🔒 Privacy Policy

1. What Data We Collect

📱 Account Information

• Full Name
• Email Address
• Phone Number (optional)
• Profile Picture (optional)
• Username & Password Hash (for traditional login)
• Exam Category & Level (CAT, JEE, UPSC, etc.)

🎮 Gameplay Data

• Quiz Attempts & Scores
• Time Spent on Questions
• Correct/Incorrect Responses
• Learning Streak Information
• Badges & Achievements
• Progress Tracking Data

📊 Activity & Device Information

• Daily Login Records
• Device Type (iOS/Android)
• Device IP Address
• Operating System Version
• FCM Token (for push notifications)
• App Usage Analytics

🔐 Authentication Data

• Firebase Authentication UID (social login only)
• Social Provider Information (Google, Facebook)
• Provider Email & Profile Data

2. Firebase Integration

How We Use Firebase

Firebase securely stores your authentication credentials and manages user sessions. When you log in or use social sign-in (Google), Firebase verifies your identity.

Firebase Data Retention

Your Firebase account data is retained as long as your account is active. When you delete your account, all Firebase records are removed within 30 days.

Firebase Privacy Policy: firebase.google.com/support/privacy

3. Google Sign-In

What Permission We Request

When you use "Sign in with Google", we request access to:

• ✓ Your Email Address (for account creation)
• ✓ Your Name (for user identification)
• ✓ Your Profile Picture (optional display)

Social Login Linkage

When you use social login (Google, Facebook), we create a link between your GameCat account and your social provider account. This allows you to sign in using either method.

Google Privacy Policy: policies.google.com/privacy

4. Notifications & FCM Token

Push Notifications

GameCat sends push notifications to remind you about daily quizzes, streak maintenance, and important updates. This uses Firebase Cloud Messaging (FCM).

FCM Token Collection

When you allow notifications, your device generates a unique FCM token. This token is:

• ✓ Stored securely on our servers
• ✓ Used ONLY to send you notifications
• ✓ Never shared with third parties
• ✓ Deleted when you disable notifications or delete your account

Notification Types

• Daily Reminders: Motivational messages to take quizzes
• Streak Alerts: Reminders to maintain your learning streak
• Achievement Updates: Badges & milestone notifications
• System Updates: Important app & feature announcements

Managing Notifications

You can disable push notifications anytime from your phone settings or app settings. This will delete your FCM token from our database.

5. How We Use Your Data

Primary Uses

• 🔐 Authenticate your account & prevent unauthorized access
• 📊 Track your learning progress & performance
• 🎯 Provide personalized quiz recommendations
• 📱 Send push notifications for daily reminders
• 📈 Analyze app usage to improve user experience
• 🐛 Debug technical issues & ensure app stability

Legal & Security Uses

• Prevent fraud & unauthorized access
• Comply with legal obligations
• Respond to government requests
• Protect our intellectual property rights

Data We Do NOT Share

We do NOT sell, rent, or share your personal data with third parties except:

• Service providers (Firebase, cloud hosting)
• Legal authorities (if required by law)
• Business partners (with your explicit consent)

6. Data Security

Password Security

Your password is hashed (never stored in plain text) and protected with strong encryption. We recommend using a unique, strong password.

Firebase Security

Firebase uses Google's enterprise-grade security infrastructure. All data is encrypted both in transit and at rest.

7. Data Retention Policy

Active Account

While your account is active, we retain all your data to provide the service. This includes quiz scores, progress tracking, and activity history.

After Account Deletion

8. Your Rights

GDPR & Privacy Rights

If you reside in the EU or have GDPR protection, you have the right to:

• ✓ Access: Request a copy of your personal data
• ✓ Rectification: Correct inaccurate information
• ✓ Erasure: Request deletion of your data (right to be forgotten)
• ✓ Portability: Export your data in a machine-readable format
• ✓ Objection: Opt-out of processing for specific purposes

How to Exercise Your Rights

To exercise any of these rights, email us at privacy@aptitutor.in with:

• Your full name & registered email
• The right you want to exercise
• Any supporting documentation

We will respond within 30 days of your request. We may request additional information to verify your identity.

9. Contact Us

Data Protection Officer

For data protection concerns, you can also contact our Data Protection Officer at dpo@aptitutor.in

10. Policy Changes

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the app constitutes acceptance of the updated policy.