Privacy Policy for PYQScore
We believe high-yield exam preparation and mastery through active recall should never come at the cost of personal privacy. Learn how PYQScore safeguards your data, handles Android permissions, and protects user integrity.
Overview & Core Philosophy
PYQScore ("we", "us", or "our") is an exam preparation and practice utility designed to help competitive exam aspirants (such as SSC, UPSC, State PSC, Banking, and Railways) master their syllabus through active recall. The application provides high-yield Past Year Questions (PYQs), timed mock tests, and smart revision flashcards.
Our architecture is built around an on-device first, privacy-respecting philosophy:
Device Permissions & Usage
PYQScore uses only standard Android permissions required to deliver an optimal educational experience:
| Permission | Android Identifier | Purpose in PYQScore |
|---|---|---|
| Notifications | Used strictly for user-scheduled study reminders, daily streak milestones, and test completion alerts. | |
| Haptic Feedback | Provides subtle vibration feedback during quiz interactions (e.g., correct/incorrect answer selections). | |
| Network Access |
|
Required for optional cloud account synchronization (Supabase), downloading question bank updates, and optional AI notes processing. |
|
Optional Camera & Media Files |
|
Optional: Used exclusively when you choose to capture photos of handwritten study notes, textbook pages, or upload PDF study guides to generate custom revision flashcards. |
AccessibilityService API, does NOT request SYSTEM_ALERT_WINDOW (display over other apps), does NOT query your installed applications list (QUERY_ALL_PACKAGES), and does NOT run background app-blocking monitors.
Information We Collect and How We Use It
A. Guest Mode (No Account Required)
You can use PYQScore without creating an account. In Guest Mode:
- Zero Personal Identifiable Information (PII) is collected or transmitted.
- All question progress, accuracy rates, study streaks, and test scores are saved strictly on your device inside an offline SQLite / Drift database.
B. Account Creation & Cloud Sync (Optional)
If you optionally sign in (via Google Sign-In or Email through Supabase):
- Information Collected: Display name, email address, and unique user identifier (UID).
- Purpose: To authenticate your identity and sync your study streaks, test results, and custom note decks across your devices.
- Security: Passwords and authentication tokens are handled securely using industry-standard OAuth 2.0 and encrypted transport protocols (TLS/HTTPS).
C. AI Notes Processing Feature (Optional)
When you use the "AI Notes to Quiz" feature to convert photos or documents into test decks:
- Input: Images or extracted text snippets of study material you explicitly upload.
- Processing: The input is sent via encrypted HTTPS request to Google's Gemini API strictly to extract key revision points and generate multiple-choice questions.
- Data Use: We do not use your uploaded study materials to train public AI models.
- Offline Fallback: If internet access is unavailable or disabled, an offline rule-based deck generator runs locally on your device without sending any data over the network.
Third-Party Service Providers
PYQScore works with trusted cloud infrastructure providers to deliver its services:
| Provider | Purpose | Privacy Policy Link |
|---|---|---|
| Google Play Services | App delivery, licensing, and update distribution | Google Privacy Policy |
| Google Sign-In / OAuth | Secure user authentication (optional) | Google Identity Privacy |
| Google Gemini API | AI processing for uploaded study notes into quiz cards | Google Cloud Privacy |
| Supabase | Cloud database and user account authentication | Supabase Privacy Policy |
Data Storage, Security & Retention
-
Local Storage: All quiz questions, answer histories, user preferences, and custom decks reside in your device's local application sandbox (
sqflite/driftdatabase). Other applications on your device cannot access this data. - Data Retention: We retain synced cloud data only for as long as your account remains active. Local data is retained until you uninstall the app or clear app storage.
- Transmission Security: All communication between the app and external APIs (Supabase, Google) uses encrypted TLS 1.3/HTTPS channels.
User Data Rights & Account Deletion
We believe users should have absolute sovereignty over their data:
Options to Erase or Delete Your Data:
You can delete all local study metrics, quiz history, and test logs at any time by going to Settings > Profile > Reset All App Data or through your device's native App Settings (Clear Storage / Clear Data).
If you created an account and wish to permanently delete your account and all associated cloud data, you can:
- Trigger account deletion directly inside the app under
Settings > Account > Delete Account, or - Send an email to himanta820@gmail.com with the subject line "Account Deletion Request".
Upon verification, all account records, synced decks, and authentication credentials will be permanently purged from our servers within 30 days.
Children’s Privacy (COPPA & Global Standards)
PYQScore is an educational study and exam preparation tool intended for students preparing for competitive and academic exams (typically age 13 and older). We do not knowingly solicit or collect personal identifiable information from children under the age of 13 (or under 16 in the European Union).
If we discover that a child under the relevant age has provided personal data without verified parental consent, we will promptly delete such information from our records. If you are a parent or guardian and suspect your child has provided personal information, please reach out to us at himanta820@gmail.com.
Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect application improvements, new features, or regulatory requirements. Any modifications will be indicated by updating the "Last Updated" date at the top of this document. For significant updates impacting your rights, we will notify you through an in-app banner or release notes.
Contact Us
If you have any questions, suggestions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our privacy compliance team: