Privacy Policy

Last updated: May 27, 2026

1. Introduction

At nonobie, we take your privacy seriously. This policy explains what information we collect, why we collect it, how we use it, and what rights you have over your data. We've tried to write this in plain English — no legal jargon, no fine print that needs a lawyer to decode.

By using nonobie, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account information — Name and email address when you sign up.
• Profile information — Display name, avatar, and bio (optional).
• Payment information — We do NOT store your credit card, UPI, or bank details. Payments are processed entirely by Razorpay, our payment processor. We only store transaction IDs and purchase records.
• Learning data — Chapters you complete, time spent on content, quiz answers, notes you create, and bookmarks you save.
• Communications — Emails you send us, support requests, and feedback.

2.2 Information Collected Automatically

• Usage data — Pages visited, time on page, referral sources, and features used. This helps us understand what content is most helpful.
• Device data — Browser type, operating system, screen size, and device type. This helps us ensure the platform works well for everyone.
• Cookies — See Section 5 for details.

3. How We Use Your Data

We use your data for the following purposes and nothing else:

• To provide the service — Track your progress, sync across devices, grant access to purchased modules, and personalize your learning experience.
• To communicate with you — Send transaction receipts, password reset emails, and important account notifications. We may also send product updates and new module announcements (you can opt out anytime).
• To improve the platform — Analyze usage patterns to understand which chapters need improvement, which features are used most, and where learners struggle.
• To prevent abuse — Detect and prevent fraudulent transactions, account sharing, and scraping.

We never sell your personal data to third parties. We never use your data for advertising purposes. Your learning progress is your business, not an ad network's.

4. Third-Party Services

We rely on the following services to operate nonobie. Each has its own privacy policy:

• Supabase — Authentication (email/password, OAuth) and PostgreSQL database. Your account credentials and learning data are stored on Supabase servers.
• Razorpay — Payment processing for pro module purchases. Razorpay receives your payment details directly; we never see or store them.
• Google Gemini (AI) — Powers our Code Explainer and Chapter Tutor features. Code you paste into the Explainer and questions you ask the Tutor are sent to Google's API for processing. Google does not use this data to train their models.
• Resend — Sends transactional emails (receipts, password resets, notifications). We share your email address with Resend solely for email delivery.
• Vercel — Hosts the nonobie web application. Vercel may collect anonymized performance and analytics data.

5. Cookies & Tracking

We use the following types of cookies:

• Essential cookies — Required for authentication, session management, and security. These cannot be disabled.
• Functional cookies — Remember your preferences (theme, font size) and learning state (last visited chapter, progress).
• Analytics cookies — Via Vercel Analytics, we collect anonymized usage data to understand how the platform is used. No personally identifiable information is collected through analytics.

You can reject non-essential cookies through our cookie consent banner. You can also configure your browser to block cookies, though this may affect platform functionality.

6. AI Data Handling

When you use the Code Explainer or Chapter Tutor, the code you paste and questions you ask are sent to Google's Gemini API for processing. Here's what you should know:

• Google does not use your prompts or code to train or improve their models.
• We do not store your AI conversation history beyond your current session.
• We do not use your code or questions for any purpose other than generating a response.

7. Data Retention

• Account data — Retained until you delete your account. You can request deletion at any time.
• Learning progress — Retained with your account. Deleted when your account is deleted.
• Payment records — Retained for 5 years as required by Indian tax law (GST compliance).
• Anonymized analytics — May be retained indefinitely in aggregate form (cannot be linked back to you).

8. Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit (TLS/HTTPS) and at rest.
• Authentication uses Supabase's secure token-based system with Row Level Security (RLS) on all database tables.
• Payment processing is handled entirely by Razorpay — we never handle raw payment credentials.
• We regularly review our security posture and dependencies for vulnerabilities.

While we take security seriously, no online service can guarantee 100% security. If you discover a vulnerability, please email us immediately at hey@nonobie.com.

9. Your Rights

Under Indian data protection laws and our own principles, you have the right to:

• Access — Request a copy of all personal data we hold about you.
• Correction — Update or correct inaccurate information.
• Deletion — Request deletion of your account and associated data.
• Portability — Receive your data in a machine-readable format.
• Withdraw consent — Opt out of non-essential data processing at any time.

To exercise any of these rights, email us at hey@nonobie.com. We will respond within 30 days as required by law.

10. Children's Privacy

nonobie is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

11. International Data Transfers

nonobie is operated from India, but our service providers (Supabase, Vercel, Google, Resend) operate globally. Your data may be processed on servers located outside your country of residence. We ensure that all third-party providers comply with applicable data protection standards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or a notice on the platform. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact

For privacy-related inquiries, data requests, or security concerns: hey@nonobie.com