Privacy Policy

1. Overview

EduBoost Nepal is built on Firebase (by Google) for authentication and database services, and uses Google Gemini AI for generating educational content. This means your data is processed by Google's infrastructure in addition to our own systems. We have made every effort to ensure this is handled securely and transparently.

This policy applies to all users of EduBoost Nepal, including students, teachers, and visitors to our website.

2. Data We Collect

Information You Provide

When you create an account or use our services, we collect:

If you sign in with Google, we also receive your Google profile name and profile picture from Google's authentication service.

Content You Create

If you are a Teacher account holder, any notes or blog posts you add to the platform are stored in our database. Students' saved AI-generated content (questions and answers) is also stored, associated with your user ID.

Automatically Collected Information

We may automatically collect:

• Usage data: Pages visited, features used, time spent on platform.
• Device information: Browser type, operating system, screen resolution.
• Log data: IP address, access times, referring URLs — collected by Firebase automatically.
• Local storage: We use browser localStorage to store your dark mode preference and AI generation count locally on your device. This data never leaves your browser.

Information We Do NOT Collect

• We do not collect payment or financial information (the platform is free).
• We do not collect your physical address or phone number.
• We do not collect biometric data.
• We do not collect the content of your AI prompts in a way that is stored beyond Gemini API's own processing.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Account management: To create and manage your account, authenticate your identity, and provide personalized features.
• Service delivery: To provide the AI tools, notes, blog posts, and downloads you access through the platform.
• Saved content: To store and retrieve your saved AI-generated questions and answers.
• Role-based access: To differentiate between Student and Teacher privileges on the platform.
• Communication: To send important service notifications, such as changes to these policies (via email, if provided).
• Platform improvement: To understand how the platform is used in aggregate, identify bugs, and improve features.
• Safety and security: To detect and prevent fraud, abuse, or violations of our Terms of Service.

We do not use your data for advertising profiling, selling to third-party marketers, or any purpose unrelated to providing and improving our educational platform.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

Service Providers

We use Google Firebase (Authentication, Firestore) as our primary infrastructure provider. Your account data and saved content are stored in Google's Firestore database. Google's handling of this data is governed by Google's Privacy Policy and their Firebase Data Processing and Security Terms.

AI Processing

When you use the AI Question Generator or Answer Generator, the text of your request (subject, chapter, question type, etc.) is sent to Google Gemini API to generate a response. Please review Google Gemini API Terms to understand how Google processes this data.

Legal Requirements

We may disclose your information if required to do so by law, court order, or government regulation under the laws of Nepal.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections described here.

With Your Consent

In any other case, we will obtain your explicit consent before sharing your personal data.

5. Firebase & Google Services

EduBoost Nepal uses the following Google/Firebase services:

• Firebase Authentication: Manages your login sessions and identity verification. Supports email/password and Google Sign-In.
• Cloud Firestore: Our database where user profiles, notes, blog posts, and your saved content are stored.
• Firebase Hosting (if deployed there): Serves the web application files.

These services may store data on Google's servers, which may be located outside Nepal. By using our platform, you consent to this data transfer. Google's data centers comply with international security standards (ISO 27001, SOC 2, etc.).

You can learn more about Google's data practices at policies.google.com/privacy.

6. AI & Gemini API Data

When you use our AI-powered tools, the following data is sent to Google's Gemini API:

• The subject, chapter, question type, and other settings you select.
• The question text you enter in the Answer Generator.

We do not send your name, email, or user ID to the Gemini API. Requests are made without personally identifying information wherever possible.

Google may use the data sent to Gemini API in accordance with their API usage policies. We recommend reviewing Google's Gemini API Terms of Service for details on how API input data may be used by Google to improve their models.

7. Cookies & Local Storage

Firebase Authentication Cookies

Firebase Authentication uses browser cookies and session storage to maintain your login session. These are necessary for the platform to function and cannot be disabled if you wish to remain logged in.

localStorage

We store the following in your browser's localStorage (locally on your device only — not sent to any server):

• darkMode: Your light/dark mode preference.
• questionCount: A local counter of how many questions you've generated.

No Advertising Cookies

We do not use advertising cookies, third-party tracking cookies, or analytics platforms that track you across other websites.

8. Children's Privacy

EduBoost Nepal is designed for NEB Class 11 and 12 students, who are typically between 15 and 18 years old. We take the privacy of younger users seriously.

We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If you are under 13, please do not use our service without a parent or guardian present and consenting.

For users aged 13–17, we recommend that a parent or guardian review this Privacy Policy. Parents who believe their child has provided personal information to us without consent may contact us at privacy@eduboostnepal.com to request deletion.

We do not serve targeted advertising to any users, and especially not to minors. AI-generated content is educational in nature and designed to be age-appropriate for secondary school students.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal information:

• Encryption in transit: All data between your browser and our servers is encrypted using HTTPS/TLS.
• Firestore security rules: Our database is configured so that users can only access their own data. Notes and blog posts have public read access as required for the platform, but write access is restricted to authenticated users.
• Password hashing: Firebase Authentication handles password storage using industry-standard secure hashing. We never see or store your plain-text password.
• API key security: We encourage platform administrators to restrict their Firebase and Gemini API keys to specific domains to prevent unauthorized use.

However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

10. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• User profile data: Retained while your account is active and for 30 days after deletion (for recovery purposes), then permanently deleted.
• Saved content: Retained until you delete it or your account is deleted.
• Teacher-uploaded notes/posts: Retained on the platform until deleted by the teacher or an admin.
• Log data: Firebase may retain server logs for up to 12 months per their own policies.

You may request deletion of your account and all associated personal data at any time by emailing privacy@eduboostnepal.com. We will process such requests within 30 days.

11. Your Rights

As a user of EduBoost Nepal, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your account and personal data ("right to be forgotten").
• Right to data portability: Request your data in a machine-readable format.
• Right to object: Object to certain types of processing of your data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time by deleting your account.

To exercise any of these rights, please email us at privacy@eduboostnepal.com with your request. We will respond within 30 days. You may be asked to verify your identity before we can fulfill a request.

You also have the right to lodge a complaint with the relevant data protection authority in Nepal.

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date.

For significant changes, we will make reasonable efforts to notify users by email or through a prominent notice on the platform at least 14 days before the change takes effect.

Your continued use of EduBoost Nepal after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact us: