Privacy Policy

Effective Date: January 1, 2026

PG PathScheduler ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). We adhere to the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India).

1. Information We Collect

A. Personal Data
We use Google Sign-In for authentication. We strictly collect only:

• Basic Profile Info: Name, Email Address, and Profile Picture (provided by Google).
• User ID: A unique identifier to link your data.
• Guest Mode: If you choose "Continue as Guest", we do not collect your name, email, or profile picture. You remain anonymous until you choose to link a Google account. All study data created in Guest Mode is associated with an anonymous ID.

B. User-Generated Content
To provide the core functionality of the App, we process data you create:

• Study Data: Timetables, completion status, and study streaks.
• Learning Data: Flashcard progress (FSRS stability/difficulty), Quiz scores, and Bookmarks.
• Notes & Media: Personal notes, Voice recordings (audio files), and uploaded/scanned diagrams.

C. Device & Usage Data

• Local Storage: Your QBank progress and offline notes are stored locally on your device using portable databases (SQLite) and Shared Preferences.
  Note: Data stored locally on your device is subject to your device's security settings (e.g., screen lock, disk encryption). You are responsible for securing your physical device.
• Analytics: We use Firebase Analytics to collect aggregated and pseudonymous usage data (such as screen views and crash reports). This data does not directly identify you.

2. How We Use Your Information

• Service Provision: To sync your notes and progress across multiple devices.
• Personalization: To calculate your Rank Prediction, suggest weak topics, and schedule Flashcards.
• Communication: To send critical account updates (we do not stream spam or ads).

3. Information Sharing & Disclosure

• No Sale of Data: We do not sell, trade, or rent Users' personal identification information to others.
• Cross-Border Data Transfer: Your data may be processed and stored on servers located outside India (e.g., Google Firebase global infrastructure). We ensure such transfers comply with applicable Indian data protection laws.
• Third-Party Services:
  • Google Sign-In: Google's use of your data is governed by their Privacy Policy.
  • Google Firebase (USA/Global): For Auth, Database (Firestore), and Storage. Data is encrypted in transit (TLS) and at rest (AES-256).
  • Google Gemini API: For generating AI-enhanced explanations. Quiz questions (content only, no PII) are sent to Google's servers for processing. The "AI can make mistakes" disclaimers are prominently displayed to remind users to verify information.
  • Google ML Kit: For OCR (Text Recognition). This occurs on-device; no image data is sent to Google servers for this purpose.
  • MedMCQA: We use the open-source MedMCQA dataset. No user data is shared with them.

4. Sensitive Personal Data (SPDI)

We do NOT collect financial data, health records, or biometric data.

• Voice Notes: If you use the voice recording feature, these audio files are considered personal content. They are encrypted and stored privately in your Firebase Storage bucket.

5. Data Retention & Deletion

• Retention: Data is retained as long as your account is active.
• Deletion: You can delete your account permanently via Settings > Delete Account.
  • Grace Period: Data enters a 30-day recovery window.
  • Permanent Wipe: After 30 days, all data is irretrievably erased from our servers.

6. Children's Privacy

This App is intended for medical professionals and aspirants. We do not knowingly collect data from children under 18. If we discover that a user is under 18, we will promptly delete the account and associated data.

7. Your Rights

• Right to Access: View all your synced data within the app.
• Right to Correction: Update your profile or notes at any time.
• Right to Erasure: Delete your account and all associated data.

8. Contact Grievance Officer

For privacy concerns, contact our Grievance Officer. We will respond to grievance requests within 7 working days.