Privacy Policy

1. Who We Are (Data Controller)

Data controller: Raushan Kumar (RaushanSYNC Maths).
Contact email for privacy and data requests: maths.raushansync@gmail.com.

2. Scope of This Policy

This policy applies to the RaushanSYNC Maths website and related learning functionality on maths.raushansync.com. It does not control third-party websites or services that are linked from this website.

3. What Data We Collect

• Account and profile data: name, email, phone number, and education level.
• Learning data: progress status and quiz/practice scores.
• Technical data: IP address, browser/device basics, request metadata, security events, and limited operational logs.
• AI chat inputs/outputs: your AI chat message and context are sent for response generation, but they are not stored in our application database by our current implementation.

Required fields for account creation are name, email, password, and education level. Phone number may be optional depending on the form flow.

4. How We Obtain Data

• Directly from you when you sign up, sign in, edit profile, or use learning features.
• Automatically from your device/browser when you access the website.
• From authentication providers (for example, Google OAuth) when you choose social sign-in.

5. Why We Process Data and Legal Basis

If you are in the EU/EEA/UK, we process data under one or more lawful bases below.

• Authentication, account access, and profile management: contract performance.
• Progress tracking and quiz score features: contract performance.
• AI tutor responses and service quality: contract performance and legitimate interests.
• Security monitoring, abuse prevention, origin checks, and rate limiting: legitimate interests and, where applicable, legal obligation.
• Optional or non-essential processing (where implemented): consent where required.

6. Third Parties and Processors

We use service providers to operate the platform. These providers process data under their own terms and security controls:

• Supabase: authentication and storage for profile, progress, and score data.
• GitHub Pages (GitHub): static website hosting and content delivery for this site.
• Cloudflare: AI worker execution and edge security controls for AI requests.
• Groq: AI model inference for chat responses.

We may also disclose data when required by law, regulation, legal process, or to protect the rights, safety, and security of users and services.

7. Cookies, Local Storage, and Caching

• Essential authentication/session handling is required for signed-in features.
• Local storage may be used for preferences (for example, theme choice).
• Service worker and browser caches may store assets for performance and offline behavior.

We do not currently use third-party advertising trackers on this site.

8. Data Retention

• Account/profile data and learning records (progress/scores): retained while your account is active and removed after verified deletion requests, subject to legal and security obligations.
• AI chat payloads are not written to our application database by current code paths.
• AI chat history displayed in the interface is held in browser memory for the current session.
• Worker rate-limit counters are in-memory and short-lived (approximately one-minute window).
• Technical and security logs are retained for limited periods based on operational need and provider defaults, and may be retained longer if required for security or legal reasons.

9. International Data Transfers

Because we use global infrastructure providers (including GitHub Pages, Supabase, Cloudflare, and Groq), data may be processed outside your country. Where required, we rely on contractual and organizational safeguards provided by these processors.

10. Your Rights and How to Exercise Them

Depending on your jurisdiction, you may request:

• Access to your personal data.
• Correction of inaccurate data.
• Deletion of your data/account (subject to legal exceptions).
• Restriction of processing in certain cases.
• Data portability where applicable.
• Withdrawal of consent where processing relies on consent.
• Objection to processing based on legitimate interests where legally available.
• A complaint to your local data protection authority.

To submit a request, email maths.raushansync@gmail.com from your account email (or include enough details for identity verification). We generally aim to respond within 30 days where required by law.

You can also initiate self-service account deletion from the dashboard under Critical Settings. Detailed steps and deletion scope are available at /account-deletion/.

11. Children and Student Use

This platform is intended for students from Class 6 and above. If local law requires parental or guardian consent for a younger user, a parent/guardian should contact us before or during account use at maths.raushansync@gmail.com.

12. Security Controls

• Row Level Security (RLS) policies are applied in our Supabase database.
• AI worker requests use token verification before processing.
• Origin checks are applied to worker requests.
• Rate limiting is applied to reduce abuse and protect service availability.
• Data transmission uses encrypted HTTPS connections in transit.

No internet system is 100% secure. We continuously improve safeguards, but cannot guarantee absolute security in all circumstances.

13. Automated Decisions, Profiling, and Sale of Data

We do not currently make solely automated decisions with legal or similarly significant effects about users.

We do not sell personal data for monetary consideration and do not currently run third-party behavioral advertising trackers on this website.

14. Policy Changes and Notifications

We may update this policy from time to time. The latest version is always posted at /privacy/ with an updated date.

Terms of use are available at /terms/.