Privacy Policy

Last updated: May 30, 2025

1. Who We Are

Peerzy ("we", "our", or "us") is a study-partner matching platform built for JEE and NEET aspirants in India, operated by Hitesh Singh Rao. Our website is available at peerzy.in.

This Privacy Policy explains what information we collect when you use Peerzy, how we use it, and your rights regarding that information. By using Peerzy, you agree to the practices described here.

2. Information We Collect

2.1 Information from Google Sign-In

We use Google Sign-In (via Firebase Authentication) for account creation and login. When you sign in with Google, we receive:

  • Your full name
  • Your Google account email address
  • Your Google profile picture URL
  • A unique Google user ID (Firebase UID)

We do not receive your Google password, phone number, or any other Google account information beyond what is listed above.

2.2 Profile Information You Provide

During profile setup you voluntarily provide:

  • Gender
  • Class / year (e.g. Class 11, Class 12, Dropper)
  • Target exam (JEE / NEET / both)
  • City of residence
  • Subjects you are strong in and weak in
  • Any profile bio or additional details you choose to add

2.3 Chat Messages

When you chat with a study partner on Peerzy, the content of your messages is stored on our servers so that conversation history is preserved. We do not sell or share chat messages with third parties.

2.4 Usage and Technical Data

We automatically collect certain technical data when you use Peerzy:

  • Browser type and operating system (for session management)
  • IP address (for security and abuse prevention)
  • Pages visited and actions taken within the app (via PostHog analytics)
  • Session tokens stored in secure HTTP-only cookies

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your Peerzy account
  • Match you with compatible JEE / NEET study partners based on your preferences
  • Enable real-time chat between matched study partners
  • Show you connection requests and manage accepted connections
  • Improve the platform and diagnose technical issues
  • Prevent abuse, spam, and fraudulent activity
  • Send important service-related communications (if applicable)

We do not use your data for targeted advertising and we do not sell your personal information to any third party.

4. How We Share Your Information

4.1 With Other Peerzy Users

Your profile information (name, photo, class, target exam, city, subjects) is visible to other logged-in Peerzy users for the purpose of finding study partners. Your email address and Google UID are never shown to other users.

4.2 With Service Providers

We use the following third-party services to operate Peerzy:

  • Google Firebase — authentication, and infrastructure. Governed by Firebase Privacy Policy.
  • Railway — cloud hosting for our servers and database. Governed by Railway Privacy Policy.
  • PostHog — product analytics (page views, feature usage). No personally identifiable information is intentionally sent to PostHog.
  • Cloudinary — image hosting for profile pictures.

These providers only receive the data necessary to perform their specific function and are contractually prohibited from using your data for their own purposes.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect the rights, property, or safety of Peerzy, our users, or the public.

5. Data Retention

We retain your account and profile data for as long as your account is active. Chat messages are retained to preserve conversation history for matched users.

If you request account deletion (by contacting us at the email below), we will delete your profile, connections, and chat history within 30 days, except where retention is required by law.

6. Cookies and Session Tokens

Peerzy uses HTTP-only, secure cookies to maintain your login session. These cookies are:

  • peerzy_access — a short-lived access token (15 minutes)
  • peerzy_refresh — a long-lived refresh token (1 year) for keeping you logged in
  • peerzy_device — a device identifier for session management

These cookies are never shared with third parties and are only accessible by our servers (HTTP-only flag prevents JavaScript access).

7. Security

We implement industry-standard security measures including:

  • HTTPS encryption for all data in transit
  • HTTP-only, Secure, SameSite cookies
  • Firebase ID token verification on every login
  • JWT-based session tokens with short expiry
  • One active session per device policy

No method of data transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Children's Privacy

Peerzy is intended for students preparing for JEE and NEET examinations, who are typically 15 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us immediately and we will delete the account.

9. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — update incorrect profile information directly within the app, or contact us for other corrections
  • Deletion — request that we delete your account and associated data
  • Portability — request your data in a structured, machine-readable format

To exercise any of these rights, email us at support@peerzy.in.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Peerzy after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact:

Hitesh Singh Rao

Founder, Peerzy

Email: HiteshSinghRao2403@gmail.com

Website: peerzy.in