Privacy Policy — Professor Fox

1. Data accessed (including Google user data)

When you sign in to Professor Fox with Google, we request only the openid, userinfo.email, and userinfo.profile OAuth scopes. From Google we receive your name, email address, profile picture URL, and Google account identifier. We do not request access to Gmail, Drive, Calendar, Contacts, or any other Google service or restricted scope.

From Google sign-in: full name, email address, profile picture URL, Google account ID.
From you directly: phone number, school / grade / subject details you enter during onboarding.
Generated by your use of the app: lesson plans, teaching manuals, worksheets, quizzes, and other resources you create; wallet credit balance and transaction history; support messages.

2. Data usage

Google user data is used solely to create and authenticate your Professor Fox teacher account, display your name and profile picture inside the app, and send you account-related email. Other data you enter or generate is used to operate the features you request (generating resources, processing wallet credits, providing customer support).

We do NOT use Google user data for advertising or profiling.
We do NOT use Google user data to train, fine-tune, or evaluate any AI / ML model.
We do NOT read, modify, or transmit any Google account content beyond the basic profile fields listed above.

3. Data sharing

We do not sell your personal information and we do not share Google user data with third parties for their own use. Google user data and other account data are only processed by the sub-processors we use to operate the service, strictly on our behalf:

Supabase — authentication and Postgres database hosting (account, profile, generated content).
Razorpay — payment processing for wallet top-ups and subscriptions (transaction metadata only; no card details are stored by us).
AI providers used to generate teaching resources you explicitly request — receive only the prompt content you submit, never your Google account credentials or profile data.
Push and email delivery providers (Firebase Cloud Messaging and transactional email) — receive only the identifiers needed to deliver notifications you have opted into.

4. Data storage & protection

Account data, including the Google profile fields above, is stored in a Supabase-managed Postgres database. Row Level Security (RLS) policies restrict every row to its owning account. Data is encrypted at rest by the database provider and transmitted over TLS 1.2 or higher. Authentication tokens are kept in the browser's local session and are never written to our application logs. Administrative access is limited to a small number of authorized personnel and is audit-logged.

5. Data retention & deletion

We retain account data, including the Google profile fields, for as long as your account is active. You can request deletion of your account and all associated data at any time by visiting our Data Deletion page or by emailing [email protected]. Verified deletion requests are completed within 30 days. Anonymized billing records may be retained longer where required by tax and accounting law.

Google API Services — Limited Use

Professor Fox's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Payments

Payments are handled through Razorpay. We store transaction references, credit balances, and payment status needed to operate your wallet. We do not collect or store card or bank details directly.

Privacy contact

For any privacy question or request, email [email protected]. Business address: Suite No.97, Door No. 63/700, D Space, 6th Floor, Sky Tower, Mavoor Road Junction, Bank Road, Kozhikode-673001.