate and prevent fraud, abuse, or violations of our Terms & Conditions.
• To improve our tools by analysing aggregated, de-identified usage trends.

We do not sell your personal data. We share it only with:

• AI processing partners: when you use the AI Counsellor, your message and the profile details you've shared in that conversation are sent to our third-party AI model provider (currently OpenRouter, which routes requests to models such as Anthropic's Claude) solely to generate a reply. These providers may process data on servers outside India.
• Payment processors: once a payment gateway is used, payment details you enter are processed directly by that licensed gateway, currently Easebuzz, not stored on our servers.
• SMS/WhatsApp providers: to send OTPs and counselling alerts.
• Push notification providers: including Expo, APNs, and Firebase/FCM, to deliver app notifications where you have enabled them.
• Institute partners: if you sign up using a partner institute's referral code, that institute can see your name, mobile number, state and purchase status, so they can track the students they referred.
• Parents/guardians: if you link a parent account using an invite code, that linked parent/guardian can view relevant student profile, test history, analytics, and support information.
• Law enforcement or regulators, where required by law or a valid legal request.
• Service providers who host our infrastructure (e.g. our database and hosting provider), bound by confidentiality obligations.

We use strictly necessary cookies to keep you signed in to the student portal, admin console, or partner dashboard (these are httpOnly session cookies — they cannot be read by other websites or scripts). We do not currently use third-party advertising tracking cookies on the Platform. If we add analytics or advertising cookies in the future, we will update this section and provide a cookie consent mechanism where required by law.

Our mobile apps may store secure session tokens on your device using platform secure storage, and may use push notification tokens to send service updates and counselling reminders. You can disable notifications in your device settings.

Our mobile apps are distributed through Apple App Store, Google Play, Expo/EAS builds, or similar channels. Store operators may process their own account, device, purchase, crash, install, review, refund, and fraud-prevention data under their own privacy policies. Where a purchase is made through Apple or Google, those stores may share limited transaction or entitlement information with us so that we can activate access and provide support.

The MBP MedGo student app currently requests internet access and, where supported by the device, notification permission. Push notifications are optional and can be turned off in device settings. We do not require location, contacts, camera, microphone, photo library, advertising tracking, or cross-app tracking permissions for core counselling access unless a future feature clearly asks for that permission.

Our Apple privacy nutrition labels and Google Play Data Safety form should reflect this policy, including account/profile data, app activity, diagnostics, payment/entitlement records, support content, push tokens, and optional referral/partner payout data.

We retain your account and counselling activity data for as long as your account is active, and for a reasonable period afterwards to comply with tax, accounting and legal obligations (typically up to 7 years for payment records, in line with Indian tax law). You may request deletion of your account at any time as described in Section 8.

OTP codes are short-lived and expire after verification or after their validity period. Support tickets, invoices, transaction records, audit logs, and records needed for fraud prevention, dispute handling, tax, accounting, or legal compliance may be retained even after account deletion where required or permitted by law.

We use industry-standard safeguards, including password hashing, encrypted session tokens, and access controls restricting which of our staff can view your data, to protect your information from unauthorised access, alteration or disclosure. We also use server-side OTP verification and payment confirmation checks before enabling paid access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Under the DPDP Act and applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Withdraw consent for non-essential processing (e.g. marketing communications) at any time.
• Request erasure of your account and associated data, subject to our legal retention obligations.
• Request that we stop sending non-essential notifications or marketing communications.
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
• Lodge a grievance with our Grievance Officer (Section 10), and subsequently with the Data Protection Board of India if unresolved.

To exercise any of these rights, contact us using the details in Section 10. We will respond within the timelines required by law.

To request account or data deletion, email the Grievance Officer or contact support with your registered mobile number and the account type (student, parent, or partner). We may verify your identity before processing the request.

For App Store and Google Play compliance, student app users can initiate account deletion inside the app from the profile/account area, and anyone may use the external web instructions at /account-deletion. Deletion removes the account and associated personal data that we are not legally required to retain. Records needed for tax, payment disputes, fraud prevention, security, legal compliance, or unresolved support issues may be retained for the period required or permitted by law.

Our services are intended for NEET aspirants and their families. We understand that some students using this Platform may be minors (under 18). Where required by law, we rely on the student or their parent/guardian to provide accurate information at signup, and parents/guardians may contact us to review, correct or delete a minor's data.

In accordance with the DPDP Act and the Information Technology Act, 2000, the contact details of our Grievance Officer are:

Mr Prem Chandrakant Jadhav
Email: corporatecommunications@mbpatileducation.com
Phone: +91 89560 38591

For any other privacy questions, you can also reach us at our general support contact listed on our Contact Us page.

We may update this Privacy Policy from time to time. We will post the revised version here with an updated effective date, and for significant changes, we will notify you via email or an in-app notice.

This Privacy Policy is governed by the laws of India. Any disputes relating to this policy will be subject to the exclusive jurisdiction of the courts in Pune.