Privacy Policy

Effective Date: July 2026

1. Information We Collect

When you register for and use Smart Bio Notes, we collect information you provide directly to us. This includes your name, email address, password hash, and optionally your phone number. We also collect granular usage data, including but not limited to:

Quiz scores and active-recall performance data
Chapter mastery progress and study habits
Time spent on specific modules

2. Advanced IP and Device Tracking

To maintain the integrity of our platform and enforce our strict anti-sharing policies, we automatically collect and log security-related data. This includes your IP addresses, browser fingerprints, device types, and login timestamps. This data is rigorously analyzed to enforce device limits and prevent unauthorized access.

3. Payment Data Security

All financial transactions are processed securely through our authorized payment gateway, Razorpay. We do not process, store, or have direct access to your credit card numbers, CVV codes, or raw financial data on our servers. Razorpay's handling of your financial information is subject to their own strict privacy policies.

4. How We Use Your Information

We leverage the data we collect for the following purposes:

To provide, personalize, and optimize your educational experience
To calculate spaced repetition algorithms specific to your learning curve
To enforce security protocols and prevent account abuse
To process transactions and send automated billing receipts
To communicate with you regarding updates, security alerts, and administrative messages

5. Data Sharing & Third-Party Services

We respect your privacy and do not sell, trade, or rent your personal information to third-party marketers. Data may be shared strictly with authorized infrastructure providers (such as Supabase for database hosting and Vercel for application delivery) exclusively for the purpose of maintaining the Service.

6. Data Retention and Security

We implement robust, industry-standard security measures, including HTTPS encryption and secure JWT authentication, to protect your personal information. However, no electronic storage system is completely impenetrable. We retain your data for as long as your account is active or as needed to provide you the Service and comply with our legal obligations.

7. Contacting Us

If you have any questions or concerns regarding this Privacy Policy or the handling of your data, please contact our support team through the main platform dashboard.