Privacy Policy

1. Information We Collect

We intentionally collect minimal data. We only collect information via Google OAuth 2.0 when you choose to Sign in with Google. We request only non-sensitive scopes:

• openid — to authenticate your identity
• email — your Google email address
• profile — your name and profile picture

Specifically, we store: email address, full name, and profile picture URL as provided by Google. We do not access your Gmail, Google Drive, Calendar, contacts, or any other Google data. We do not collect sensitive or restricted scopes.

We also collect data you voluntarily provide: uploaded answer sheets (images/PDFs) for AI evaluation, and payment information processed via our payment provider (we do not store card numbers).

2. How We Use Your Information

• To create and manage your account and authenticate you
• To display your name and profile picture in the dashboard
• To provide AI answer evaluation, track your submissions, and store your history
• To communicate about your account, subscriptions, and support
• To improve our service and prevent abuse/fraud

We do not use your Google data for advertising, profiling, or any unrelated purpose.

3. Google API Disclosure & Limited Use

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide or improve our user-facing features that are relevant to the app's functionality. We never transfer Google user data to third parties except as necessary to provide our service, comply with law, or as part of a merger/acquisition with user consent.

4. Sharing & Disclosure

We share data only with:

• Service providers strictly needed to run the app (e.g., hosting, database, AI evaluation provider) under confidentiality obligations
• When required by law, legal process, or to protect our rights and safety
• With your explicit consent

5. Data Retention & Deletion

We retain your account data (email, name, profile picture) while your account is active. You can delete your account at any time from Settings or by emailing us. Upon deletion, we permanently delete your personal data and uploaded answers within 30 days, except where retention is required by law (e.g., payment records). You can also request deletion or correction by contacting us below.

6. Cookies & Analytics

We use essential cookies/local storage for authentication (session tokens) and preferences. We may use anonymized analytics to understand usage. No advertising cookies.

7. Data Security

We use industry-standard measures (HTTPS/TLS, encrypted storage, access controls) to protect your data. No system is 100% secure, but we continuously work to protect your information.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your data, and to withdraw OAuth consent via your Google Account permissions. Contact us to exercise these rights.

9. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect data from children.

10. International Transfers

Your data may be processed on servers located in India and other regions where our providers operate, with appropriate safeguards.

11. Changes to This Policy

We will notify you of material changes via email or an in-app notice and update the "Last Updated" date above.