← Back to Home

Privacy Policy for MECE Guru

Effective Date: [DATE] Last Updated: [DATE]

1. Introduction

Welcome to MECE Guru ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application MECE Guru (the "App").

Contact Information:

  • Company: [Company Name]
  • Email: [Email Address]
  • Website: https://mece.guru
  • Data Protection Officer: [DPO Contact Information, if applicable]

By using our App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not use our App.

2. Age Requirements

Our App is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13 years of age. If you are a parent or guardian and believe we have collected information from a child under 13, please contact us immediately at [Email Address].

3. Information We Collect

3.1 User Profile Data

We collect the following profile information:

  • User ID - Automatically generated unique identifier
  • Username - Optional
  • Full Name - Optional
  • Email Address - Optional (may be collected from OAuth providers if used)
  • Avatar URL - Optional
  • Premium Status - Boolean flag for subscription status
  • Account Timestamps - Creation and last update times

3.2 Performance and Learning Data

We track your learning progress including:

  • Session Statistics:

    • Total sessions completed
    • Total questions answered
    • Correct answers count
    • Accuracy percentages
    • Time spent (in milliseconds)

  • Progress Tracking:

    • Current and best streaks
    • Last activity timestamps
    • Drill session records (category, mode, scores, timestamps)
    • Case session records (category, mode, scores, timestamps)
    • Individual question and answer records

3.3 Device Information

We collect device-related information:

  • Device ID - UUID generated locally on your device
  • Device Type - iOS or Android
  • Platform/OS Version
  • Device Name/Model
  • Last Active Timestamp

3.4 Voice Data

If you use voice features:

  • Voice Session Transcripts - Stored in txt, json, vtt, and srt formats
  • Storage Limit - Maximum 10MB per transcript
  • Storage Location - Supabase cloud storage

3.5 Payment Information

  • We do NOT store credit card or payment details directly
  • Payment processing is handled by Adapty
  • We maintain records of:
    • Purchase history
    • Transaction IDs
    • Premium access status

3.6 Public Profile Data

If you participate in public features:

  • Leaderboard Rankings
  • Achievement Unlocks
  • Public Profile Information (if you choose to make your profile public)

4. How We Use Your Information

We use your information to:

  • Provide Core Services: Enable app functionality and deliver practice sessions
  • Track Progress: Monitor your learning journey and provide performance insights
  • Process Payments: Manage premium subscriptions through Adapty
  • Improve Services: Analyze usage patterns to enhance the app experience
  • Customer Support: Respond to inquiries and provide assistance
  • Security: Detect and prevent fraud or unauthorized access
  • Legal Compliance: Meet legal obligations and enforce our terms

5. Information Sharing and Third-Party Services

We share your information with the following service providers:

5.1 Infrastructure and Storage

  • Supabase (AWS Infrastructure) - Stores all user data securely in the cloud

5.2 Payment Processing

  • Adapty - Processes subscriptions and purchases
    • We share: User ID and purchase data
    • We do NOT share: IDFA or IP addresses

5.3 AI Services

  • ElevenLabs - Processes voice audio for voice features
  • OpenAI - Evaluates practice responses for scoring

5.4 Error Monitoring

  • Sentry - Error logging (currently disabled, may be enabled in future)

We do NOT:

  • Sell your personal information to third parties
  • Share your data for advertising purposes
  • Use third-party analytics services

6. Data Storage and Retention

6.1 Storage Locations

  • Cloud Storage: User data stored in Supabase (AWS infrastructure)
  • Local Storage: AsyncStorage on your device for:
    • User profiles
    • Statistics
    • Session data
    • Preferences
    • Device UUID (persists until app uninstall)

6.2 Retention Period

  • Active Accounts: Data retained while account is active
  • Inactive Accounts: No automatic deletion policy
  • Voice Transcripts: Stored permanently unless deletion requested
  • Deletion Requests: Data deleted within 30 days of verified request

7. Your Rights and Choices

7.1 Universal Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Delete your account and associated data
  • Data Portability - receive your data in a structured format
  • Opt-out of non-essential data processing
  • Withdraw Consent at any time

7.2 GDPR Rights (EU Residents)

Additional rights include:

  • Object to processing based on legitimate interests
  • Restrict processing under certain circumstances
  • Lodge a Complaint with your local data protection authority
  • Automated Decision-Making - right not to be subject to automated decisions

7.3 CCPA Rights (California Residents)

California residents have the right to:

  • Know what personal information is collected, used, shared, or sold
  • Delete personal information held by us
  • Opt-out of sale of personal information (we do not sell data)
  • Non-discrimination for exercising privacy rights
  • Authorized Agent - designate an agent to make requests on your behalf

7.4 How to Exercise Your Rights

To exercise any of these rights, contact us at:

  • Email: [Email Address]
  • Response Time: Within 30 days of receipt

8. Security Measures

We implement appropriate technical and organizational measures:

  • Encryption: HTTPS for all API communications
  • Access Control: Supabase Row Level Security (RLS)
  • Authentication: Anonymous authentication by default, OAuth optional
  • Token Security: Secure token storage
  • Data Minimization: No collection of IDFA or IP addresses
  • Regular Reviews: Security practices reviewed periodically

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside your jurisdiction. We ensure appropriate safeguards are in place for international transfers in compliance with applicable laws.

10. Cookies and Tracking

  • Cookies: Minimal use, primarily for app-based storage
  • Analytics: Only internal analytics, no third-party tracking
  • Advertising: No advertising networks or tracking pixels
  • Do Not Track: We honor Do Not Track signals

11. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

  • Updating the "Last Updated" date
  • In-app notifications for significant changes
  • Email notification (if email provided)

Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions, concerns, or requests regarding this Privacy Policy:

Email: [Email Address] Website: https://mece.guru Mailing Address: [Company Name] [Street Address] [City, State/Province, Postal Code] [Country]

Data Protection Officer: [If applicable] [DPO Email] [DPO Phone]

13. Legal Basis for Processing (GDPR)

We process personal data based on:

  • Consent: For optional features and marketing communications
  • Contract: To provide services you've requested
  • Legitimate Interests: To improve services and ensure security
  • Legal Obligation: To comply with applicable laws

14. Data Protection Measures for Children

Although our service is for users 13+, we implement additional safeguards:

  • No targeted advertising to minors
  • Parental consent mechanisms where required
  • Limited data collection from users under 18
  • Enhanced privacy defaults for younger users

15. Dispute Resolution

Any disputes arising from this Privacy Policy will be resolved through:

  1. Good faith negotiations
  2. Mediation (if negotiations fail)
  3. Binding arbitration (as last resort)

Governing Law: [Specify Jurisdiction]

Acknowledgment

By using MECE Guru, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

Privacy Policy Version: 1.0 Document ID: [Generate unique ID]