Privacy Policy

1. Introduction

XenonLabs ("we," "us," or "our") operates PinasBIX as a mobile application and a web platform (app.pinasbix.xenonlabs.dev). This Privacy Policy explains how we collect, use, and protect your information when you use our Service. By using the Service, you agree to the collection and use of your information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

Personal Information

When you sign in for an account, we collect your name and email address through Google Sign-In or Apple Sign-In authentication providers. We do not collect or store your authentication provider passwords.

Usage and Learning Data

As you use the App, we collect data related to your learning activities:

• Quiz and test answers, scores, and completion status
• Flashcard progress and FSRS spaced repetition review schedules
• Lesson completion and study progress
• Mock exam results and session history
• Quick practice session configurations and results
• Study streak and experience points (XP) data
• Pomodoro timer session history and statistics

AI Chat Data

When you use the AI Study Assistant feature, we collect:

• Chat messages and conversation history
• Attachments you send (images, screenshots)
• AI credit usage and token consumption for billing and usage tracking purposes

Device Information

We may collect certain device information, including:

• Device type, operating system version, and app version for compatibility
• Firebase Cloud Messaging (FCM) token for delivering push notifications

User-Generated Content

We collect content you create within the App, including custom flashcard decks, flashcard images, and support ticket messages.

Transaction Information

When you make a purchase, the transaction is processed by the payment provider applicable to your platform:

• iOS: Apple App Store (in-app purchase)
• Android: Google Play Store (in-app purchase)
• Web: A third-party payment gateway

We do not collect or store your payment card details regardless of platform.

3. How We Use Your Information

We use the collected information for the following purposes:

To Provide and Personalize the Service: Your name is used for personalization within the App and to track your learning progress. Your email address is used for account-related notifications.

To Power AI Features: Your chat messages are processed through our AI Study Assistant to provide educational responses and explanations.

To Send Notifications: We deliver daily study reminders, flashcard review alerts, and streak notifications based on your preferences via Firebase Cloud Messaging.

To Improve the App: We use usage data and analytics to understand how users interact with the App and to improve its features.

To Provide Support: We use your information to respond to your support tickets and resolve issues.

To Ensure Security: We use information to detect and prevent unauthorized access or misuse of the App.

4. Third-Party Services

We use trusted third-party services to operate the App. These services may collect information as described below and each operates under its own privacy policy.

Authentication

Sign-in is handled by Google (Google Sign-In) and Apple (Apple Sign-In). These providers process your authentication credentials. We do not receive or store your passwords.

AI Features

The AI Study Assistant sends your chat messages to a third-party AI provider to generate educational responses.

Payments & Subscriptions

Mobile in-app purchases are processed by the Apple App Store (iOS) and Google Play Store (Android). Web purchases are processed by Xendit. Subscription entitlements on mobile are managed by RevenueCat, which receives your purchase receipts to verify and activate premium access. We do not receive or store your payment card details.

Cloud Infrastructure & Notifications

We use cloud infrastructure providers for data storage, real-time features, and push notification delivery (study reminders and flashcard alerts). These providers store your learning data and account information securely, and may collect device tokens necessary for notification delivery.

Error Monitoring

We use an error monitoring service to capture application errors and crashes. It may collect device information, app version, and anonymous user identifiers to help us diagnose issues. No personally identifiable content from your study sessions is included in error reports.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following circumstances:

• Service Providers: With trusted third-party services listed above, solely to operate the App
• Legal Obligations: When required by law, court order, or government regulation
• Safety: To protect the rights, safety, or property of PinasBIX, our users, or the public
• Aggregated Data: We may share anonymized, aggregated statistics that cannot identify individual users

6. Data Retention

We retain your personal information for as long as your account is active.

Account Deletion: You can delete your account directly within the App. Upon deletion, your name, email, and progress data are deleted immediately.

Retained Data: We will retain a record of your purchases for legal and financial record-keeping purposes.

7. Your Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to:

• Access your personal information
• Correct inaccurate or incomplete data
• Delete your personal information
• Object to processing
• Data portability
• Withdraw consent

To exercise these rights, contact us at support-pinasbix@xenonlabs.dev

8. Data Security

We implement industry-standard security measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS)
• Access controls to protect your data at rest
• Secure authentication via trusted OAuth 2.0 providers
• Restricted data access limited to authorized personnel

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee its absolute security.

9. Children's Privacy

PinasBIX is designed for students preparing for exams, which may include users under 18. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child under 13 has provided us personal information, please contact us so we can take appropriate action.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Updated at" date at the top of this document and notify you through the App or via email.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us at: