Privacy Policy

Welcome to Sanxam. Your privacy is critically important to us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Sanxam mobile application and related services.

1. Information We Collect

1.1 Account Information

When you sign in using your Google account, we collect:

• Your name and display name
• Email address
• Profile picture URL
• Google account unique identifier

1.2 Test and Performance Data

As you use Sanxam, we collect data related to your learning activity:

• Test results and scores
• Questions answered and accuracy rates
• Time spent on tests and individual questions
• Streak and XP (experience points) data
• Coins earned and spent
• Bookmarked questions

1.3 Usage Analytics

We collect general usage data to improve the app experience:

• App usage patterns and frequency
• Feature engagement metrics
• Device type and operating system version
• App version information

1.4 Payment Information

For premium subscriptions, payment processing depends on your platform:

• Android: Payments are processed via Google Play Billing. RevenueCat is used as a subscription management layer — only anonymized subscription status is shared with RevenueCat; no personal data is transmitted.
• Web: Payments are processed via Razorpay. Razorpay processes and stores payment data in accordance with PCI-DSS compliance standards.

We do not store your credit card, debit card, or bank account details on our servers. We only store:

• Subscription status (active/inactive)
• Subscription plan type
• Transaction reference IDs
• Subscription start and end dates

1.5 Camera and Profile Picture

If you choose to take a profile picture using your device camera, we request camera permission. The photo is compressed to a small thumbnail (100×100 pixels) and stored with your profile data. No full-resolution photos are stored on our servers — only the compressed thumbnail is retained.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Sanxam app and its features
• Track your learning progress and generate performance analytics
• Maintain leaderboards and ranking systems
• Process subscription payments and manage your account
• Send important notifications about your account or the service
• Prevent fraud and ensure security of the platform
• Comply with legal obligations

3. AI-Generated Content and Data Handling

Sanxam uses artificial intelligence (AI) technology to generate educational multiple-choice questions (MCQs) for exam practice. This section explains how AI is used and how your data is handled in this context:

3.1 How AI is Used

We use OpenAI's language model (accessed via a secure server-side API) to generate practice questions, answer options, and explanations across subjects including Polity, History, Geography, Economy, Environment, Science, and Current Affairs. AI is used solely for educational content creation — it does not interact with users directly.

3.2 No Personal Data Sent to AI

No personal user data — including your name, email address, test scores, profile information, or any individually identifiable data — is ever sent to the AI model. Only generic, non-personal parameters (subject name and difficulty level) are used as inputs for question generation.

3.3 Pre-Generated Content

AI-generated questions are created in advance on our servers and stored securely in our own PostgreSQL database. Users interact with pre-stored questions only — there is no live AI chatbot, real-time AI interaction, or on-device AI processing.

3.4 No Profiling or Automated Decision-Making

AI is not used for any of the following purposes:

• User profiling or behavioral analysis
• Automated decision-making that affects user access or experience
• Targeted advertising or content personalization based on user data
• Surveillance, tracking, or monitoring of user activity

3.5 Content Accuracy Disclaimer

While AI-generated questions undergo automated validation checks for format and structure, they may occasionally contain factual inaccuracies. Users are encouraged to cross-reference information with official UPSC/GPSC study materials and authoritative sources.

4. Data Storage and Security

Your data is stored securely in a PostgreSQL database hosted on cloud infrastructure. We implement the following security measures:

• Encrypted data transmission using HTTPS/TLS
• Secure database access with environment-level credentials
• Regular security reviews and updates
• Access to personal data is limited to essential operations only
• Authentication handled via Google Sign-In (no passwords stored on our servers)

5. Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. Your data is shared only in the following limited circumstances:

• Razorpay: Payment data is shared with Razorpay solely for processing web subscription payments. Razorpay's privacy policy governs their handling of your payment information.
• Google Play / RevenueCat: On Android, subscription purchases are processed via Google Play Billing. RevenueCat is used as a subscription management layer — only anonymized subscription status is shared; no personal data is transmitted to RevenueCat.
• Google Authentication: We use Google Sign-In for authentication. Google's privacy policy applies to data collected during the sign-in process.
• OpenAI: No personal data is shared with OpenAI. Only generic subject/difficulty parameters are sent for question generation. OpenAI does not receive, process, or have access to any user data.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.

6. Your Rights

You have the following rights regarding your personal data:

6.1 Access and Export

You can request a copy of all personal data we hold about you. Contact us at the email address below, and we will provide your data in a machine-readable format within 30 days.

6.2 Data Deletion

You can request deletion of your account and all associated data. Upon receiving a deletion request, we will:

• Delete your account information within 30 days
• Remove your test results, scores, and progress data
• Remove your data from leaderboards and rankings
• Cancel any active subscriptions

Some data may be retained for legal or compliance purposes (e.g., transaction records) for up to 180 days after deletion.

6.3 Data Correction

You can update your profile information at any time through the app settings. For corrections to other data, please contact us.

7. Cookies and Tracking

The Sanxam mobile app does not use browser cookies. However, our web landing page and service may use:

• Session tokens for authentication
• Local storage for app preferences and settings
• Service workers for PWA (Progressive Web App) functionality

8. Children's Privacy

Sanxam is designed for users preparing for competitive examinations such as UPSC and GPSC. The service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.

Users between the ages of 13 and 18 should use the app under the supervision of a parent or guardian.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you our services. Specifically:

• Account data: Retained until you request deletion
• Test results and progress: Retained until you request deletion
• Payment records: Retained for 5 years as required by Indian tax and financial regulations
• Usage analytics: Aggregated and anonymized after 12 months

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the app and updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: graphikians@gmail.com
• App: Settings > Help & Support within the Sanxam app