Privacy Policy

• Account details — name, email address, and authentication identifiers you provide when signing in (including Google Sign-In).
• Learning activity — quiz attempts, answers, scores, bookmarks, streaks, and progress needed to run practice, mock and analytics features.
• Device & diagnostics — basic device model, OS version, app version, crash reports and anonymous usage events used to keep the app stable.
• Payment metadata — when you purchase Premium, our payment processor (Razorpay) handles card details; we only receive the transaction status, order ID and amount.

We do not knowingly collect data from children under 13.

• To create and secure your account and personalise your experience.
• To power practice sessions, mock exams, analytics, bookmarks, leaderboards and notifications.
• To process Premium purchases and honour refund / subscription obligations.
• To detect abuse, prevent fraud and improve reliability.
• To communicate essential service updates. Marketing emails are opt-in only.

We process personal data on the basis of your consent, to perform the contract you enter into when you use the service, and to pursue our legitimate interest in operating and improving PSC Vault.

All traffic between your device and our servers is encrypted in transit using TLS. Access to production data is limited to authorised personnel and protected by role-based access controls and row-level security policies on our database. No system is 100% secure, but we apply industry-standard safeguards to protect your data.

We rely on a small number of vetted processors, each governed by their own privacy policy:

• Supabase (authentication, database, storage)
• Cloudflare (edge hosting & delivery)
• Razorpay (payments)
• Google (Sign-In)

We do not sell your personal data to advertisers.

We retain your account data for as long as your account is active. If you delete your account (see below), we permanently erase your personal data within 30 days, except where we are required to retain limited records (e.g. payment invoices) to comply with law.

Subject to applicable law, you can:

• Access the personal data we hold about you.
• Correct inaccurate information from within the app or by contacting support.
• Request permanent deletion of your account via /delete-account.
• Withdraw consent or object to certain processing.

We may update this policy from time to time. Material changes will be highlighted in the app. Continued use of the service after an update constitutes acceptance of the revised policy.

Questions or requests? Email us at pscvault@gmail.com.