Privacy Policy
1. Legal Basis & Scope
This Privacy Policy outlines how Study Journey ("we," "our," or "us") collects, processes, and safeguards information when you use our mobile application. This policy complies with the European Union General Data Protection Regulation (GDPR Art. 13/14), the California Consumer Privacy Act (CCPA/CPRA), COPPA, and Google Play Store & Apple App Store Developer Policies.
2. Data Inventory
We process only the minimal necessary data to deliver educational study guides and AI assistance:
| Data Type | Specific Data Collected | Purpose | Storage Mechanism |
|---|---|---|---|
| Identity Data | Email & UID (optional Firebase login) | Account security & preferences sync | Firebase Auth (Encrypted Cloud) |
| Local Activity | AI Points balance, check-in timestamps, theme mode | Points tracking & daily reward limits | Hive Local Encrypted Storage |
| Device Identifiers | Device model, OS version, Advertising ID (GAID/IDFA) | Performance analytics & AdMob ad delivery | Google Mobile Ads SDK |
| AI Chat Inputs | Study prompts, essay topics, SOP drafts | Real-time AI Assistant responses | Ephemeral HTTPS API (OpenRouter) |
3. AI Assistant Privacy & Data Ephemerality
Prompts entered into the AI Assistant are sent via secure HTTPS TLS 1.3 connections to OpenRouter API endpoints:
- No Monetization of Prompts: Prompts are strictly used to return study answers and are never sold or rented.
- No Model Retraining: Student prompts are not used for public AI model training.
4. Virtual Currency & Points Disclaimer
⚠️ Mandatory Store Disclosure
NON-FINANCIAL VIRTUAL UTILITY ITEM: AI Points inside Study Journey are strictly virtual utility rewards. Points have ZERO REAL-WORLD CASH VALUE, cannot be converted to fiat or cryptocurrency, and cannot be traded outside the App. Points are consumed at 10 points per AI message. The App performs NO CRYPTOCURRENCY OR HARDWARE MINING.
5. Third-Party Services
We partner with trusted infrastructure providers governed by privacy standards:
- Google LLC (Firebase & AdMob): Authentication and ad network (Google Privacy Policy).
- OpenRouter Inc: AI model inference gateway (OpenRouter Policy).
6. Data Retention & Account Deletion
Local data remains on your device until local cache is cleared or the app is uninstalled. Firebase user accounts can be permanently deleted upon request by emailing support.
7. Security Architecture
We enforce technical safeguards including 256-bit TLS encryption in transit and sandboxed Hive local storage.
8. GDPR & CCPA Privacy Rights
You hold the right to access, rectify, or request deletion of your personal data. You may opt-out of ad tracking through your device system settings.
9. Children's Privacy (COPPA)
Study Journey is intended for high school and college students (ages 13+). We do not knowingly collect information from children under 13.
10. Contact Support
For privacy inquiries or data deletion requests:
📧 Support Email: cse.shamimmiah@gmail.com