Privacy Policy

1. Information We Collect

When you use the Porikkhadaw AI website or Android application, we may collect the following categories of information:

• Account Credentials: Full Name, Email Address, Mobile Number, Date of Birth, and encrypted password hash.
• Educational Preferences: Target examination category (BCS, Bank, Primary Teacher, NTRCA, HSC, SSC, or School Class) to deliver tailored exams and recommendations.
• Academic Performance: Exam scores, answer sheets, bookmarks, study streaks, and rank analytics.
• Device & Network Identifiers (Anti-Fraud): Unique Device ID (Android ID hash), IP address, and browser characteristics used strictly to prevent multi-accounting fraud, account recycling abuse, and unauthorized access.
• Transaction Data: Payment transaction reference IDs when purchasing tokens or packages via official payment providers (e.g., bKash, Nagad, SSLCommerz). We do not store sensitive payment card details or PINs.

2. How We Use Your Information

We process your data for the following lawful and legitimate purposes:

• To authenticate your identity and deliver One-Time Passwords (OTP) for account verification.
• To generate personalized mock tests, practice quizzes, and leaderboards.
• To detect and prevent fraudulent activities, duplicate accounts from single devices, and automated spam bots.
• To communicate important exam schedules, study reminders, and customer support responses.

3. Data Sharing & Third-Party Services

We do not sell, rent, or lease your personal data. We only share essential data with verified infrastructure partners who adhere to strict data security standards:

• Email Delivery Infrastructure: Custom SMTP mail servers to deliver authentication OTPs and notifications.
• Payment Gateways: Licensed providers (bKash, Nagad, SSLCommerz) to verify and credit digital transactions.
• Legal Requirements: Disclosures strictly mandated by applicable laws or authorized governmental authorities in Bangladesh.

4. Device Fingerprinting & Anti-Abuse Protection

To maintain a fair competitive environment for all students and prevent bad actors from exploiting trial tokens or welcome bonuses, our system registers device hardware identifiers and IP signatures. Each physical device is permitted one primary account. Deleting an account does not exempt a device from anti-fraud rate limits.

5. Data Retention & Account Deletion Policy

Users have the absolute right to delete their account and associated personal data at any time.

• In-App Deletion: You can delete your account directly inside the Android App under Settings > Privacy > Delete Account.
• Web Deletion Portal: You can request immediate account deletion anytime via our public web portal at https://porikkhadawai.com/delete-account.php.
• Upon verified account deletion, personal profile details, passwords, and tokens are permanently erased or pseudonymized. Non-identifiable device fraud hashes and audit logs are retained for fraud prevention and legal compliance.

6. Security Measures

We employ industry-standard cryptographic techniques, including 256-bit SSL/TLS encryption for all data in transit, bcrypt password hashing, CSRF tokens, and database isolation to protect your information against unauthorized access, alteration, or disclosure.

7. Children's Privacy

Our platform provides educational resources for school students under the guidance of parents and educators. We do not knowingly collect personal data from children under the age of 13 without parental consent.

8. Contact Us & Data Protection

If you have questions, inquiries, or requests regarding this Privacy Policy or your personal data, please contact our data safety team: