गोपनीयता नीति

अंतिम अपडेट: January 30, 2026

Privacy Policy for Binge Study

Last Updated: January 30, 2026

Effective Date: January 30, 2026

1. Introduction and Data Controller

Binge Study ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

Data Controller:
Arseniy Arsentyev PE
Email: ars.arsentyev@gmail.com
Website: https://bingestudy.app

This policy applies to all users of the App, including users in the European Economic Area (EEA), United Kingdom, California, and worldwide.

2. Information We Collect

2.1 Information You Provide Voluntarily

Data Type Description Storage Location
Profile Information Optional name and profile photo Device only (local storage)
Study Materials Documents, images, and text you upload for generating study questions Processed by AI, not permanently stored on servers
Exam Information Exam names, dates, subtopics, and study preferences you create Device only (local storage)
User Preferences Language settings, notification preferences, sound/haptic settings Device only (local storage)

2.2 Information Collected Automatically

Data Type Description Purpose
Anonymous User ID Randomly generated identifier via Firebase Authentication App functionality
Hashed Device Identifier One-way hash of your device ID Referral system fraud prevention
Usage Data Study sessions, quiz performance, accuracy rates, streaks, achievements, XP Personalized learning experience
Device Information Device type, operating system, OS version, platform App compatibility and analytics
App Interactions Features used, buttons clicked, screens viewed Analytics and improvement

Important: We use anonymous authentication only. We do not collect your email address, phone number, or password.

2.3 Information from Third Parties

Source Data Type Purpose
RevenueCat Subscription status, purchase history, plan type Subscription management
App Store/Google Play Purchase confirmation Payment processing

3. How We Use Your Information

We process your data based on the following legal bases (for GDPR compliance):

Purpose Data Used Legal Basis (GDPR)
Provide AI-powered question generation Study materials, topics, prompts Contract performance
Personalize learning with adaptive difficulty Performance metrics, response times Contract performance
Track study progress and achievements Sessions, accuracy, streaks, XP Contract performance
Process subscription payments Purchase data via RevenueCat Contract performance
Send study reminders and notifications Notification preferences Consent (opt-in)
Improve app through analytics Usage patterns, feature interactions Legitimate interests
Prevent referral system fraud Hashed device identifier Legitimate interests
Ensure app security and stability Device info, crash data Legitimate interests

4. Automated Decision-Making and AI

4.1 AI-Powered Question Generation

We use Google's Gemini AI (via Firebase Vertex AI) to generate study questions based on the topics and materials you provide. This processing:

  • Uses your input text/prompts to generate educational content
  • Does not make decisions that produce legal or similarly significant effects on you
  • Does not profile you for marketing purposes
  • Processes data on Google's servers in accordance with Google's Privacy Policy

4.2 Adaptive Difficulty System

Our app automatically adjusts question difficulty based on your performance metrics (accuracy, response times). This is designed to optimize your learning experience and:

  • Does not make decisions with legal or significant effects
  • Can be influenced by your study choices
  • Uses only your performance data within the app

Your Rights: Under GDPR Article 22, you have the right to request human intervention, express your point of view, and contest any automated decision. Contact us at ars.arsentyev@gmail.com to exercise these rights.

5. Data Sharing and Third Parties

We share data with the following third-party service providers:

5.1 Firebase (Google)

  • Services Used: Authentication, Realtime Database, Vertex AI (Gemini), App Check
  • Data Shared: Anonymous user ID, hashed device ID, referral codes, study prompts
  • Privacy Policy: https://firebase.google.com/support/privacy

5.2 Mixpanel

  • Services Used: Analytics and usage tracking
  • Data Shared: App events, device type, OS version, subscription status, aggregated usage metrics
  • Privacy Policy: https://mixpanel.com/legal/privacy-policy/
  • Opt-Out: You can opt out of analytics tracking in the app settings

5.3 RevenueCat

  • Services Used: Subscription and in-app purchase management
  • Data Shared: Purchase data, subscription status, anonymous user ID
  • Privacy Policy: https://www.revenuecat.com/privacy
  • Note: We do not store your payment card details. All payment processing is handled by Apple/Google and RevenueCat.

5.4 Apple App Store / Google Play Store

  • Services Used: App distribution, in-app purchases
  • Data Shared: Purchase transactions
  • Privacy Policies: Apple | Google

We do not sell your personal information to third parties.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our third-party service providers operate.

For EEA/UK Users: When we transfer your data outside the EEA/UK, we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions where applicable
  • The service providers' certification under recognized frameworks

Our third-party providers (Google/Firebase, Mixpanel, RevenueCat) maintain appropriate safeguards for international data transfers as detailed in their respective privacy policies.

7. Data Retention

We retain your data for the following periods:

Data Type Retention Period
Account data While your account is active, plus 30 days after deletion request
Study progress and achievements Retained until you request deletion
Locally cached offline data Automatically expires after 90 days
Analytics data (Mixpanel) Per Mixpanel's retention policy (up to 5 years)
Subscription data (RevenueCat) Per RevenueCat's retention policy
Hashed device ID (referrals) Retained to prevent repeat fraud
AI processing data Not retained; processed in real-time only

Local Storage: Most of your data (profile, exams, settings, study progress) is stored only on your device. Uninstalling the app will delete this data.

8. Your Privacy Rights

8.1 Rights for All Users

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Opt out of analytics tracking (via app settings)
  • Export your study data

8.2 European Economic Area (EEA) and UK Rights (GDPR)

If you are in the EEA or UK, you have additional rights under the General Data Protection Regulation:

  • Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format (JSON)
  • Right to Restrict Processing: Request limitation of processing in certain circumstances
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time (for consent-based processing)
  • Right to Lodge a Complaint: File a complaint with your local data protection authority

Data Protection Authorities:

8.3 California Residents (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

Right to Know:

  • Categories of personal information collected (see Section 2)
  • Sources of personal information (see Sections 2.1-2.3)
  • Business purposes for collection (see Section 3)
  • Categories of third parties with whom we share data (see Section 5)

Right to Delete: Request deletion of your personal information.

Right to Correct: Request correction of inaccurate personal information.

Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising.

Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by CCPA (such as Social Security numbers, financial account information, precise geolocation, or health data).

Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Authorized Agents: You may designate an authorized agent to make requests on your behalf.

8.4 Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals. If your browser or device sends a GPC signal, we will treat it as a valid opt-out request for:

  • Analytics tracking (Mixpanel)
  • Any future sale or sharing of personal information (though we currently do not sell data)

To enable GPC, visit https://globalprivacycontrol.org for compatible browsers and extensions.

8.5 How to Exercise Your Rights

To exercise any of these rights, contact us at:

We will respond to verifiable requests within:

  • 45 days for CCPA requests (extendable by 45 days if necessary)
  • 30 days for GDPR requests (extendable by 60 days for complex requests)

9. Data Security

We implement appropriate technical and organizational measures to protect your information:

  • Anonymous authentication (no passwords stored)
  • Hashed device identifiers (one-way encryption)
  • Secure HTTPS connections for all data transmission
  • Firebase App Check for API security
  • Local encryption for cached offline data

While we strive to protect your data, no method of electronic transmission or storage is 100% secure.

10. Device Permissions

The App may request the following permissions:

Permission Platform Purpose Required?
Camera iOS, Android Scan exam documents and study materials Optional
Photo Library iOS, Android Import documents and images for study Optional
Notifications iOS, Android Send study reminders and streak alerts Optional

You can manage these permissions in your device settings at any time. Denying permissions will not affect core app functionality but may limit certain features.

11. Children's Privacy (COPPA Compliance)

Binge Study is designed for users aged 13 and older. We do not knowingly collect personal information from children under 13 years of age.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at ars.arsentyev@gmail.com. We will promptly delete such information.

If we discover we have collected personal information from a child under 13, we will delete that information immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes:

  • We will update the "Last Updated" date at the top of this policy
  • We will notify you through the app or by other appropriate means
  • We will obtain your consent where required by law

We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Arseniy Arsentyev PE

For GDPR-related inquiries, you may also contact your local data protection authority.

Appendix: Categories of Personal Information (CCPA Disclosure)

Under CCPA, we collect the following categories of personal information:

Category Collected Examples
A. Identifiers Yes Anonymous user ID, hashed device ID
B. Personal Information (Cal. Civ. Code § 1798.80(e)) Limited Optional name only (stored locally)
C. Protected Classifications No N/A
D. Commercial Information Yes Subscription status, purchase history
E. Biometric Information No N/A
F. Internet/Network Activity Yes App usage, feature interactions
G. Geolocation Data No N/A
H. Sensory Data No N/A
I. Professional/Employment Information No N/A
J. Education Information No N/A (exam info is user-created, not collected from institutions)
K. Inferences Yes Adaptive difficulty based on performance
L. Sensitive Personal Information No N/A

Sources: Directly from you, automatically through app usage, from third-party payment processors.

Business Purposes: Providing app services, personalization, analytics, fraud prevention, payment processing.

Retention: See Section 7 above.