Privacy Policy

1. Who We Are

Schlora ("we", "our", "us") is an AI-powered exam preparation platform for Indian school students (Class 6–12, CBSE & ICSE). This Privacy Policy explains how we collect, use, and protect your information when you use our service at examready-gamma.vercel.app.

2. Information We Collect

• Account information: Parent's name, email address, and password (hashed via Supabase Auth).
• Child profiles: Child's name, grade, and PIN set by the parent. We do not collect children's email addresses.
• Usage data: Practice sessions, question attempts, scores, and subject/chapter selections.
• Device data: Browser type, device type, and session identifiers for session continuity.
• Communication: Emails you send us for support or special pricing requests.

3. How We Use Your Information

• To provide and improve the Schlora service.
• To generate personalised practice questions using AI.
• To send weekly progress reports to parents (if opted in).
• To manage your subscription and billing.
• To respond to support requests.

4. Data Storage & Security

Your data is stored securely in Supabase (PostgreSQL), hosted on AWS infrastructure. The application is deployed on Vercel. We use industry-standard encryption for data in transit (TLS) and at rest. Passwords are never stored in plain text.

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the following third-party service providers who assist in operating our platform:

• Supabase — database and authentication
• Vercel — hosting and deployment
• OpenAI — AI question generation and evaluation (chapter text and student answers are processed; no personal identifiers are sent)
• Resend — transactional email delivery

6. Children's Privacy

Schlora is designed for use by parents on behalf of their children. Child accounts are created and managed entirely by parents. We do not knowingly collect direct personal information from children. Parents are responsible for the accuracy of child profile information and for appropriate use of child accounts.

7. Cookies

We use cookies and local storage tokens solely for authentication session management. We do not use tracking cookies or third-party advertising cookies.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. Upon account deletion, your data and all associated child profiles are permanently removed within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of the service after changes constitutes acceptance of the revised policy.

10. Contact Us

For any privacy-related questions or data requests, email us at mail2pranav02@gmail.com.