Privacy Policy — ZetaShift Labs & SolveCraft

1. Introduction

This Privacy Policy describes how ZetaShift Labs ("Data Fiduciary", "we", "us", "our") collects, uses, stores, shares, and protects your personal data when you use our educational mobile application SolveCraft — Learn & Solve (Package ID: com.girishks.snapsolve) or interact with our official studio website (https://zetashiftlabs.com/).

We are committed to operating in full compliance with Google Play Developer Policies, the Digital Personal Data Protection Act, 2023 (DPDP Act), and applicable Indian data protection laws. By using SolveCraft or our website, you consent to the practices described in this policy.

2. Definitions

• "Personal Data" means any data about a natural person which is directly or indirectly identifiable.
• "Child" means any person under the age of 18 years, as defined by the DPDP Act, 2023.
• "Data Fiduciary" means the entity that determines the purpose and means of processing personal data.
• "Data Processor" means any person who processes personal data on behalf of a Data Fiduciary.

3. Information We Collect

We collect the following categories of personal data:

• Account Information: Email address and display name when you sign in with Google. Guest users are assigned an anonymous identifier.
• Homework Images: Photos you upload for solving. These are processed by AI and stored on our servers.
• Device Information: Device model, operating system version, unique device identifiers, and country code.
• Usage Data: Number of problems solved, subscription status, feature usage patterns, and app performance metrics.
• Payment Information: Transaction details processed by Razorpay. We do not store credit card, debit card, or UPI credentials on our servers.

4. Purpose of Data Processing

We process your personal data for the following purposes:

• Providing AI-powered homework solving services using Google Gemini
• Managing your subscription, quota, and account
• Processing payments through Razorpay
• Detecting and preventing fraud, abuse, and unauthorized access
• Improving app performance and user experience through anonymized analytics
• Complying with legal obligations under Indian law

5. Legal Basis for Processing

We process your data based on:

• Consent: You provide explicit consent when you accept this Privacy Policy and the Terms of Service during onboarding.
• Contractual Necessity: Processing required to deliver the services you have subscribed to.
• Legitimate Interest: Fraud prevention, security, and service improvement.

6. Data Sharing and Third Parties

We share your data with the following Data Processors:

• Google Gemini (Google LLC, USA): Homework images are sent to Google's Gemini AI for transcription and solving. Subject to Google's Privacy Policy.
• Render (Render Inc., USA): Backend hosting and database storage. Subject to Render's Privacy Policy.
• Firebase Analytics (Google LLC, USA): Anonymized usage analytics. You can opt out in Profile Settings. Subject to Google's Privacy Policy.
• Razorpay (Razorpay, India): Payment processing. Card/UPI details are handled entirely by Razorpay. Subject to Razorpay's Privacy Policy.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

7. Cross-Border Data Transfer

Your personal data may be transferred to and stored in countries outside India, specifically the United States, where our Data Processors (Google, Render, Firebase) operate. These transfers are necessary for providing the service and are made in accordance with applicable data protection laws. By using SolveCraft, you consent to such cross-border transfers.

8. Data Retention

• Account Data: Retained as long as your account is active. Anonymized upon account deletion.
• Homework Images: Stored on our servers and deleted when you delete your account.
• Solve Records: Stored to provide history access and deleted upon account deletion.
• Payment Records: Retained for 8 years as required by Indian tax and audit regulations.
• Analytics Data: Anonymized and retained for up to 26 months.
• Rate Limit Logs: Automatically purged after 60 seconds.
• Feedback Data: Ratings, comments, and associated question references are retained for up to 6 months to improve service quality, then permanently deleted. Feedback is also immediately deleted when you delete your account.

9. Your Rights

Under the DPDP Act, 2023, you have the right to:

• Access: Request a copy of all personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Erasure: Request deletion of your personal data and account.
• Grievance Redressal: Lodge a complaint with our Grievance Officer, who will respond within 7 business days.
• Withdraw Consent: Withdraw consent for non-essential data processing (analytics) at any time via Profile Settings.

To exercise any of these rights, contact our Grievance Officer at support@zetashiftlabs.com.

10. Account Deletion

You may delete your account at any time from Profile Settings. Upon deletion:

• Your email, device ID, and subscription status are anonymized.
• All homework images are permanently removed from our servers.
• All solve history records are permanently deleted.
• Payment records are retained for 8 years as required by law.
• Free trial abuse prevention flags are retained to prevent system abuse.

For complete step-by-step instructions or to submit a web deletion request if you have uninstalled the app, visit our dedicated Account Deletion Page or email support@zetashiftlabs.com.

11. Children's Privacy

SolveCraft is not directed at children under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data without verifiable parental consent, we will take steps to delete such data promptly. If you believe a child has provided us with personal data, please contact our Grievance Officer immediately.

12. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication via Google Sign-In
• Rate limiting to prevent abuse
• Regular security assessments

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

13. Website Visitors & Contact Inquiries

When you browse our studio website (https://zetashiftlabs.com/) or submit messages through our online contact form, we handle your data with the same strict privacy principles:

• Data Collected: Your name, email address, inquiry type, subject, message text, reference links, and any optional file attachments you choose to upload.
• Purpose of Processing: We collect and process this information solely to review, respond to, and communicate with you regarding your support requests, student feedback, educator partnerships, or business inquiries.
• No Selling or Sharing: We do not sell, rent, monetize, or trade contact form submissions with third-party advertisers or data brokers.
• Cookies & Tracking: Our website does not use tracking cookies, advertising pixels, or third-party behavioral profiling tools.
• Data Retention: Inquiries and uploaded files are securely retained only as long as necessary to address your communication, resolve your inquiry, or fulfill legal obligations.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through in-app notifications, email, or updates on our website. The "Last Updated" date at the top indicates the most recent revision.

15. Grievance Officer

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, contact our designated Grievance Officer:

• Name: ZetaShift Labs Support
• Email: support@zetashiftlabs.com
• Response Time: Within 7 business days of receiving your complaint

16. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and applicable rules thereunder. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in India.