Privacy Policy

Vission Workspace ("Vission", "we", "us", or "our"), developed by SaurDevs, is a distraction-free study workspace application designed to empower students and independent learners with authentic focus tracking, study habits, AI notes, and community collaboration.

This Privacy Policy explains in detail how personal data is collected, processed, stored, shared, and destroyed when you use our application on mobile or web.

1. Information We Collect [TODO: Lawyer Review Needed]

We collect only the information necessary to deliver authentic focus tracking and workspace features:

• Account Identifiers: Account email address, display name, chosen @username, optional avatar image URL, age band (e.g., "14-17" or "18+"), and consent acceptance records (version and timestamp). Note: We do not store your exact birth date.
• Study & Focus Statistics: Daily focus duration (in seconds), active focus sessions count, tag breakdowns (e.g., Study, Work, Read, Exercise), checklist items and completed tasks count, and streak numbers.
• Community & Hub Content: Chat messages posted inside Study Hubs/rooms, hub membership roles, and public profile cards.
• AI Notes & Assistant History: Prompts submitted to the in-app AI study assistant and AI-generated PDF study notes.
• Customer Support & Bug Reports: Bug descriptions, user support inquiries, and sender email addresses submitted via the in-app report form.
• Device & Ad Information: Platform name (Android or Web) and non-sensitive ad interaction tokens for Google AdMob rewarded ad slots.

2. How We Use Your Information [TODO: Lawyer Review Needed]

• To authenticate your identity via Firebase Auth and secure your workspace.
• To persist your focus metrics, streak counters, 90-day activity heatmaps, and checklist items.
• To compute leaderboard ranks and badges on public profile cards.
• To process AI study queries and generate PDF study notes using the Google Gemini API.
• To transmit password reset emails and customer support responses.
• To display optional, non-intrusive rewarded ad slots on the idle Focus screen via Google AdMob.

3. Data Storage & Hosting Locations [TODO: Lawyer Review Needed]

4. Third-Party Service Providers [TODO: Lawyer Review Needed]

We share data with third-party service providers solely to perform essential app functions:

• Google Firebase & Auth: User authentication and Firestore document database.
• Google Gemini API: AI chat assistant and study notes generation. Prompts sent to Gemini are processed server-side.
• YouTube API Services: Used optionally if you connect YouTube to view study video feeds.
• Google AdMob: Serves slim ad slots on the idle Focus screen.
• Resend: Transmits account verification and transactional emails.
• Google Play Services: Handles app distribution and in-app subscription billing on Android devices.

5. YouTube API Services Disclosure [TODO: Lawyer Review Needed]

Vission Workspace integrates YouTube API Services for optional video feeds. By using YouTube features inside Vission, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.

Data accessed through YouTube API Services is used exclusively to display video content in the app. It is not sold or shared. Cached YouTube metadata is automatically cleared from memory within 24 hours. You can manage or revoke access at any time via Google Security Settings.

6. Cross-Border Transfer Notice (Korean PIPA Notice) [TODO: Lawyer Review Needed]

In accordance with the Personal Information Protection Act (PIPA) of South Korea, we notify Korean users that personal data is transferred across borders to Cloud service providers:

• Transferred Data: Email, username, focus statistics, study hub messages, AI chat prompts.
• Destination Countries: India (Google Cloud Delhi `asia-south2`), United States (Firebase Auth & Gemini API servers).
• Transfer Method: Encrypted HTTPS/TLS protocol.
• Purpose & Retention: Database storage and AI processing; retained until account deletion or policy expiry.

7. Data Retention & Destruction [TODO: Lawyer Review Needed]

• Account & Focus Data: Retained for as long as your account remains active. Upon account deletion, all user data across `users/{uid}`, `dailyStats`, `publicProfiles`, and `leaderboardEntries` is permanently deleted.
• Support Reports: Bug reports and support messages are retained for up to 90 days for security, fraud prevention, and legal compliance before automatic permanent deletion.
• Cached YouTube Data: Cleared automatically within 24 hours.

8. User Rights & Controls [TODO: Lawyer Review Needed]

You have the right to access, review, correct, export, or request immediate deletion of your personal data at any time. You may also withdraw marketing consent inside Settings.

9. How to Delete Your Account [TODO: Lawyer Review Needed]

10. Children's Privacy (Under 14 Notice) [TODO: Lawyer Review Needed]

Vission Workspace strictly prohibits registration by children under 14 years of age. During signup, an age verification check blocks registration if the selected birth year and month indicate the user is under 14.

11. Security Measures [TODO: Lawyer Review Needed]

We enforce HTTPS/TLS data in transit, Firebase Authentication token isolation, and strict Firestore Security Rules to prevent unauthorized access.

12. Contact Support

If you have questions regarding this Privacy Policy or data privacy rights, contact developer SaurDevs at:

Email: [email protected]