Privacy Policy

📋 1. Information We Collect

1.1 Information via Google Sign-In

When you sign in with Google, we receive and store the following from your Google account (with your explicit consent):

• Full Name — as registered in your Google account, used to personalize your experience.
• Email Address — your primary Google email, used to identify and manage your account.
• Profile Picture — displayed within the app for personalization.
• Unique Google User ID — used as a key to associate your data in our Firebase Firestore database.

1.2 Usage and Activity Data

We automatically collect information about how you interact with the App, including:

• Quiz attempts, answers submitted, scores, and streaks.
• Progress records and accuracy metrics per subject or topic.
• Features accessed and sections viewed within the App.
• Session duration and frequency of App usage.

1.3 Device & Technical Information

Via Firebase Analytics, we may collect limited technical data such as:

• Device model, OS version (Android), and screen resolution.
• App version, crash logs, and performance data for debugging.
• General geographic region (country/state level only — precise location is never collected).

⚙️ 2. How We Use Your Data

We use the information collected solely to operate, improve, and personalize the App. Specifically, we use your data to:

• Authenticate your identity and maintain your secure account session.
• Sync and display your personalized progress, quiz history, and accuracy metrics across sessions.
• Improve the quality, performance, and content of the App based on aggregated usage patterns.
• Respond to support requests or inquiries when you contact us.
• Monitor the App for technical issues, errors, and security threats.
• Comply with applicable legal obligations.

🔒 3. Data Security

We take the security of your personal information seriously and implement the following industry-standard safeguards:

• Firebase Security Rules — Database access is strictly controlled. Each user can only read and write their own data records; no cross-user data access is permitted.
• Encrypted Data Transmission — All data is transmitted over HTTPS/TLS-encrypted connections. No data is sent in plain text.
• Google OAuth 2.0 — We leverage Google's industry-standard authentication, eliminating password-related risks entirely.
• Developer Access Control — Backend Firebase access is restricted to authorized developers only and is regularly audited.

Please note: no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

🔗 4. Third-Party Services

Scroll and Learn integrates the following third-party services. Each operates under its own privacy policy:

• Google Sign-In (Google LLC) — Used for user authentication via OAuth 2.0. Google Privacy Policy ↗
• Firebase Firestore (Google LLC) — Real-time cloud database used to store and sync user progress, quiz data, and account information. Firebase Privacy Policy ↗
• Firebase Analytics (Google LLC) — Collects anonymized, aggregated usage data to help us understand app performance and improve the user experience.
• Google Play Services — Required for app distribution on Android and core Android functionality. Google Play Privacy Policy ↗

We encourage you to review the privacy policies of these services to understand how they independently handle your data.

🧒 5. Children's Privacy

Scroll and Learn is designed for general student audiences. We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent.

If you believe a child under 13 has provided us with personal information without consent, please contact us immediately at yashvantkr15799@gmail.com and we will take prompt steps to delete such information from our systems.

✏️ 6. Your Rights & Data Retention

You have the following rights regarding your personal data:

• Access: You may request a copy of the data we hold about you at any time.
• Correction: You may request correction of inaccurate or incomplete information.
• Deletion: You may request deletion of your account and all associated data. Contact us and we will process it within 30 days.
• Withdrawal of Consent: You may revoke Google Sign-In access at any time via your Google account permissions.

We retain your data for as long as your account is active or as needed to provide you our services. Upon verified deletion request, all personal records are removed from our Firebase database within 30 days.

🔄 7. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify active users via an in-app notification where feasible.

We encourage you to review this page periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

📧 8. Contact Us

If you have questions, concerns, or data requests regarding this Privacy Policy, please reach out: