Factic Privacy Policy

Quick Summary

• We collect only what is necessary to deliver personalized learning notifications and operate the Service.
• We do not sell your personal information to third parties.
• We do not use your data for third-party advertising.
• You may delete your account and data at any time from within the app.
• We use industry-standard security measures to protect your data.

Information We Collect

Information You Provide

• Account Information: Email address, display name, and authentication credentials (via Apple Sign-In or Google Sign-In).
• Topic Data: Custom topic titles, descriptions, notification schedules, skill levels, quiz preferences, and learning goals you configure.
• Quiz Responses: Your answers and scores for quiz questions.
• Community Content: Topics you choose to share with other users.
• Support Communications: Messages, feedback, and inquiries sent through in-app support.

Information Collected Automatically

• Device Information: Device model, operating system version, app version, unique device identifiers, and language settings.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens used to deliver notifications to your device.
• Usage Data: Notification interaction data (opened, dismissed), quiz completion rates, topic activity, and general usage patterns.
• Crash & Performance Data: Anonymous crash reports and performance metrics to improve app stability.

Information from Third Parties

• Authentication Providers: Name and email from Apple Sign-In or Google Sign-In.
• Subscription Data: Purchase status, subscription period, and entitlements from RevenueCat (our subscription management provider).

How We Use Information

• Deliver personalized learning notifications at your scheduled times.
• Generate relevant educational content and quiz questions using AI.
• Store your learning progress, quiz results, and topic configurations.
• Manage your subscription status and entitlements.
• Enable community features (sharing and discovering topics).
• Improve the Service's content quality, performance, and reliability.
• Respond to support requests and feedback.
• Detect and prevent abuse, fraud, and security threats.
• Comply with legal obligations.

Legal bases (where applicable): contract performance, legitimate interests in improving the Service, your consent, and legal compliance.

How We Share Information

We do not sell your personal data. We may share data only in the following circumstances:

• Service Providers: Firebase (hosting, database, authentication, cloud messaging), RevenueCat (subscription management), and AI content generation providers — each under contractual data protection obligations.
• Community Features: If you share a topic with the community, its title, description, and configuration become visible to other users. Your account identity is not publicly displayed.
• Legal Compliance: When required by law, regulation, or valid legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• Aggregated Data: Non-identifiable, aggregated statistics may be shared for analytics or research purposes.

Data Retention & Deletion

We retain your personal data for as long as your account is active and as needed to provide the Service.

• You may delete your account at any time through the app's Settings page.
• Upon deletion, your personal data is removed from active systems within 30 days.
• Anonymized or aggregated data that cannot identify you may be retained indefinitely.
• Community topics you shared may persist after account deletion in anonymized form.
• Backup systems may retain encrypted copies for a limited period before automatic purge.

Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/HTTPS) and at rest.
• Secure authentication via Apple Sign-In and Google Sign-In.
• Access controls limiting data access to authorized personnel.
• Regular security reviews and monitoring.

No system is completely secure. We cannot guarantee absolute security but will notify affected users promptly in the event of a data breach as required by applicable law.

Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate information.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a portable format.
• Restriction: Request restricted processing in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdrawal of Consent: Withdraw consent where processing is consent-based.

To exercise these rights, contact us at factic@qwertycode.org. We will respond within 30 days.

Push Notifications

Factic's core functionality relies on push notifications to deliver learning content. By using the Service:

• You consent to receiving push notifications at times you configure.
• You may disable notifications at any time through your device's system settings.
• Disabling notifications will significantly limit the Service's functionality.
• We do not send unsolicited marketing notifications without separate consent.

Third-Party Services

The Service integrates with the following third-party providers:

• Firebase (Google): Authentication, database, cloud functions, crash reporting, and push notification delivery.
• RevenueCat: Subscription management and purchase verification.
• Apple: Sign-In with Apple, App Store payments, and push notification infrastructure.
• OpenAI / AI Providers: Content generation for notifications and quizzes. No personally identifiable information is sent to AI providers.

Each third party operates under its own privacy policy. We encourage you to review their policies.

International Transfers

Your information may be processed on servers located outside your country of residence, including in the United States. We implement appropriate safeguards (such as Standard Contractual Clauses where applicable) to protect your data during international transfers.

Children's Privacy

The Service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected data from a child under 13, we will promptly delete it.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at factic@qwertycode.org.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect, use, and disclose.
• Right to delete your personal information.
• Right to opt out of the sale of personal information (we do not sell your data).
• Right to non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at factic@qwertycode.org.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes through the app or by other reasonable means. The "Effective" date at the top indicates the most recent revision. Continued use of the Service after changes constitutes acceptance.

Contact

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

factic@qwertycode.org
QWERTY Code LLC — USA