Privacy

• We never read your WhatsApp, SMS or phone. We only see what you paste, upload or share into Neem.
• In text you type or paste, card numbers, OTPs, PINs, CVVs, Aadhaar and PAN are hidden on your phone before a check is sent, and hidden again on our server.
• Screenshots are sent to our server and Anthropic to be read, and voice recordings to our server and OpenAI to become text. We mask what we read and keep neither the image nor the audio.
• Checks and their AI logs are deleted after 7 days. Everything else has a limit too, listed below. We do not sell your data.
• You can ask us to show, correct or delete your data at any time by emailing grievance@neem.family.

Using the landing pages and the emergency help (“I already paid”) needs no account. If you create an account, the rest of this page applies to what we keep about it.

For the purposes shown, and nothing beyond them.

Your account

Your email, your name, and either an argon2 password hash (never your password) or your Google identity. We use these to sign you in and send you verification and reset emails.

Your sessions

A hashed sign-in token, your browser's user agent and your IP address, so you stay signed in and we can spot misuse of an account.

Each check

The masked text of what you checked and our result: the verdict, the tricks we found and the next steps. This lets you come back to it.

Screenshots

Sent to our servers and to Anthropic to be read. Never stored by us. We keep only the text we read from it, after masking, as part of the check.

Voice

If you speak instead of typing, the recording is sent to our server and to OpenAI to turn it into text. We don't keep the audio.

I already paid

The bank SMS you paste, with OTPs and card numbers hidden on your phone first, so we can pick out the amount, reference number and time. We send back what we found and don't save the SMS.

Ask someone I trust

A short masked excerpt, your first name, and the reply from the person you asked. This is what that person sees when they open your link.

Neem Family

For each person you look after: the name you gave them and, if you added it, their phone number for the call button. Each alert: the verdict, the tricks found and the time. A parent's message text only if they choose to send it, masked like a check.

Shared warnings

When you share a warning: the verdict, the kind of scam, the tricks and the next steps. No message text and nothing about you.

AI request logs

The masked text we sent to the AI, the model used, tokens and cost. We keep these to debug mistakes and control costs.

Rate-limit events

A short record keyed on your IP address, to stop abuse and keep free checks fair.

Leaves

A ledger of leaves given and used on your account (checks, sign-up gift).

The Neem landing pages themselves do not ask for personal data. Our hosting provider, Cloudflare, sees standard request details such as your IP address when you load any page.

A screenshot is a picture, and we can’t hide a card number inside a picture the way we can in text. Crop out anything private before you upload one.

Before a check is sent, Neem hides Aadhaar numbers, PAN numbers, card numbers, OTPs, CVVs, PINs and account numbers marked “A/c” in the text on your own device, and shows you what it hid. Our server looks again for all of these, and hides anything the first pass missed, before the text is saved or passed to an AI. Screenshots skip the first step: they are read on our server, and the text is masked there.

Both passes recognise the usual formats of these numbers and the words around them, like “OTP” or “CVV”. That makes them a safety net, not a promise that nothing private can slip through. Please don’t paste a password, and never share an OTP or PIN with anyone, including Neem. Neem will never ask for your OTP, UPI PIN, CVV or banking password.

Each of these is deleted automatically when its time is up.

Checks (masked text and result) and their AI request logs

7 days

Rate-limit events

2 days

Ask someone I trust links

The link stops working after 24 hours. The record is deleted 7 days after that.

Neem Family links (name and phone number)

Until either of you removes the link, then 30 days more. An invite nobody accepts is deleted after 30 days.

Neem Family alerts, and any message text a parent sends

30 days

Shared warnings

30 days

Sign-in sessions

Until they expire (30 days), or when you sign out.

Your account and leaves ledger

Until you delete your account. For now, you do that by emailing us.

These companies process data on our behalf to run Neem. Some of them keep servers outside India, so your data can leave India when you use Neem. We send each only what it needs.

Neon

Our database.

Modal

Runs our servers.

Cloudflare

Hosting and delivery of the website.

Anthropic

Reads the masked text or the screenshot of your check and tells us which tricks it contains.

OpenAI

Turns a voice recording into text. Neither company trains its models on data sent through its API by default.

rdap.org

When a check contains a link, we send just its domain name here to look up how old the website is.

Resend

Sends our emails: verification, password reset and trust-link emails.

Google

Sign-in with Google, if you choose it.

We do not sell your data or use it for advertising.

The Neem app can set up to four cookies. Each is needed for the app to work, and none is used to track you.

Session

Keeps you signed in, for up to 30 days or until you sign out.

Anonymous id

A random id, so free checks without an account can be counted fairly. Kept for a year.

Google sign-in

Holds the sign-in state for 10 minutes while Google signs you in.

Neem Family (neem_ward)

Set on a parent's phone when they accept a family link, so Neem knows which family to tell.

The landing pages set no cookies. Neem has no analytics or advertising trackers.

• Ask what personal data of yours we hold, and get a summary of it.
• Ask us to correct data that is wrong or incomplete.
• Ask us to erase your data, including your account.
• Complain to us if you are unhappy, and get an answer (grievance redressal).
• Nominate someone to exercise these rights for you if you die or can’t act for yourself.
• Withdraw your consent at any time. It should be as easy as giving it: tell us by email and we will stop, and delete what we no longer need.

Email grievance@neem.family from the address on your account. We aim to reply within 7 days, and in any case within the time the DPDP Rules allow. If we can’t resolve a complaint, you can take it to the Data Protection Board of India.

If a data breach ever affects you, we will tell you and the Data Protection Board of India, as the law requires.

Neem is for people aged 18 and over. If you are under 18, please use Neem only together with a parent or guardian, who must agree to this page on your behalf. We do not knowingly collect data about children, and we do not track or advertise to them. If you think a child has made an account, tell us and we will delete it.

If we change what we collect or how long we keep it, we will update this page and the date at the top, and tell account holders by email before the change starts.

Grievance Officer, Neem: grievance@neem.family

For anything else, write to hello@neem.family. Our other pages are Terms and Contact.

If you have already lost money, don’t wait for us. Call 1930 and report at cybercrime.gov.in.