Privacy Policy for Acing Acer

1. Introduction

Welcome to Acing Acer, a mobile learning management system designed for enterprise training and employee development. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

By using Acing Acer, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Account Information: Name, email address, employee ID, designation, joining date
• Profile Information: Training level, progress status, achievement records
• Authentication Data: Login credentials and session information

2.2 Location Information

• GPS Coordinates: We collect precise location data when you mark attendance for classroom training sessions to verify your physical presence at the training location
• Location Usage: Location data is only collected during attendance marking and is not continuously tracked

2.3 Camera and Photos

• Attendance Photos: We capture and store photos during attendance marking to verify your presence at training sessions
• Photo Usage: Photos are used solely for attendance verification and training compliance purposes

2.4 Training and Learning Data

• Progress Tracking: Course completion status, quiz scores, certificates earned, badges received
• Quiz Responses: Your answers to quiz questions and assessment results
• Training History: Records of training sessions attended, dates, and completion status

2.5 Technical Information

• Device Information: Device type, operating system version, app version
• Usage Data: App performance metrics, crash reports, and error logs through Sentry
• Network Information: IP address for API communication

2.6 Local Storage

• Session Data: Authentication tokens and user preferences stored locally on your device
• Cache Data: Temporary data to improve app performance

3. How We Use Your Information

3.1 Primary Uses

• Training Delivery: Provide access to training materials, track progress, and issue certificates
• Attendance Management: Verify attendance through location and photo confirmation
• Performance Tracking: Monitor learning progress and generate reports for employers
• Account Management: Maintain user accounts and provide customer support

3.2 Communication

• Notifications: Send push notifications about new training assignments, quiz due dates, and achievements
• Support: Respond to user inquiries and technical support requests

3.3 Analytics and Improvement

• App Performance: Monitor app stability and identify technical issues
• Feature Enhancement: Analyze usage patterns to improve user experience

4. Data Storage and Security

4.1 Data Storage

• Cloud Storage: Your data is stored securely on Supabase cloud infrastructure with enterprise-grade security
• Encryption: All data transmissions are encrypted using industry-standard protocols
• Location: Data is stored on secure servers with appropriate geographic data protection compliance

4.2 Security Measures

• Access Controls: Strict access controls limit data access to authorized personnel only
• Regular Monitoring: Continuous monitoring for security threats and vulnerabilities
• Data Backup: Regular backups ensure data integrity and availability

5. Third-Party Services

5.1 Supabase (Database Provider)

• Purpose: Backend database and authentication services
• Data Shared: All user data and training information
• Privacy Policy: https://supabase.com/privacy

5.2 Sentry (Error Monitoring)

• Purpose: Crash reporting and error monitoring
• Data Shared: Technical performance data and error logs
• Privacy Policy: https://sentry.io/privacy

5.3 Expo (Development Platform)

• Purpose: App development and deployment platform
• Data Shared: Build and deployment metadata
• Privacy Policy: https://expo.dev/privacy

6. Data Sharing and Disclosure

6.1 Internal Sharing

• Employers: Training progress, attendance records, and performance data are shared with your employer for training compliance and employee development purposes
• HR Departments: Access to employee training records and certification status

6.2 Limited Disclosure

We may disclose your information only in the following circumstances:

• Legal Requirements: When required by law, court order, or legal process
• Safety Concerns: To protect the safety and security of users or others
• Business Transfer: In connection with a merger, acquisition, or sale of assets

6.3 No Commercial Sale

We do not sell, trade, or rent your personal information to third parties for commercial purposes.

7. Your Rights and Choices

7.1 Access and Control

• Data Access: Request a copy of your personal data we have collected
• Data Correction: Update or correct inaccurate personal information
• Data Deletion: Request deletion of your personal data (subject to legal retention requirements)

7.2 Location and Camera Permissions

• Permission Control: You can disable location and camera permissions in your device settings
• Impact: Disabling these permissions may limit attendance marking functionality

7.3 Push Notifications

• Notification Settings: Control push notifications through your device settings
• Opt-out: You can disable notifications while continuing to use the app

8. Data Retention

8.1 Retention Periods

• Active Employees: Data is retained while you remain an active employee
• Former Employees: Training records may be retained for up to 7 years for compliance purposes
• Legal Requirements: Some data may be retained longer to comply with legal obligations

8.2 Data Deletion

• Account Deletion: Upon account deletion, personal data is removed within 30 days
• Backup Systems: Data in backup systems is removed during the next backup cycle

9. Children's Privacy

Acing Acer is designed for workplace training and is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

10. International Data Transfers

If you are located outside the country where our servers are hosted, your information may be transferred to and processed in other countries. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Privacy Policy

11.1 Policy Updates

• We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements
• Notification: We will notify you of any material changes through the app or email
• Effective Date: Changes become effective on the date specified in the updated policy

11.2 Review Recommendation

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

13. Governing Law

This Privacy Policy is governed by the laws of India and any disputes will be resolved in the courts of India.