Privacy Policy for recORT

Effective date: September 9, 2026

This Privacy Policy explains how recORT ("recORT," "we," "us," or "our") collects, uses, and protects information when you use our mobile application (the "App") and related services (together, the "Service"). recORT is an exam-preparation platform for students in Kyrgyzstan, providing topic-based tutorials, quizzes, and progress tracking. By registering for or using recORT, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Information You Provide

When you create an account and use recORT, you provide us:

Phone number — used as your login identifier and for account verification/recovery.
Password — stored only as a salted, irreversible hash (argon2); we never store or can view your plaintext password.
Name (first and last name) — optional profile information.
Email address — optional, if provided.
Region, city, and school — selected during registration to route you to the correct content room.
Promo/enrollment code — used to bind your account to your course "room."
Weekly study goal — a preference you set within the app.
Payment information — when purchasing quizzes, payment is processed by our third-party payment provider, Finik/AversPay (see Section 2). recORT does not receive or store your card number, CVV, or full payment credentials — only the transaction result and amount.

1.2 Information Collected Automatically

Quiz & tutorial activity — questions answered, correctness, per-question response time, topics studied, streaks, and completion progress. This is used to compute your study statistics and topic-weakness breakdown.
App usage & session data — login activity, last-active timestamp, session counts, and online status.
Device & app information — app version, device/platform type, and crash diagnostics, collected via Firebase (see Section 2).
Push notification token — a Firebase Cloud Messaging identifier used to deliver notifications to your device, where enabled.

We do not collect: precise/background GPS location, camera or photo-library access, contacts, microphone, or SMS/call-log data. The "region/city" fields above are a self-selected dropdown at registration, not device location tracking.

2. Third-Party SDKs & Services

recORT integrates the following third-party services to operate, secure, and improve the app. Each provider may process limited technical or usage data as described below, governed by their own privacy policies:

Provider	Purpose	Data Involved	Policy
Firebase Analytics	Understand app usage and feature engagement	App interactions, device/app identifiers, usage events	firebase.google.com/support/privacy
Firebase Crashlytics	Crash reporting and stability monitoring	Crash logs, device model/OS version, app state at crash time	firebase.google.com/support/privacy
Firebase Cloud Messaging	Push notifications	Device push token	firebase.google.com/support/privacy
Firebase Remote Config	Feature flags and app configuration delivery	App version, device/config parameters	firebase.google.com/support/privacy
Firebase App Check	Verifies requests originate from our genuine app (anti-abuse)	Device/app integrity attestation tokens	firebase.google.com/support/privacy
Google Cloud Platform (Cloud Run, Cloud SQL, Cloud Storage)	Hosts our backend API, database, and uploaded content (e.g. question images)	All account and app data described in Section 1, while in transit/storage	cloud.google.com/terms/cloud-privacy-notice
Google Gemini API (google-genai)	Internal content-authoring tool used by our staff to help draft practice questions; not exposed to students and does not process student account or activity data	Educational subject-matter text/images supplied by our content team	ai.google.dev/gemini-api/terms
Finik / AversPay	Processes in-app payments for quiz purchases	Payment/transaction details; card data is handled entirely by the provider, not by recORT	averspay.kg

3. How We Use Information

We use the information described above to:

Create and authenticate your account, and bind it to the correct content "room."
Deliver tutorials and quizzes, score your attempts, and record your results.
Compute your personal study statistics — streaks, topic-level accuracy, and progress dashboards.
Process quiz purchases and maintain purchase/entitlement records.
Send service-related push notifications (e.g. study reminders), where enabled.
Maintain security, detect abuse, and enforce our terms.
Diagnose crashes and improve app performance and reliability.
Comply with legal obligations, including financial record-keeping for processed payments.

We do not sell your personal information, and we do not use your quiz answers or study data to serve third-party advertising.

4. Data Retention

Account data (phone, name, email, region/city, school) is retained for as long as your account is active.
Individual quiz attempts are stored for a limited period after submission to support the answer-review feature, then pruned; your durable, aggregated statistics (scores, streaks, topic performance) are retained as your permanent progress record.
Payment/transaction records are retained as required for financial reconciliation and applicable accounting/tax obligations, even after account deletion.
Crash and diagnostic logs collected via Firebase Crashlytics are retained per Google's Firebase retention schedule.
When you delete your account (Section 6), your personal profile and study data are deleted from our production database, except records we are legally required to retain (e.g. completed payment transactions).

We do not sell or rent your personal information. We share data only with:

Service providers listed in Section 2, strictly to operate the app (hosting, crash reporting, push delivery, payment processing).
Your course provider/institution, in aggregate or individual form, where your account is enrolled in their "room," for the purpose of administering that course.
Legal authorities, if required to comply with a legal obligation, court order, or to protect the rights, safety, or property of recORT, our users, or the public.
A successor entity, in the event of a merger, acquisition, or sale of assets, subject to this policy continuing to govern your data.

6. Account & Data Deletion

You can permanently delete your account and associated data directly within the app — no separate web request is needed.

Open recORT → go to Settings → select "Удалить аккаунт" (Delete Account) → re-enter your password to confirm. This immediately and permanently deletes your account and personal profile data from our systems.

If you are unable to access the app, you may request deletion by contacting us at recort.support@gmail.com from the email or phone number associated with your account, and we will verify your identity and process the deletion request.

Note: some information — such as completed payment/transaction records — may be retained after account deletion where we are legally required to keep financial records, as described in Section 4.

7. Data Security

We apply industry-standard safeguards to protect your information, including password hashing (argon2), encrypted connections (TLS) between the app and our servers, and access-controlled cloud infrastructure (Google Cloud). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

recORT is intended for secondary-school and university-entrance exam preparation and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at recort.support@gmail.com and we will take steps to delete such information.

9. Your Choices & Rights

You may review and update your profile information within the app.
You may disable push notifications via your device's app settings.
You may request a copy of, correction to, or deletion of your personal data by contacting us at recort.support@gmail.com.
You may delete your account at any time as described in Section 6.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Effective date" at the top of this page, and, where appropriate, communicated in-app. Continued use of recORT after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, contact us at:

Email: recort.support@gmail.com