Privacy Policy

1. Scope

• TickAutoAI Student Android app (package com.tickautoai.tickautoai_student), distributed via Google Play.
• The institution web workspace at tickautoai.com where teachers manage the same homework, CBT exams, and submissions.
• The public student API (api.tickautoai.com) that the mobile app talks to.

If your school uses TickAutoAI, your institution is the primary account administrator and we process student data on the institution's instructions (school-as-controller for roster and classroom data, TickAutoAI as processor/service provider), except where we act independently for platform security and operations as described below.

2. Data controller & contact

Questions about this policy, access, correction, or deletion requests:

• Email: support@atgorithm.com
• In-product path: your institution admin (teacher / coordinator) can review roster, homework, and exam data first; we support them on verified requests.

3. Data we collect

We collect only what is needed to sign students in, show their work, accept submissions, run exams, and keep the service secure. We do not collect precise location, contacts, SMS, call logs, microphone recordings, advertising IDs, or health data, and we serve no third-party ads and sell no personal data.

A. Account & roster data (provided by your institution or you)

• Name, student email, password credentials (stored hashed; never in plain text).
• Institution, batch/standard, branch/stream, student identifiers.
• Phone/WhatsApp number and report preference, only where your institution enables WhatsApp reports.
• Login session tokens and API credentials stored securely on-device (see on-device storage below).

B. Learning content you create

• Homework list, homework detail, submission PDFs, upload filenames, evaluation results and AI marks/feedback.
• CBT exams, attempts, per-question responses, autosave snapshots, tab-switch signals (exam-integrity only), scores and result payloads.
• Dashboard summaries (pending homework, exam schedule, performance aggregates).

C. Technical / device data (automatic)

• Request metadata: request IDs, timestamps, IP address, app version, OS version, API error codes and diagnostics.
• Security logs: failed logins, rate-limit and abuse-prevention events.
• Crash/diagnostic data only if the OS shares it; no cross-app tracking.

D. On-device storage

• The app stores your base URL, API key, login token, and cached profile in private app storage (secure storage / shared preferences). Clearing app data or logging out removes locally stored session credentials.

4. Device permissions

The Android app declares only:

• INTERNET — to communicate with api.tickautoai.com.
• System file picker (Storage Access Framework) — used only when you choose a homework PDF to upload. We access only the file you explicitly select; no background gallery/media scan.
• Browser/view intents (VIEW for http/https) — used only when you tap links such as this privacy policy or a question PDF.

No camera, microphone, location, contacts, or SMS permissions are requested.

5. How we use data

• Authenticate students and keep sessions secure.
• Show dashboard, homework, CBT exams, and profile; accept PDF submissions and exam responses.
• Grade/evaluate submissions and exams, generate marks and feedback, detect duplicate or incomplete attempts.
• Operate, debug, and secure the platform (abuse prevention, rate limiting, audit logs).
• Provide institution-level reports (e.g. WhatsApp reports where enabled) and customer support.
• Comply with legal obligations and enforce our terms.

Legal bases (EEA/UK where applicable): contract performance (providing the school service), legitimate interests (security, operations), and consent where the school or you provide it (e.g. WhatsApp reports).

6. AI processing

Homework submissions and exam responses are evaluated with AI models (including Google Gemini) to produce marks, model answers, and feedback. AI processing is limited to the submission/exam content and the minimum roster context needed to attribute it. Model providers act as sub-processors and do not use your content for advertising; they process it only to provide the evaluation service to us. Institutions review and remain responsible for published results.

7. How we share data

We share data only with the parties below, and only as needed for the purposes in §5:

• Your institution (school/coaching admins and teachers): roster, homework, submissions, CBT attempts and results for teaching and assessment.
• Service providers / sub-processors: secure hosting and database (PostgreSQL), task queue/cache (Redis), file storage, observability/logging, and AI inference (e.g. Google) — bound by contracts to process data only on our instructions with confidentiality and security obligations.
• Legal/safety: where required by law, to protect rights, safety, and integrity of exams, or in connection with a merger/acquisition with notice and continuity of this policy.

We do not sell personal data, share it with data brokers, or share it for third-party advertising or cross-app tracking. No third-party advertising SDKs are embedded in the student app.

8. Data retention & deletion

• Account/roster data: kept while your institution account is active and as required for academic records.
• Homework/CBT content and results: kept per your institution's academic-record policy; institutions may request deletion on term end.
• Security/audit logs: kept for a limited period (typically ≤ 12 months) then aggregated or deleted.
• On-device session data: deleted on logout or when you clear app data.

Students/parents may request access, correction, export, or deletion via their institution or by emailing support@atgorithm.com. We action verified deletion requests within 30 days (sooner where law requires), subject to lawful academic-record retention. Uninstalling the app removes on-device data but does not delete server-side academic records — a deletion request is needed for that.

9. Security

• HTTPS in transit; hashed passwords; short-lived student session tokens plus per-institution API keys.
• Role-based access (students see only their own homework/exams/profile; staff see their institution only).
• Least-privilege infrastructure access, audit logging, and backups. No method is 100% secure — report suspected compromise to support@atgorithm.com.

10. Children

TickAutoAI serves standards 5–12, which may include children. Student accounts are created and managed by the school/institution — not by open self-registration — and classroom use is under teacher/school supervision with parental consent obtained by the school where required. We process children's data solely to provide the educational service (§5), never for advertising or profiling, and we support parental access/correction/deletion through the institution or support@atgorithm.com. If you believe a child's account was created without proper consent, contact us and we will investigate and delete where appropriate.

11. Your rights & choices

• Use the app's Profile screen to review your name, email, institution, batch, and WhatsApp-report status; ask your institution to correct roster errors.
• Opt out of WhatsApp reports via your institution or support@atgorithm.com.
• Request access, correction, portability, restriction, or deletion at support@atgorithm.com (we verify identity via your institution).
• Change password inside the app; log out to revoke the on-device session.

12. International transfers

Data is hosted and processed in the region of our infrastructure providers and may be processed in other regions by sub-processors (e.g. AI inference) under contractual safeguards. By using the app through your institution, you understand data may be transferred and protected under this policy and applicable data-protection terms.

13. Changes to this policy

We will post updates on this page with a new effective date and, for material changes affecting students, notify institutions in-app or by email before they take effect. Continued use after the effective date constitutes acceptance. Prior versions are available on request to support@atgorithm.com.

Contact: support@atgorithm.com. This page is the official privacy policy URL for the TickAutoAI Student Google Play listing: https://tickautoai.com/privacy.