ExamSaver (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the “Service”). Please read this policy carefully. If you do not agree with the terms of this policy, please do not use the Service.
1. Information We Collect
1.1 Information You Provide Directly
When you create an account or use the Service, we collect:
- Account information: Full name, username, email address, and password (stored as a secure hash).
- Phone number: Collected during registration and verified via a one-time SMS code to secure your account and enable friend discovery.
- Profile information: Profile picture, biography, school name, and course of study — all optional and provided at your discretion.
- Study materials: Documents, text, images, and voice recordings you upload for AI processing into flashcards, quizzes, and summaries.
- User-generated content: Quiz answers, chat messages sent to the AI assistant, and responses submitted during challenges and competitions.
- Communications: Messages or inquiries you send to our support team.
1.2 Information Collected Automatically
When you use the Service, we automatically collect:
- Usage data: Features accessed, screens visited, time spent in-app, and session start/end times.
- Study performance data: Flashcard review responses, quiz scores, spaced-repetition intervals, and challenge results.
- Engagement data: XP earned, streak counts, and activity feed events.
- Device information: Device type, operating system version, and a push-notification token (FCM token) used to deliver alerts.
- Log data: IP address, error reports, and diagnostic information generated when the app crashes or encounters errors.
1.3 Information from Your Device (With Permission)
- Contacts: If you grant permission, we read phone numbers and email addresses from your device contacts solely to identify existing ExamSaver users so you can connect with friends. We transmit only normalised digits and lowercase email strings — contact names are never sent. We do not store your full contact list on our servers.
- Microphone / Audio: If you use the voice-note feature, we record audio and upload it to our servers for AI processing. Recordings are processed to generate study content and are retained as part of your materials.
- Camera / Photo library: If you update your profile picture, we access your camera or photo library only to obtain the image you select. Images are uploaded to secure cloud storage.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account and authenticate your identity.
- Provide the core Service: AI-powered study set generation, practice sessions, challenges, and competitions.
- Personalise your experience through spaced-repetition scheduling, streak tracking, and XP rewards.
- Send push notifications for streaks, challenge invites, daily reminders, and friend activity (you can opt out in Settings).
- Enable social features such as following other users, leaderboards, and shared study sets.
- Process payments and manage your subscription tier.
- Detect and prevent fraud, abuse, and violations of our Terms of Service.
- Improve the Service through aggregated, de-identified analytics.
- Comply with legal obligations.
We do not sell your personal information to third parties. We do not use your study content to train AI models without your explicit consent.
3. How We Share Your Information
3.1 Service Providers
We share information with trusted third-party service providers who process data on our behalf, under strict data-processing agreements:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication, file storage, real-time features | All account and usage data |
| Google Firebase | Phone OTP verification; push notifications (FCM) | Phone number; device FCM token |
| Railway | Backend API server (AI processing, document handling) | Uploaded documents; AI requests |
| Payment Processor | Subscription billing | Payment details (handled directly by processor; we do not store card data) |
| Google Fonts CDN | Font delivery | Device IP address (standard CDN request) |
3.2 Public Profile Information
Your username, display name, profile picture, XP level, and streak count are visible to other ExamSaver users through the leaderboard, social feed, and user search. You may limit this by adjusting your privacy settings.
3.3 Legal Requirements
We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights, property, or safety of ExamSaver, our users, or the public.
3.4 Business Transfers
If ExamSaver is acquired, merged, or sold, your information may be transferred as part of that transaction. We will notify you via email or in-app notice before your data becomes subject to a different privacy policy.
4. Data Retention
- Account data is retained for as long as your account is active.
- Study materials and generated content are retained until you delete them or close your account.
- Usage and engagement data is retained for up to 24 months for analytics, then aggregated or deleted.
- Push tokens are deleted when you sign out or uninstall the app.
- When you delete your account, we delete or anonymise your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention records).
5. Data Security
We implement industry-standard security measures to protect your information:
- All data is transmitted over encrypted HTTPS connections (TLS 1.2+).
- Passwords are hashed and salted; we never store plaintext passwords.
- Database access is protected by row-level security (RLS) policies ensuring users can only access their own data.
- File storage buckets are access-controlled; documents and avatars are not publicly listable.
- We use short-lived JWT access tokens for API authentication.
No method of electronic storage or transmission is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@examsaverapp.com.
6. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update or correct inaccurate information directly in the app (Profile → Edit Profile) or by contacting us.
- Deletion: Request deletion of your account and associated personal data. Go to Profile → Settings → Delete Account, or email us.
- Portability: Export your study sets and quiz data via Profile → Export Data (Premium feature).
- Opt-out of notifications: Disable push notifications at any time in Profile → Settings → Notifications, or through your device settings.
- Contacts permission: Revoke contacts access at any time through your device's app permission settings. Friend-discovery features will no longer function.
- Microphone permission: Revoke microphone access at any time. Voice-note uploads will no longer function.
To exercise your rights, contact us at privacy@examsaverapp.com. We will respond within 30 days.
7. Children's Privacy
The Service is not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information without parental consent, please contact us and we will delete the information promptly.
8. International Data Transfers
ExamSaver is operated from Nigeria. Our service providers (Supabase, Google Firebase, Railway) may store and process your data in data centres located in the United States, European Union, or other regions. By using the Service, you consent to the transfer of your information to these regions, which may have different data protection laws than your country of residence.
9. Third-Party Links and Services
The Service may contain links to third-party websites or services (e.g., the payment checkout page). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you visit.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Updating the “Last updated” date at the top of this page.
- Sending an in-app notification or email when changes are significant.
Your continued use of the Service after the effective date constitutes your acceptance of the revised policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
ExamSaver
Email: privacy@examsaverapp.com