Information this service handles
The current app code uses the following information to provide account, learning, and support features. What is collected depends on which features you use and what you choose to provide.
- Account and sign-in data: name, email address, Firebase account identifier, verification state, and, when you choose phone sign-in or provide it, phone number. Google sign-in may provide basic profile details such as your name, email, and profile photo.
- Profile data: profile photo or avatar, daily study goal, and profile fields supported by the account model, including address, postal code, state, and country where provided.
- Learning records: course and subject selections, bookmarks, practice answers, correctness, scores, answer timestamps, and session summaries.
- Device and app state: a browser-generated device identifier, sign-in/session details, recent searches, and preferences such as theme. Practice recovery and bookmarks may be stored in browser storage.
- Parent approval records for users aged 10–17: parent/guardian email, verified Firebase account identifier, consent timestamp and version, and the parent’s adult-age and relationship declarations. The child’s full date of birth is checked during signup but is not stored. Unapproved requests expire after 24 hours.
- Support messages: the message you submit, your account identifier and email address, and the submission time.
How information is used
- Create and secure your account, sign you in, and support account recovery.
- Deliver courses, practice sessions, answer checking, progress summaries, bookmarks, and profile features.
- Maintain session/device controls, troubleshoot errors, and protect the service from misuse.
- Read and respond to support requests.
Services that process information
The app is built to use Firebase Authentication, Cloud Firestore, and Cloud Storage. Google is an identity provider when you choose Google sign-in. These providers process information as needed to deliver their services under their own terms and privacy information. The Firebase project’s selected settings determine service regions; Firebase Authentication and other Firebase services can have different processing locations.
Browser storage
The web app uses browser local or session storage for items such as a device identifier, practice-session recovery, bookmarks, and display preferences. These browser-only copies are not included in the server-side one-year deletion schedule and are not removed by account deletion; clear this site’s browser storage to remove them. When you arrive from a button on a public exam page, session storage also keeps which exam you came from, so your first screen can start on that exam. Session storage normally ends when its browser tab is closed. Firebase Authentication may also use browser-managed persistence to keep you signed in. Browser settings can clear or restrict this storage, which may affect those features.
Retention and deletion
Account, profile, learning, support-report, parent-consent, and uploaded profile-image data held by ExamSphere are scheduled for deletion one year after the account’s last recorded activity. The app refreshes the activity date at sign-in and during active signed-in use; authenticated practice and progress requests also refresh it, at most once a day. Temporary practice records and unclaimed consent requests have shorter expiry periods. You may request earlier account deletion by contacting noveletytech.examsphere@gmail.com. The scheduled service removes the account, its nested learning records, support reports, profile image, and associated parent-consent record. Backups or records retained by third-party providers may follow their own retention schedules.
Your choices and requests
You can choose whether to use Google sign-in, phone sign-in, profile photos, and support features, and you can change some profile details and preferences in the app. Rights to access, correct, export, restrict, or delete personal information depend on applicable law. Contact noveletytech.examsphere@gmail.com to make a privacy request.
Children and age eligibility
You must be at least 10 years old to create an account. The signup service checks the date of birth you provide and does not retain the full date; age is self-attested and is not independently verified. Users aged 10–17 must receive permission from a parent or legal guardian before the account can be provisioned. The parent/guardian verifies control of their email address through Firebase Authentication, attests that they are at least 18, confirms their relationship to the student, and gives permission. The server links that approval to the student account and requires the link for protected learning APIs. Adult age and guardian relationship are self-attested; ExamSphere does not independently verify identity, age, or family relationship. Contact noveletytech.examsphere@gmail.com to withdraw parental consent or request earlier deletion.
Security and policy updates
The app uses authentication and access controls, but no online service can promise absolute security. This policy may be updated when data practices, service providers, or legal requirements change.