1. Information We Collect
1.1 Information You Provide Directly
When you create an account or use our Service, we may collect:
- Account Information: Your name, email address, and authentication credentials, including information provided through Google OAuth or other social login providers.
- Academic Data: Course schedules, study plans, tasks, notes, goals, and other academic content you create or enter into the platform.
- Preferences: Display settings, notification preferences, theme choices, and other customization options you configure.
- Communications: Any messages, feedback, or support requests you send to us.
1.2 Information Collected Automatically
When you access or use the Service, we automatically collect certain information:
- Usage Data: Pages viewed, features used, interactions performed, timestamps, and navigation paths within the application.
- Device and Browser Information: Device type, operating system, browser type and version, screen resolution, and language preferences.
- Network Information: IP address, approximate geographic location at the city or region level, and internet service provider.
- Referral Data: How you arrived at our Service, such as a search engine, direct link, or referral from another site.
1.3 Cookies and Similar Technologies
We use cookies and similar tracking technologies to operate and improve the Service. Please see our Cookie Policy section below for full details.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To Provide and Maintain the Service: Creating and managing your account, storing your schedules, tasks, and academic data, and delivering core functionality.
- To Improve the Service: Understanding how users interact with features, identifying bugs or performance issues, and developing new functionality based on usage patterns.
- To Personalize Your Experience: Remembering your preferences, displaying relevant content, and tailoring the interface to your needs.
- To Communicate With You: Responding to support requests, sending service-related announcements, and notifying you of important changes to the Service or this policy.
- To Ensure Security and Prevent Abuse: Detecting unauthorized access, preventing fraudulent activity, and enforcing our Terms of Service.
- To Comply With Legal Obligations: Meeting applicable legal, regulatory, or contractual requirements.
3. Data Storage and Infrastructure
3.1 Appwrite Backend
Your account data, schedules, tasks, preferences, and all user-generated content are stored using Appwrite, our backend infrastructure provider. This includes:
- Authentication records, including account credentials and session tokens.
- Database records, including courses, tasks, study plans, notes, and any content you create.
- User preferences and application settings.
- File storage, if you upload any documents or files.
Appwrite stores data on secure servers with encryption at rest and in transit. For more information about Appwrite's security practices, visit appwrite.io/privacy.
3.2 Google Analytics
We use Google Analytics to understand how the Service is used and to improve it. Google Analytics collects:
- Pages you visit and how long you spend on them.
- Features you interact with and actions you take.
- Your device type, browser, operating system, and screen resolution.
- Your approximate geographic location derived from IP address, at the city or region level.
- How you arrived at the Service and where you navigate within it.
Google Analytics uses cookies to distinguish unique users and sessions. On public content, analytics is off until you explicitly allow it. The authenticated application, editor, and administration pages currently use analytics under a separate product analytics configuration and do not display the public-page controls. The data collected is aggregated and used solely to understand usage trends and improve the Service. We do not use Google Analytics to personally identify individual users, and we do not sell personal data.
Google Analytics Choice on Public Pages: Public content provides controls to allow or reject analytics. A rejection does not limit core features and remains effective when you return to public content. You can change your choice at any time through Cookie settings.
For more information about how Google collects and processes data, visit Google's Privacy & Terms page.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service to you:
- Account and User-Generated Data: Retained for as long as your account exists. When you delete your account, your data is removed as described in Section 9.
- Analytics Data: Google Analytics data is retained for 14 months, after which it is automatically deleted from Google's servers.
- Server Logs: Basic server access logs, which may include IP addresses and timestamps, are retained for up to 90 days for security and debugging purposes.
- Backup Data: Deleted data may persist in encrypted backups for up to 30 days before being permanently purged.
7. Your Rights and Choices
Depending on where you live and the law that applies, you may have some or all of the rights below. We will not discriminate against you for exercising an applicable privacy right.
7.1 Access and Export
You may request confirmation that we process your personal data, access to that data, and a copy of it. Where applicable, you may request a portable, machine-readable copy of data you provided to us.
7.2 Correction
If any information we hold about you is inaccurate or incomplete, you can update it directly in your account settings or contact us for assistance.
7.3 Deletion
You may request deletion or erasure of your account and associated data at any time. See Section 9 below for full details on how account deletion works.
7.4 Restriction and Objection
Where applicable, you may ask us to restrict certain processing or object to processing based on legitimate interests, direct marketing, or other grounds recognized by law.
7.5 Withdraw Consent
Where processing is based on consent, you may withdraw it at any time. For public-page analytics, use the persistent Cookie settings control to reject future collection on eligible public content. You may contact us to exercise any applicable objection or withdrawal right concerning other processing. Withdrawal does not affect the lawfulness of processing completed before you withdrew consent.
7.6 Appeals and Other Applicable Rights
Some jurisdictions provide additional rights, including the right to appeal a denied privacy request, opt out of certain sales, sharing, or targeted advertising, and receive information about automated decision-making. We do not sell personal data or use it for targeted advertising. If an additional right applies to you, you may exercise it through the privacy contact below.
7.7 How to Exercise Your Rights
Email our privacy contact at [email protected] and describe your request. We may need to verify your identity before acting. Rights may be limited by lawful exceptions, including security, fraud prevention, legal obligations, and the rights of others. We will respond within the period required by applicable law and explain any denial and available appeal process.
9. Data Deletion and Account Deletion
We believe you should be able to leave any service and take your data with you or have it deleted.
9.1 How to Delete Your Account
You can delete your account by:
- In-App: Navigate to your Account Settings and select "Delete Account."
- By Email: Send a request to [email protected] with the subject line "Account Deletion Request" from the email address associated with your account.
9.2 What Happens When You Delete Your Account
Upon account deletion:
- Immediately Deleted: Your profile information, schedules, tasks, notes, study plans, preferences, and all other user-generated content are permanently removed from our active databases.
- Within 30 Days: Your data is purged from encrypted backup systems.
- Retained Briefly: Anonymized, aggregated analytics data may remain in Google Analytics. Basic server logs containing your IP address are retained for up to 90 days for security purposes before being automatically purged.
9.3 OAuth and Social Login
If you signed up using Google OAuth or another social login provider, deleting your Nest.APStudy account does not delete your account with that provider. To revoke Nest.APStudy's access to your Google account, visit your Google Account Permissions page. We recommend revoking access after deleting your account.
9.4 Exceptions
We may retain limited information beyond the periods described above if required by law or if necessary to prevent fraud or abuse.
10. Security
We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:
- All data is transmitted over HTTPS with TLS encryption in transit.
- Data at rest is encrypted on our backend infrastructure.
- Authentication sessions are managed securely with appropriate expiration policies.
- We regularly review and update our security practices.
However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. Please do not upload highly sensitive personal information such as Social Security numbers, financial account numbers, or medical records to the Service.
If you believe your account has been compromised, contact us immediately at [email protected].
11. Children's Privacy
Nest.APStudy is designed for students and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will take steps to delete such information.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. If we make material changes, we will notify you by posting a prominent notice on the Service or by sending you an email. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
13. Contact Us
For questions, privacy-rights requests, consent withdrawals, or complaints regarding this Privacy Policy, your personal data, or our privacy practices, contact:
Nest.APStudy Privacy Contact: [email protected]
We will respond to all privacy-related inquiries within 30 days.