Privacy Policy — Pariksha 360 Android App

App: Pariksha 360 (package name: app.pariksha360.android)
Developer: Pariksha 360
Effective date: 25 April 2026
Last updated: 25 April 2026

This privacy policy applies specifically to the Pariksha 360 Android application distributed via the Google Play Store. It describes the data the app collects, how that data is used, who it is shared with, how long it is retained, the permissions the app requests, and how you can delete your account and data.

1. Data the app collects

1.1 Personal information you provide

Name — required at signup. Used to address you within the app and on guardian reports.
Email address — required. Serves as your account identifier and is used for password reset and important account notifications.
Phone number — optional. Used for OTP verification and parent / guardian notifications when configured.
Demographics — gender, city, state, exam category. All optional. Used for cohort-level analytics and to suggest relevant exam categories.
Document scans — only when you actively use the in-app document scanner. The scanned PDF is stored against your account on our servers for OCR and categorisation.

1.2 Data the app collects automatically

Persistent device identifier — a stable identifier derived from Android's installation ID and hardware fingerprint. Used to enforce per-account device limits (maximum 5 devices per user) and to detect account abuse and multi-trial fraud. Resets when you uninstall and reinstall the app.
IP address at signup and email verification — recorded for security audit purposes only.
App activity — questions you answer, content you read, screen views, time spent on study sessions. Used to recommend the right next topic, track progress, and compute mastery scores.
Crash reports and diagnostic data — stack traces, device model, OS version, app version, breadcrumb log of recent screen transitions. Sent to Firebase Crashlytics and Sentry. Includes the user's account identifier so we can correlate a crash to a specific user when investigating a reported problem.
Push notification token — issued by Firebase Cloud Messaging when you allow notifications. Used solely to deliver study reminders and exam-related push notifications.

1.3 Data the app does NOT collect

Precise or approximate location.
Audio recordings or microphone access.
Photos or videos from your device gallery.
Camera access by the host application. The optional document scanner is delivered by the Google Play Services Document Scanner module, which runs in a separate Google process and returns only the scanned file.
Contacts, calendar entries, SMS, or call logs.
Web browsing history.
Android Advertising ID. The app explicitly suppresses the AD_ID, ACCESS_ADSERVICES_AD_ID, and ACCESS_ADSERVICES_ATTRIBUTION permissions.
Financial information of any kind. The app contains no payments or in-app purchases.

2. How the app uses your data

To provide the service: render content, save your progress, sync across your devices.
To personalise your learning: recommend topics, surface weak areas, schedule revisions.
For account security: enforce device limits, detect abuse, send alerts about new sign-ins.
To communicate with you: password resets, exam updates, study reminders. Any notification category can be disabled in app Settings.
To diagnose problems: investigate crashes and performance issues.

3. Data sharing

The app shares limited data with the following third-party processors:

Processor	Data shared	Purpose
Firebase Analytics (Google)	Screen views, custom events, account ID	Usage analytics for product improvement
Firebase Crashlytics (Google)	Crash stacks, device model, account ID	Crash diagnostics
Firebase Cloud Messaging (Google)	Push notification token, account ID	Deliver push notifications
Sentry	Crash stacks, breadcrumbs, account ID	Crash diagnostics
Google Fonts CDN	Anonymous HTTPS request to fonts.gstatic.com for font files. No account information is sent.	Render text in the app's typeface; cached on device after first download
Google Calendar API	Only when you explicitly opt in. Calendar events you choose to sync.	Sync your study plan to your selected Google Calendar

The app does not sell user data. The app does not share user data with advertising networks. The app does not contain advertisements.

4. Android permissions used

Permission	Why the app needs it
INTERNET	Network access for the API backend.
ACCESS_NETWORK_STATE	Detect online or offline state for offline-first features.
POST_NOTIFICATIONS	Required on Android 13 and above to display study reminders and push notifications.
RECEIVE_BOOT_COMPLETED	Re-arm scheduled daily reminders after the device reboots.
USE_BIOMETRIC	Optional App Lock that uses your device biometric or PIN.
WAKE_LOCK, VIBRATE	Required by Firebase Cloud Messaging and the local notifications system to deliver and signal incoming notifications.

The app does not request location, camera, microphone, contacts, SMS, call log, accessibility service, or background location permissions.

5. Data security

All API traffic is encrypted in transit using HTTPS / TLS.
The local database on your device is encrypted with SQLCipher; the encryption key is stored in Android Keystore.
Authentication tokens are stored using Android Keystore via the flutter_secure_storage library.
Optional App Lock (biometric or PIN) is available in Settings.
Android Auto Backup is disabled for this app. Your data is not copied to your Google Drive. The authoritative copy lives on our servers and is restored by signing in on a new device.
Backend follows the Mobile Application Security Verification Standard (MASVS) for storage, cryptography, and authentication.

6. Data retention

While your account is active: data is retained until you ask us to delete it.
After deletion request: your account enters a 30-day grace period during which signing back in restores the account. After 30 days, a daily background job permanently strips your name, email, phone, devices, mastery state, notes, and other personal information. Your answer history and study telemetry are anonymised (the link to your identity is severed) so we can keep aggregate question-quality statistics without retaining anything that identifies you.
Server logs and backups are rolled and purged on a 30-day cycle.

7. How to delete your account

You can delete your account in two ways:

From inside the app — open Settings, scroll to the bottom, tap "Delete Account", confirm with your current password and the acknowledgement checkbox.
From the web — visit pariksha360.app/account/delete and submit a request with the email address registered to your account. We process every web request within 7 calendar days.

Once you confirm deletion, the app signs you out, your push notifications stop immediately, and all your registered devices are removed. Your account enters the 30-day grace period described in section 6.

8. Children

This app is intended for users 13 years of age and older. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, write to [email protected] and we will delete the account.

9. Your rights

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data. Most fields can be edited from Settings, Edit Profile.
Erase your account and personal data using either method described in section 7.
Withdraw consent for any optional data processing (notifications, analytics, calendar sync) by toggling the corresponding setting.
Lodge a grievance. Email [email protected] with subject "Grievance" and we will respond within 30 days as required by law.

10. Changes to this policy

We will post any updates to this page and adjust the "Last updated" date. Material changes — new categories of data we collect or new third-party processors — will be surfaced in the app on next launch.

11. Contact

Questions, requests, or grievances regarding this Android app and your data: [email protected]