Privacy Policy

1. Operator and scope

Elite NUET is an independent online learning platform operated by Narboto Nurlanov. This policy explains how information is handled when you visit elitenuet.xyz, create an account, use learning features, join community discussions, or register for a mock event.

Elite NUET is not affiliated with, endorsed by, or officially connected to Nazarbayev University, Cambridge, or an official NUET examination provider.

2. Information we collect

• Account data: email address, name, profile photo, user ID, email verification status, and login method.
• Learning data: test and diagnostic attempts, answers, scores, response time, confidence, flags, section timing, saved questions, mistakes, corrections, concepts, lesson progress, recommendations, mastery, and learning-path history.
• Community data: author name, forum posts, comments, and test-discussion messages that you choose to publish.
• Mock-event data: registration, Telegram username if provided, referral codes and status, share or repost confirmation, amount due, payment status, access status, and attempt status.
• Technical data: authentication and security logs, errors, IP-derived security information, browser, device, page URL, referrer, approximate location, and aggregated usage statistics.
• Support data: messages and files you send through Telegram or another support channel, including a payment receipt if you choose to send one.

3. Diagnostics, telemetry, and recommendations

During tests and Week 0 diagnostics, we may record answers, time spent, confidence, navigation, section timers, and correction activity. We use this information to calculate progress, identify possible knowledge, language, procedure, application, timing, or careless-error patterns, and suggest a next learning step.

Recommendations and mastery labels are educational guidance. They do not make legal or similarly significant decisions and do not guarantee an official NUET result or admission outcome.

4. Why we use information

• To create, authenticate, and protect accounts, including email/password and Google sign-in.
• To provide tests, lessons, explanations, reviews, saved questions, mistake correction, diagnostics, recommendations, reports, and learning paths.
• To register users for events, confirm participation conditions, referral eligibility, manual payment status, and access.
• To operate forums and test discussions, provide support, investigate errors, and communicate service or security notices.
• To prevent fraud, cheating, scraping, spam, unauthorized access, and other misuse.
• To understand aggregate product usage and improve reliability, content, and learning design.

5. Public and community content

Forum posts and comments are visible to other authorized users together with the author name stored at the time of posting. Test discussions are restricted by platform access rules but are still shared with eligible users. Do not publish private, financial, health, or other sensitive information.

If you delete your account, community content may remain to preserve discussion continuity. Contact us separately if you want a post removed or the displayed author information anonymized, subject to applicable law and legitimate recordkeeping needs.

6. Service providers and international processing

We do not sell personal data. Limited information is processed by providers needed to operate the service, including Supabase for authentication, database, storage, and transactional email; Google when you choose Google OAuth; Vercel for hosting and privacy-focused web analytics; and Cloudflare Turnstile for anti-abuse verification.

These providers may process information in other countries under their own privacy terms and contractual safeguards. Where required by applicable law, cross-border processing is based on your consent or another lawful basis. You may choose email/password login instead of Google sign-in.

We may disclose information when required by law, to protect users and the service, or in connection with a lawful reorganization. Any disclosure is limited to the relevant purpose.

7. Cookies, local storage, and analytics

Authentication cookies are used to keep you signed in and protect your session. Local storage may hold theme and language preferences, read-notification state, in-progress answers, timers, and temporary test or diagnostic telemetry on your device.

In production we use Vercel Web Analytics. According to Vercel, it does not use analytics cookies and reports aggregated page-view information such as URL, referrer, approximate region, browser, operating system, and device type. Authentication cookies remain necessary for signed-in features.

You can clear cookies and local storage in your browser, but doing so may sign you out or remove an unfinished local attempt.

8. Retention, progress reset, and account deletion

• Account and learning data are kept while the account is active and for as long as reasonably needed to provide the requested service, protect the platform, resolve disputes, and meet legal or accounting duties.
• Reset NUET Progress deletes student results, answer records linked to those results, test-attempt records, saved questions, and the mistake-review queue supported by the current database. It does not delete the account, event records, support messages, or community posts.
• The in-product Delete Account action currently performs a soft deletion: sign-in is disabled, but some learning, event, security, payment-status, and community records may remain. You may separately request deletion or anonymization of eligible records.
• Payment and transaction-status records may be retained for the period required by applicable accounting, consumer-protection, fraud-prevention, and dispute-resolution rules.
• Residual copies may remain temporarily in protected backups until the normal backup cycle expires.

9. Your choices and rights

• Update your name, profile photo, password, and email from account settings.
• Ask what personal data we hold and request a copy where applicable.
• Request correction, deletion, anonymization, restriction, or withdrawal of consent where applicable.
• Delete selected learning progress using Reset NUET Progress.
• Stop optional Google processing by using email/password login and managing Google account permissions.
• Complain to the competent data-protection authority or seek another remedy available under applicable law.

10. Students under the age of majority

The platform is designed for school students, so some users may be minors. A minor should use the platform, provide personal data, and purchase paid access only with the consent and supervision of a parent or legal representative where required by law.

A parent or legal representative may contact us about the minor's data. If we learn that required consent was not provided, we may restrict the account and delete or anonymize eligible information.

11. Security and policy changes

We use reasonable technical and organizational safeguards, including authenticated sessions, access controls, database row-level rules, and restricted administrative credentials. No online service can guarantee absolute security.

We may update this policy when the service, providers, or legal requirements change. Material changes will be shown on this page by changing the update date and, where appropriate, by an in-product notice.