Privacy Policy

1. Introduction

XenonLabs ("we," "us," or "our") operates the "PinasBIX" mobile application. This Privacy Policy explains how we collect, use, and protect your information when you use our App. By using the App, you agree to the collection and use of your information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

Personal Information

When you sign in for an account, we collect your name and email address through Google Sign-In or Apple Sign-In authentication providers. We do not collect or store your authentication provider passwords.

Usage and Learning Data

As you use the App, we collect data related to your learning activities:

• Quiz and test answers, scores, and completion status
• Flashcard progress and FSRS spaced repetition review schedules
• Lesson completion and study progress
• Mock exam results and session history
• Quick practice session configurations and results
• Study streak and experience points (XP) data
• Pomodoro timer session history and statistics

AI Chat Data

When you use the AI Study Assistant feature, we collect:

• Chat messages and conversation history
• Attachments you send (images, screenshots)
• AI credit usage and token consumption for billing and usage tracking purposes

Device Information

We may collect certain device information, including:

• Device type, operating system version, and app version for compatibility
• Firebase Cloud Messaging (FCM) token for delivering push notifications

User-Generated Content

We collect content you create within the App, including custom flashcard decks, flashcard images, and support ticket messages.

Transaction Information

When you make an in-app purchase, the transaction is processed by the respective app store (Google Play Store or Apple App Store). We do not collect or store your payment card details.

3. How We Use Your Information

We use the collected information for the following purposes:

To Provide and Personalize the Service: Your name is used for personalization within the App and to track your learning progress. Your email address is used for account-related notifications.

To Power AI Features: Your chat messages are processed through our AI Study Assistant (powered by Google Gemini) to provide educational responses and explanations.

To Send Notifications: We deliver daily study reminders, flashcard review alerts, and streak notifications based on your preferences via Firebase Cloud Messaging.

To Improve the App: We use usage data and analytics to understand how users interact with the App and to improve its features.

To Provide Support: We use your information to respond to your support tickets and resolve issues.

To Ensure Security: We use information to detect and prevent unauthorized access or misuse of the App.

4. Third-Party Services

We use the following third-party services that may collect information from you:

Google (OAuth & AI): Authentication via Google Sign-In. AI chat responses are powered by Google Gemini. Google processes your chat messages to generate educational responses.

Apple: Authentication via Apple Sign-In. Apple processes your authentication credentials according to their privacy policy.

Supabase: Cloud database and backend services for data storage, authentication, and real-time features. Your learning data, progress, and account information are stored securely on Supabase infrastructure.

Firebase Cloud Messaging (FCM): Push notification delivery for study reminders and flashcard review alerts. Firebase collects device tokens necessary for notification delivery.

In-App Purchases: All in-app purchases are processed by Google Play Store and the Apple App Store. Your payment information is handled by them, and we do not have access to it.

Each of these services operates under its own privacy policy. We encourage you to review their respective policies.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following circumstances:

• Service Providers: With trusted third-party services listed above, solely to operate the App
• Legal Obligations: When required by law, court order, or government regulation
• Safety: To protect the rights, safety, or property of PinasBIX, our users, or the public
• Aggregated Data: We may share anonymized, aggregated statistics that cannot identify individual users

6. Data Retention

We retain your personal information for as long as your account is active.

Account Deletion: You can delete your account directly within the App. Upon deletion, your name, email, and progress data are deleted immediately.

Retained Data: We will retain a record of your purchases for legal and financial record-keeping purposes.

7. Your Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to:

• Access your personal information
• Correct inaccurate or incomplete data
• Delete your personal information
• Object to processing
• Data portability
• Withdraw consent

To exercise these rights, contact us at xenon.dev.ph@gmail.com

8. Data Security

We implement industry-standard security measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS)
• Row-level security (RLS) policies on all database tables
• Secure authentication via OAuth 2.0 providers
• Role-based access controls limiting data access to authorized personnel

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee its absolute security.

9. Children's Privacy

PinasBIX is designed for students preparing for exams, which may include users under 18. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child under 13 has provided us personal information, please contact us so we can take appropriate action.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Updated at" date at the top of this document and notify you through the App or via email.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us at: