Privacy Policy

1. Information We Collect

Account Information

When you create an account (via email/password or Google Sign-In), we collect:

• Email address: Used for account authentication and important notifications
• Display name: Shown to friends on the leaderboard
• Password: Securely hashed and never stored in plain text (email/password accounts only)
• Google account info: If you sign in with Google, we receive your email address and display name from Google. We do not access your Google contacts, files, or any other Google data.

Third-Party Authentication

We offer Google Sign-In as a convenient login option. When you use Google Sign-In:

• We only request your basic profile information (email and name)
• We do not access your Google Drive, Gmail, Calendar, or any other Google services
• Your Google account password is never shared with us — authentication is handled securely by Google
• You can revoke Fakarny's access to your Google account at any time via your Google Account permissions

Study Data

To provide the spaced repetition service, we store:

• Lecture titles, subjects, and descriptions you create
• Review history and performance ratings
• Study statistics (streaks, XP, review counts)
• Exam dates and linked lectures
• Calendar events you create

Social Features

If you use social features, we collect:

• Friend connections (stored as user ID pairs)
• Activity data visible to friends
• Messages sent to other users

Technical Data

We automatically collect:

• Device type and browser information
• IP address (for security and rate limiting)
• Access timestamps

2. How We Use Your Information

We use your data to:

• Provide the Service: Calculate optimal review schedules, track your progress, and sync across devices
• Enable Social Features: Show leaderboards, connect friends, and display activity feeds
• Improve the Product: Analyze aggregate usage patterns to enhance the learning algorithm
• Communicate: Send important account notifications and optional study reminders
• Ensure Security: Detect and prevent abuse, unauthorized access, and fraud

3. Data Sharing

We do NOT sell your personal information. We only share data in these limited circumstances:

• With Your Consent: Friends you add can see your display name, streak, and XP on leaderboards
• Service Providers: We use Supabase for database and authentication services, and Google for optional third-party sign-in
• Legal Requirements: If required by law or to protect our rights

4. Data Security

We implement industry-standard security measures:

• All data transmitted over HTTPS (TLS encryption)
• Passwords hashed using bcrypt
• Row Level Security (RLS) in our database ensures users can only access their own data
• JWT tokens for authentication with automatic expiration
• Rate limiting to prevent abuse

5. Your Rights

You have the right to:

• Access: View all data we store about you
• Update: Modify your profile and study data
• Delete: Request deletion of your account and associated data
• Export: Download your data in a portable format
• Opt-out: Hide yourself from global leaderboards

To exercise these rights, contact us at the email below.

6. Cookies & Local Storage

We use:

• Authentication tokens: Stored in local storage to keep you logged in
• Preferences: Your settings (like theme) stored locally
• Analytics: We use Vercel Analytics for basic usage statistics (no personal data)

7. Children's Privacy

Fakarny is designed for university students. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

8. Changes to This Policy

We may update this policy from time to time. We'll notify you of significant changes via email or in-app notification. Continued use after changes constitutes acceptance.

9. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us: