Privacy Policy

1. Who we are and what this policy covers

Changenix Technologies Pvt Limited (“Changenix”, “we”, “us”) is the company responsible for this corporate website at https://changenix.com and for our products, including Noxuva at https://app.noxuva.in.

This policy covers our company-level practices and summarises how Noxuva handles information. The Noxuva Privacy Policy contains the detailed product-specific disclosure and controls if it differs from this policy on a Noxuva-specific matter.

Registered and correspondence address: D.No. 4-2155/B, Krishna Nagar, Vellore Road, Chittoor, 517002, India. Privacy contact: hello@changenix.com.

2. The Changenix corporate website

The current Changenix website is a static informational site. It does not create user accounts, accept payments, run a contact form, set advertising cookies, or include analytics or behavioural tracking.

Information may still reach us in two limited ways:

• Email you choose to send. If you email us, we receive your email address, message, and any information you choose to include. We use it to respond and, where necessary, maintain a business or legal record of the communication.
• Standard hosting logs. The infrastructure that serves this site may process an IP address, request time, requested page, referrer, and browser or user-agent details. These logs support delivery, security, abuse prevention, and troubleshooting.

3. Information Noxuva keeps on your device

Noxuva keeps some counselling information on the user’s device. Browser or app storage may contain:

• An optional display name and email address, rank, category, quota and eligibility answers, preferred branches, and saved colleges.
• Saved choices, compare selections, active counselling board, and notice or notification-preference state.
• A randomly generated device identifier and session token used to manage one active paid Access session.
• Short-lived interface values such as scroll position and cache state.

When a user is signed out, their profile and choice list remain on that device. Clearing the site or app data removes these local values. Whether uninstalling removes them depends on the browser or operating system.

4. Information Noxuva sends to its servers

Depending on the optional features a user chooses, Noxuva may process the following categories disclosed in its Google Play Data safety section: name, email address, phone number, user ID, purchase history, user-generated content, and device or other identifiers.

Account and synchronisation

Noxuva supports Google, email/password, and phone/OTP sign-in through Firebase Authentication. We receive the Firebase user ID and the name, email address, or phone number provided through the selected sign-in method. A signed-in profile and choice list may be stored under that user ID so they can be synchronised or restored on another device.

Product requests and operational logs

Using Noxuva sends standard requests to our servers. Operational logs may include an IP address, request time, path, and user-agent information. We use these logs for service delivery, security, rate limiting, and reliability, not advertising profiling.

Feedback

If a user selects “Report a problem”, we store the chosen category, message, active board, page, optional contact detail, user agent, app build, and submission time. Noxuva does not automatically attach the user’s saved rank, profile, eligibility answers, or choice list to the report.

If an operations alert is enabled, a short excerpt of the message, limited to approximately 180 characters, may be sent to our operations messaging provider with the category, board, page, and internal report ID. This helps us review the report. The optional contact detail is not included in the alert.

Notifications

If a user enables Season alerts, we store the browser push endpoint, delivery keys, selected counselling board or boards, and subscription time. Notification permission can be withdrawn through the browser or operating-system settings.

Purchases and Access

For paid Access, we store the account ID, plan and product code, amount, currency, counselling season, order or transaction ID, payment status, entitlement, and references needed to verify the purchase and address fraud or disputes. Website payments use Razorpay. Native-app payments use Apple In-App Purchase or Google Play Billing.

Changenix does not receive or store full card numbers, CVVs, bank-account credentials, or UPI PINs. Those are handled by the payment provider or app store.

5. What Noxuva does not collect

• Precise GPS data or device-location permission.
• Contacts, photographs, video, audio, calendar, or microphone and camera data for counselling features.
• NEET roll numbers, admit-card uploads, application PDFs, or scanned certificates through normal product use.
• Advertising identifiers or data for targeted advertising.
• Full payment-card details, CVVs, bank credentials, or UPI PINs.

Standard server logs may contain an IP address. An IP address can sometimes indicate a general area, but Noxuva does not use it as a counselling profile field or request device location.

Candidate names and roll numbers are removed from official allotment information before it is used in Noxuva’s published closing-rank data.

6. Why we process information

• Provide requested company and counselling information.
• Authenticate accounts and synchronise a signed-in profile and choice list.
• Maintain entitlements and one active device session.
• Process and verify purchases, refunds, and disputes.
• Receive accuracy reports and improve product reliability.
• Deliver Season alerts a user explicitly enables.
• Protect our services, enforce rate limits, and meet legal, accounting, tax, or regulatory obligations.

7. Service providers and disclosure

We do not sell personal information or disclose it for targeted advertising. We use service providers to operate Noxuva. They process limited information for the services described below:

• Firebase Authentication (Google LLC) for Google, email/password, and phone/OTP sign-in.
• Hosting and infrastructure providers for application delivery, databases, backups, logs, and security.
• Razorpay for website payments.
• Apple and Google for native-app purchases, store receipts, and refund handling under their store terms.
• Browser push services to deliver alerts a user requests; those services do not receive the user’s counselling profile or rank from us.
• Operations messaging provider, when enabled, to notify our team of a feedback report using the limited excerpt and context described above.

We may disclose information where required by law, in response to valid legal process, or where reasonably necessary and legally permitted to protect users, our rights, or the security and integrity of our services.

8. Retention

• On-device data: until it is cleared, overwritten, or removed with browser or app data.
• Account and synchronised data: while the account exists, then deleted or anonymised after a verified deletion request, except where retention is required or permitted by law.
• Purchase and entitlement records: for the active season and as long as required for accounting, tax, fraud prevention, refunds, disputes, and applicable legal obligations.
• Feedback: while needed to investigate the report and improve the product, then deleted, redacted, or anonymised when it is no longer required.
• Push subscriptions: until unsubscribed, permission is revoked, or the endpoint becomes invalid.
• Operational logs: for a limited period needed for security, reliability, and debugging.

9. Your choices and deletion rights

• Clear local profile, choices, and preference data through browser or app settings.
• Revoke Season notifications through browser or operating-system settings.
• Request access, correction, or deletion of applicable server-held personal data by contacting us.
• Request deletion of a Noxuva account through the Noxuva account-deletion page. It explains the request steps, information deleted, and records that may be retained for legal purposes.

Noxuva push subscriptions are associated with a browser or device endpoint rather than a Firebase account. Account deletion does not automatically revoke notification permission or clear local app or site data on each device.

We normally complete verified Noxuva account-deletion requests within 30 days, subject to records we must retain by law. Product privacy and deletion questions can be sent to hello@noxuva.in.

10. Children

Noxuva is intended for adults aged 18 or above, including medical graduates making postgraduate counselling decisions. The Changenix corporate website and Noxuva are not designed or directed to children.

11. Security and international processing

Our hosted services use HTTPS in transit, restrict access to operational tools, and apply technical and organisational safeguards appropriate to the service. Noxuva’s Google Play disclosure identifies collected data as encrypted in transit. No method of transmission or storage is completely secure.

Infrastructure and service providers may process requests in India or other countries where they operate. Their handling is governed by their terms and applicable data-protection requirements.

12. Changes to this policy

We may update this policy when our websites, products, legal obligations, or data practices change. We will revise the date above and provide any additional notice or consent required by applicable law.

13. Contact

Related: Terms of Service · Contact Changenix · Noxuva Privacy Policy