PRIVACY POLICY — SLAYERX
App Name: SlayerX
App Package: com.syno.app
Developer / Data Controller: SlayerX
Contact Email: support@slayerx.in
Effective Date: 13 May 2026
Last Updated: 19 May 2026
--------------------------------------------------------------------------------
DISCLAIMER — INDEPENDENT EDUCATIONAL APP
SlayerX is an INDEPENDENT EDUCATIONAL APP developed to help students prepare
for competitive exams. It is NOT AFFILIATED WITH, AUTHORIZED BY, OR ENDORSED BY
any government entity or official exam board, including the Staff Selection
Commission (SSC) or any other government body.
For official exam notifications, syllabi, schedules, and results, please refer
to the official government source:
Staff Selection Commission (SSC): https://ssc.gov.in/
--------------------------------------------------------------------------------
1. INTRODUCTION
Welcome to SlayerX. This Privacy Policy explains how SlayerX ("we", "us", or "our") collects, uses, stores, shares, and protects your personal information when you use our Android application ("the App").
By installing or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please uninstall the App and do not use our services.
We are committed to protecting your privacy and handling your data transparently and responsibly, in accordance with applicable Indian law.
--------------------------------------------------------------------------------
2. PERMISSIONS WE REQUEST — AND WHY
The App requests the following Android permissions. We request only what is necessary for core functionality:
* INTERNET: Required to communicate with Firebase (login, user profile, database) and Cloudflare (premium content delivery).
* ACCESS_NETWORK_STATE: Checks if your device has an active internet connection before making network calls, preventing unnecessary errors.
* RECEIVE_BOOT_COMPLETED: Reschedules your daily study reminder notification after a device reboot, so you never miss your practice session.
* POST_NOTIFICATIONS: Sends you daily study reminder notifications (e.g., "Daily Mock is Live!"). Required on Android 13+. The App explicitly requests your permission before sending any notification — you can deny or revoke this at any time via Settings -> Apps -> SlayerX -> Notifications.
* VIBRATE: Provides haptic feedback during quiz interactions and when a notification arrives.
We do not request access to your Camera, Microphone, GPS Location, Contacts, SMS messages, Call Logs, or any other sensitive device resource.
--------------------------------------------------------------------------------
3. INFORMATION WE COLLECT
3.1 Information You Provide Directly
When you register an account, you provide:
* Full Name (Display Name): Used to personalise your in-app dashboard.
* Email Address: Used as your account identifier and for password reset emails.
* Password: Stored securely by Firebase Authentication using industry-standard hashing. We never store or see your plaintext password.
3.2 Learning Activity Data (Generated Through Use)
As you use the App, we record the following to power your personalised learning experience, track your history, and generate leaderboard and dashboard performance statistics:
* XP (Experience Points): Tracks points earned across quizzes and daily activities.
* Rank: Computed label (e.g., "Novice", "Scholar") based on your cumulative XP.
* Accuracy (%): Your cumulative quiz accuracy based on your overall answers.
* Daily Streak: Number of consecutive active days.
* Last Active Date: Most recent date of activity (YYYY-MM-DD format).
* Account Creation Timestamp: Date and time your account was first created.
* Quiz Metrics (Total Attempted, Correct, Wrong, Skipped): Cumulative counts (totalAttempted, totalCorrect, totalWrong, totalSkipped) stored securely in your user profile to compute metrics.
* Total Practice Duration: The cumulative time you spend practicing (totalTimeSpent), synced in background bursts to measure active engagement.
* Detailed Quiz Reports: A session-specific report uploaded to the "quiz_reports" collection upon quiz completion. Includes correct/wrong counts, total time taken, device platform (Android/iOS), timestamp, and a question-wise breakdown (question ID, selected option, correctness, time spent, and visit count). This data allows you to review your learning history.
* Mistake Bank: A list of incorrectly answered questions (Mistake Bank) stored locally on your device (AsyncStorage) and securely synced to your cloud user profile ("mistakeBank" field in Firestore) to persist and sync your mistake review sessions across devices.
* Bookmarks: Stored locally on your device (AsyncStorage) to allow bookmarking/saving individual questions for quick lookup.
3.3 Premium Subscription Status
SlayerX offers a premium tier called Slayer Plus. If your account is granted premium access, the following fields are stored in your user profile:
* isPremium: A boolean flag (true/false) indicating active premium access.
* Subscription Expiry Date: The date until which your Slayer Plus access is valid.
* Plan ID: The subscription tier label (e.g., "1 Month", "1 Year").
Premium tier access is granted exclusively through authorized administrative activation, promotional access codes, or account verification methods. No digital commercial transactions are processed or conducted inside the application.
3.4 Automatically Collected Technical Data (via Firebase)
Firebase (Google) collects the following as a standard part of its operation:
* Firebase Installation ID: A unique, non-personally-identifiable identifier for your app installation, used internally by Firebase.
* Authentication Token: A short-lived (60-minute) cryptographic token used to securely verify your identity with our backend services.
* IP Address: Transiently processed by Firebase servers when network requests are made. This is standard for all internet-connected applications and is not stored by us.
* App Instance ID: Used to route push notifications to your specific device.
3.5 User-Submitted Reports (Word/Question Issues)
If you choose to use the "Report Missing Word" or "Report Question" helper tools in the App, the details of your report (query word/question text, reason for issue, device identifier, name, email address, and timestamp) are collected and processed to help us improve the app curriculum.
--------------------------------------------------------------------------------
4. HOW WE USE YOUR INFORMATION
We use your data for the following specific purposes:
* Account creation and secure login (Uses: Name, Email, Firebase Auth Token)
* Personalised learning dashboard (Uses: XP, Rank, Streak, Accuracy, Last Active Date, Cumulative Quiz Metrics, Practice Duration)
* Detailed learning history review (Uses: Detailed Quiz Reports collection data)
* Persisting Mistake Bank reviews (Uses: mistakeBank Firestore updates, local AsyncStorage)
* Delivering Slayer Plus premium content (Uses: isPremium flag, Expiry Date verified via Firebase and Cloudflare Worker)
* Curating and improving app content (Uses: User-Submitted Reports for missing words or question issues)
* Sending daily study reminder notifications (Uses: App Instance ID, Notification permission)
* Preventing unauthorised content access (Uses: Firebase ID Token verified server-side by Cloudflare Worker)
We do not use your data for:
* Advertising or marketing to third parties
* Selling, renting, or trading personal information
* Behavioural profiling or automated decisions with legal consequences
--------------------------------------------------------------------------------
5. THIRD-PARTY SERVICES WE INTEGRATE
We use the following third-party services. Each processes data subject to their own privacy policies:
5.1 Firebase — Google LLC
* Services: Firebase Authentication, Cloud Firestore
* What data is shared: Name, Email, XP, Streak, Accuracy, Cumulative Quiz Metrics, Mistake Bank, Subscription status, App Instance ID
* Purpose: Secure account management and persistent storage of your user profile data
* Privacy Policies: Firebase Privacy Policy (https://firebase.google.com/support/privacy) and Google Privacy Policy (https://policies.google.com/privacy)
5.2 Cloudflare, Inc.
* Services: Cloudflare Workers (serverless API), Cloudflare R2 (object storage)
* What data is shared: Your Firebase ID Token is sent to our Cloudflare Worker for subscription verification. Your IP address is transiently processed by Cloudflare's global edge network as part of standard internet routing.
* Purpose: Securely serving Slayer Plus premium exam content files (JSON) only to verified subscribers. Personal user data is never stored in Cloudflare R2 — only exam content files reside there.
* Privacy Policy: Cloudflare Privacy Policy (https://www.cloudflare.com/privacypolicy/)
5.3 Telegram Messenger API (Curriculum Curation Helper)
* Services: Telegram Bot API
* What data is shared: When you submit a missing word report or a question error report, the report metadata (e.g., reported word/question text, selected reasons, user's email, name, UID, and timestamp) is forwarded securely using HTTPS POST requests to a secure, private Telegram developer channel moderated by our administrative team.
* Purpose: Allows our content team to instantly receive curation requests and add missing words or fix database typos immediately.
* Privacy Policy: Telegram Privacy Policy (https://telegram.org/privacy)
No advertising SDKs, analytics SDKs (e.g., Firebase Analytics, Crashlytics), or third-party tracking libraries are integrated into SlayerX.
--------------------------------------------------------------------------------
6. DATA STORAGE AND SECURITY
We store and secure your data using the following layers:
* Firebase / Google Cloud: User profile and authentication data. Hosted on Google Cloud (US) under ISO 27001, SOC 1/2/3 certifications.
* Cloudflare R2: Slayer Plus exam content files only — no personal user data stored here.
* On-Device (AsyncStorage): Your authentication session token is stored locally to keep you logged in. Automatically cleared when you sign out.
Security practices:
* All network communication uses HTTPS/TLS encryption.
* Firebase ID tokens are short-lived (60 minutes) and automatically refreshed by the App.
* Our Cloudflare Worker validates every premium content request server-side before serving any data.
We implement reasonable technical and organisational security measures to protect your information. No electronic system is 100% secure, and we cannot guarantee absolute security.
--------------------------------------------------------------------------------
7. DATA RETENTION
* User account (name, email, XP, streak, premium status): Retained until account deletion is requested.
* On-device auth token (AsyncStorage): Cleared immediately upon sign-out.
* Firebase Auth token: Auto-expires every 60 minutes; silently refreshed while active.
Account Deletion: To permanently delete your account and all associated data from SlayerX, email us at the contact address in Section 10. We will complete the deletion within 30 days of your verified request and confirm via email.
--------------------------------------------------------------------------------
8. CHILDREN'S PRIVACY
SlayerX is an English language learning and vocabulary development app designed
for adult learners. The App is intended for users who are 18 years of age or
older.
We do not knowingly collect personal information from anyone under the age of
13. If you believe that a child under 13 has created an account, please contact
us immediately and we will delete the account and all associated data without
delay.
--------------------------------------------------------------------------------
9. YOUR RIGHTS UNDER INDIAN PRIVACY LAW
Under the Digital Personal Data Protection Act, 2023 (DPDPA) and related Indian legislation, you have the following rights as a Data Principal:
* Right to Access: Request information about the personal data we process about you.
* Right to Correction and Erasure: Request correction of inaccurate data or deletion of your account and all associated data.
* Right to Grievance Redressal: Contact us to raise and resolve any privacy concern.
* Right to Withdraw Consent: Revoke notification permissions at any time via device Settings, without affecting your core ability to use the App.
* Right to Nominate: Nominate another individual to exercise your data rights on your behalf in case of death or incapacity.
To exercise any of these rights, contact us using the details in Section 10.
--------------------------------------------------------------------------------
10. CONTACT US
For any questions, concerns, or data requests related to this Privacy Policy:
* Developer: SlayerX
* App: SlayerX
* Package: com.syno.app
* Email: support@slayerx.in
We aim to respond to all privacy-related inquiries within 7 business days.
--------------------------------------------------------------------------------
11. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this document will always reflect the most recent revision.
For significant changes (e.g., new data types collected, new third-party services added), we will notify active users via an in-app notice or email where required by law.
Your continued use of SlayerX after a policy update constitutes your acceptance of the revised terms.
--------------------------------------------------------------------------------
12. GOVERNING LAW AND JURISDICTION
This Privacy Policy is governed by the laws of the Republic of India, including:
* The Information Technology Act, 2000
* The IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
* The Digital Personal Data Protection Act, 2023 (DPDPA)
Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of India.
This Privacy Policy applies solely to the SlayerX Android application (package: com.syno.app) available on the Google Play Store.