Privacy Policy

Policy sections

01

Information We Collect

We collect account information such as your email address and authentication status.

We collect the study content you add or generate, including practice questions, answer choices, explanations, tags, notes, error logs, drill sessions, review status, favorites, and progress.

We may collect limited technical information such as device/browser details, redacted page paths, app events, diagnostics, and approximate region so the product stays reliable and safe.

02

AI and Image Processing

If you use AI-assisted image import or solving, the image and related prompt data may be sent to Google Gemini or another AI provider to extract, classify, or explain study material.

Images attached in AI Chat are stored privately for up to two days so they can remain visible in the conversation and be included in relevant follow-up AI requests. The image and its preview are deleted after expiry, while the surrounding text conversation may remain in chat history.

Phone handoff images are temporarily uploaded to a private Supabase Storage bucket so your desktop session can receive the image. They are designed to be deleted after consume, cancel, or expiry. If deletion fails, cleanup jobs may retry.

AI output can be wrong or incomplete. Review generated questions, answers, explanations, and classifications before relying on them.

03

Payments

If paid plans are enabled, we may receive payment metadata such as payment status, plan, amount, currency, order ID, payment ID, refund status, and tax or invoice information.

Payment credentials are processed by the payment provider. Their terms and privacy notices may also apply during checkout.

04

Browser Storage and Analytics

GMAT Vault uses browser storage for sign-in state, theme preferences, local drafts, query cache, and drill progress. Clearing browser storage may sign you out or remove unsynced local state.

We use Vercel Analytics with path redaction for product health and usage trends. We do not use analytics to sell your study history to advertisers.

05

How We Use Information

We use information to provide the app, sync your workspace, authenticate your account, run drills, process AI requests, provide support, prevent abuse, secure the service, improve the product, and comply with law or payment-provider requirements.

06

Sharing and Sale of Data

We do not sell your personal study data. We do not share your private notes, questions, or drill history with advertisers or test-prep companies for their own marketing.

We share information with service providers such as Supabase, Vercel, Google Gemini, and Razorpay only as needed to provide the service, process payments, secure the app, or comply with law.

07

Deletion, Retention, and Rights

You can schedule account deletion in the app or contact support for help with a deletion request. An in-app request starts a 30-day recovery period. Your synced workspace remains stored but normal workspace access is locked during that period, and you can sign in to review or cancel the request while it is still pending and before the deadline.

At or after the deadline, deletion processing may begin and cancellation is no longer available. The daily cleanup may complete up to 24 hours after the exact deadline, and retryable failures may delay completion. Once completed, deletion of active workspace data is irreversible.

Some backups, logs, transaction records, fraud-prevention records, or legal records may remain for a limited period where required for security, tax, accounting, payment, or legal reasons.

Depending on where you live, you may have rights to access, correct, export, delete, object to, or restrict certain uses of your data. Contact hello@gmatvault.com to make a request.

08

Security, Children, and Changes

We use reasonable safeguards for the type of data we handle, but no online service can guarantee perfect security. Keep your password safe and contact us if you suspect unauthorized access.

GMAT Vault is intended for users who can lawfully use the service in their location. If you are below the age of digital consent where you live, use the service only with appropriate parent or guardian involvement.

We may update this policy as the product, providers, or legal requirements change. The updated date above shows when it was last revised.