🔒 Privacy Policy - RiseCraft

Last Updated: December 15, 2024

Effective Date: December 15, 2024

Operator: Mind Smart Academy

✅ Ready for Google Play

1. Introduction

Welcome to RiseCraft ("App"), operated by Mind Smart Academy ("we," "us," "our," or "Company"). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

2. Information We Collect

2.1 Information You Provide Directly

When you create a RiseCraft account, we collect:

• Email Address - For account creation and authentication
• Full Name - For personalization within the App
• Password - Securely hashed and encrypted (we never store plain text passwords)
• Profile Photo - Optional, stored on our secure servers
• User Category - (Student, Parent, Adult, Esteemed) for personalized experience

2.2 Information Collected Automatically

When you use the App, we automatically collect:

• Usage Data - Daily task completions, streaks, progress
• Device Information - Device type, OS version, App version
• Diagnostic Data - Crash reports, error logs (for improvement)
• IP Address - For security and fraud prevention
• Timestamps - When you access the App

2.3 Information from Third Parties

• Payment Processors - If/when we integrate payment methods, relevant transaction data
• Analytics Services - Aggregated, non-identifying usage patterns

3. How We Use Your Information

We use the information we collect for:

✓ Authentication & Account Management

• Creating and maintaining your account
• Verifying your identity
• Password reset and recovery

✓ Service Delivery

• Delivering daily tasks and goals
• Tracking your progress and streaks
• Providing personalized recommendations

✓ Communication

• Sending important account notifications
• Push notifications for daily reminders (only if you opt-in)
• Support responses to your inquiries

✓ App Improvement

• Analyzing usage patterns
• Fixing bugs and improving features
• Understanding user behavior (aggregate level only)

✓ Legal & Security

• Preventing fraud and abuse
• Complying with legal obligations
• Protecting users' rights and safety

4. What We DO NOT Do

• ❌ We DO NOT:
• Share your personal information with third parties for marketing
• Sell your data to advertisers or other companies
• Use your data for profiling or discrimination
• Share your financial information (beyond payment processors)
• Store credit card information (payment processors handle this securely)
• Share data with unaffiliated third parties without consent

5. Data Security

5.1 How We Protect Your Data

• Password Hashing - Passwords are hashed using bcrypt (industry standard)
• Encryption in Transit - All data transferred using SSL/TLS encryption
• Secure Servers - Hosted on secure cloud infrastructure (AWS/PostgreSQL)
• Access Controls - Only authorized personnel access user data
• Regular Updates - Security patches applied promptly

5.2 Limitations

While we implement industry-standard security measures, no method is 100% secure. You use the App at your own risk, though we work continuously to improve security.

6. Data Retention

6.1 How Long We Keep Your Data

• Active Account - Data retained while your account is active
• Account Deletion - Upon your request, we delete your personal data within 30 days
• Automatic Deletion - If account is inactive for 2 years, we may delete it
• Usage Logs - Aggregate data may be retained for analytical purposes (anonymized)
• Backups - Data in backups may be retained for recovery purposes (max 90 days)

6.2 What You Can Do

• Delete Account - Email us at mindsmartacademy@gmail.com to delete your account
• Export Data - You can request a copy of your data (subject to legal requirements)
• Correction - You can update your profile information anytime

7. Third-Party Services

7.1 Services We Currently Use

Firebase Cloud Messaging (Google)

• Used for: Push notifications for daily reminders
• Privacy: Google's Privacy Policy
• Control: You can disable notifications in App settings

Analytics (Future)

• We may use Google Analytics or similar services
• Data: Aggregate, non-identifying usage patterns
• Your Choice: Analytics data does not identify you personally

7.2 Future Payment Integration

8. Your Rights & Choices

8.1 Your Rights

You have the right to:

• ✓ Access - Request what data we have about you
• ✓ Correct - Update or fix inaccurate information
• ✓ Delete - Request deletion of your account and data
• ✓ Export - Get a copy of your data in standard format
• ✓ Opt-Out - Disable push notifications anytime
• ✓ Withdraw Consent - Stop using the App anytime

8.2 How to Exercise Your Rights

Email us at: mindsmartacademy@gmail.com

Include:

• Your name and email
• What you're requesting (access/delete/export/etc.)
• Your reason (optional)

We'll respond within 30 days.

9. Children's Privacy

9.1 For Users Under 13

Parental Consent Required

If you are under 13, your parent or guardian must:

1. Read this Privacy Policy
2. Consent to you using RiseCraft
3. Be responsible for your account

9.2 What We Do

• Collect minimal data (email, name, category only)
• Use data ONLY for app functionality
• Do NOT sell or share data
• Provide age-appropriate content

9.3 What Parents Can Do

• Monitor your child's usage
• Request data access/deletion anytime
• Disable notifications
• Delete account at any time

10. Contact Us

11. Data Breach Notification

In the unlikely event of a security breach:

1. We will notify you via email within 30 days
2. We will explain what happened
3. We will describe steps we're taking
4. We will provide guidance on protecting yourself

12. Changes to This Policy

We may update this Privacy Policy occasionally. When we do:

• We will post the updated version in the App
• We will update the "Last Updated" date
• If changes are significant, we'll notify you via email
• Continued use means you accept the changes

13. Acknowledgment