ScorvoAI Privacy Policy

Last updated: 12 September 2026

ScorvoAI ("the app") is an AI study companion for India's objective government recruitment exams (SSC, IBPS, SBI, RRB). This policy explains what the app collects, why, where it goes, and how to delete it. It is written to be read, not skimmed; if anything is unclear, write to abhishek@scorvoai.com.

1. What we collect

Data	Why	Where it lives
Google account basics - name, email address, profile photo URL	To sign you in and show your name in the app	Firebase Authentication and your `users/{uid}` document in Cloud Firestore
Your exam choices and study goals	To tailor lessons, quizzes, mocks and updates to your exam	Firestore, `users/{uid}`
Quiz and mock results - score, the questions shown, your answers, timestamps	To compute your Insights (weak chapters, streak, averages) and to let you review past attempts	Firestore, `users/{uid}/quiz_results` and `users/{uid}/mock_results`
Notes you write or scan	So they are available on your other devices and to the AI tutor when you ask about them	Firestore, `users/{uid}/ai_notes`
AI tutor conversations	So you can resume a conversation later	Firestore, `users/{uid}/chat_sessions` (last 60 messages per conversation)
Lessons you viewed and the day's lesson	"Continue learning" and the Lesson of the Day	Firestore, `users/{uid}/viewed_lessons`, `users/{uid}/daily_lessons`
Questions you have already seen (hashes only)	So the shared question bank does not repeat a question to you	Only on your device (local storage)

We do not collect your location, contacts, device identifiers for advertising, or anything from your camera roll other than the single image you choose to scan.

2. Camera and images

The Solver and Notes screens can scan a printed question or a page of notes. The image is processed on your device by Google ML Kit text recognition and is never uploaded. Only the recognised text is kept if you choose to save it as a note or send it to the tutor.

3. AI processing

When you ask the AI tutor, request a lesson, solve a question or generate a quiz, your text (plus a short summary of your exam, weak topics and relevant notes, to personalise the answer) is sent from our backend to Ollama Cloud, which runs the Gemma 4 model. Ollama's handling of that text is governed by Ollama's privacy policy. We do not send your name, email or account identifiers to the model.

The app never talks to the model directly; every request goes through our backend, which verifies your Firebase sign-in first. Current-affairs and exam-update features also use a web search provider to ground answers in real sources; those queries contain the topic, never your identity.

4. Shared content you may contribute to

To keep the app affordable, generated lessons, quiz questions, the daily news digest and exam updates are cached in shared collections so the next student receives them without a new model call. Nothing in these shared documents identifies you.

5. Third parties

Google Firebase (Authentication, Cloud Firestore) - sign-in and storage.
Google Cloud Run - hosts our backend in Mumbai (asia-south1).
Ollama Cloud - AI model inference.
Google ML Kit - on-device OCR; no data leaves the device.

We do not sell data and we do not show ads.

6. Retention and deletion

Your data stays as long as your account exists. Profile -> "Delete account and all data" permanently removes your Firestore documents (profile, quiz and mock results, notes, chat sessions, lesson history) and your Firebase Authentication record, and clears local caches. This is immediate and cannot be undone. You can also email abhishek@scorvoai.com from the address on your account and we will delete it within 7 days.

7. Children

The app is intended for people preparing for government recruitment exams, which require applicants to be 18 or older. We do not knowingly collect data from children under 13.

8. Security

Access to your data is enforced by Firestore security rules: only a signed-in user can read or write their own users/{uid} subtree, and shared collections cannot expose personal data because none is stored in them. Backend requests require a valid Firebase ID token. Transport is HTTPS only in release builds.

9. Changes

We will update the date at the top when this policy changes and, for material changes, show a notice in the app.

10. Contact

abhishek@scorvoai.com