Privacy Policy

1. Information We Collect

When you use MitrAI, we collect:

• Account Information: Name, SVNIT email, admission number, department, year, date of birth.
• Academic Data: Subjects, study preferences, schedules, learning style, goals.
• Usage Data: Messages, study sessions, attendance records, uploaded materials.
• Automatically Collected: Browser type, IP address (for rate limiting only — not stored permanently).

2. How We Use Your Information

• Study Matching: To find compatible study partners within your batch.
• AI Features: To generate personalized study plans and session guidance.
• Communication: To facilitate messaging between matched students.
• Analytics: To show you your study progress and session history.
• Platform Improvement: Aggregated, anonymized data to improve matching algorithms.

3. Data Storage & Security

Your data is stored securely on Supabase (PostgreSQL) with encryption at rest and in transit. We use Row Level Security (RLS) policies to ensure users can only access their own data. Authentication uses Supabase Auth with hashed passwords and secure cookie-based sessions.

4. Data Sharing

We do not sell or share your personal data with third parties. Limited data is shared within the Platform:

• Your name, department, and year are visible to other SVNIT students on the Platform.
• Study preferences are used for matching but not publicly displayed in full.
• Birthday (day/month only) is shown if you opt in.
• Google Gemini AI processes study-related queries (no personal data sent).

5. Your Rights (GDPR & Data Protection)

You have the right to:

• Access: View all data we hold about you.
• Export: Download a complete copy of your data (available from Dashboard → Export Data).
• Rectification: Update or correct your personal information.
• Deletion: Delete your account and all associated data (available from Dashboard).
• Portability: Export your data in machine-readable JSON format.

6. Privacy Controls

• Birthday: Toggle birthday visibility on/off.
• Online Status: Choose to appear offline or hide what you're studying.
• Goals: Personal study goals are hidden from other users by default.
• Blocking: Block users to prevent them from contacting you.

7. Cookies

We use essential cookies for authentication (Supabase session cookies). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Data Retention

Your data is retained as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days. Anonymized, aggregated data may be retained for platform improvement.

9. Children's Privacy

MitrAI is intended for college students (18+). We do not knowingly collect data from individuals under 18 years of age.

10. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated through the Platform. Continued use after updates constitutes acceptance.

Contact

For privacy-related questions or data requests, use the Feedback page or contact the development team directly.