Clsmate Privacy Policy

1. App Introduction

Clsmate is a modern, secure, and interactive education-based social platform designed for students. Here, students can learn while showcasing their talents, participate in online competitions, and communicate with other users in a safe, monitored environment.

Our platform is built with privacy and security as foundational principles, ensuring that students can focus on learning and growth without compromising their personal information.

2. Data We Collect

Clsmate collects only the essential, non-sensitive user data required to provide our services:

• Name - To personalize your experience
• Email - Only Gmail and iCloud addresses for authentication
• Gender - For demographic analysis and personalization
• Address - City/village/area for localized content
• Profile Photo - Iframe image URL for user identification
• User ID - Automatically generated by Supabase for account management

3. How We Use Your Data

We use your information exclusively to enhance your educational experience:

• Account Management - Creating and securing your account
• Personalization - Displaying your profile and content preferences
• Content Interaction - Enabling text posts, images, videos, and social interactions
• Educational Services - Providing learning materials and competitions
• Localized Experience - Showing relevant content based on your area (no sensitive data shared)
• Platform Improvement - Enhancing user experience and maintaining security

4. Backend & Security (Supabase)

We've implemented enterprise-grade security measures to protect your data:

• Secure Infrastructure - Data is stored in Supabase's PostgreSQL servers with 99.99% uptime
• Encrypted Transmission - All data transfers use HTTPS encryption
• Access Controls - Row-Level Security prevents unauthorized data access
• Regular Audits - Security rules are continuously monitored and updated
• Backup Systems - Regular backups ensure data integrity and availability

5. Data Sharing

Clsmate maintains a strict no-sharing policy for personal information:

• No Third-Party Sales - We do not sell, trade, or rent your personal data
• Limited Processing - Only Supabase processes data on our behalf under strict agreements
• No Tracking - We do not use third-party tracking or advertising services
• Legal Compliance - Data may be shared only when required by law with proper legal process

6. Data Retention

We follow data minimization and retention best practices:

• Active Accounts - Data is retained while your account remains active
• Account Deletion - All personal data is permanently deleted upon account closure
• Backup Rotation - Backups are automatically purged after 30 days
• Inactive Accounts - Accounts inactive for 2 years may be scheduled for deletion with notification

7. User Rights

You have complete control over your data:

• Access - View all your personal information in your profile
• Correction - Update or modify your data at any time
• Deletion - Request complete account and data removal
• Export - Request a copy of your data in portable format
• Restriction - Limit how we use your data for specific purposes

8. Children's Privacy

We take extra precautions for our younger users:

• Parental Consent - Users under 13 require verified parental permission
• Limited Data Collection - Minimal information collected for younger users
• Enhanced Monitoring - Additional content moderation and safety measures
• Educational Focus - Age-appropriate content and interactions
• COPPA Compliance - We adhere to the Children's Online Privacy Protection Act

9. Cookies & Local Storage

We use minimal, essential storage technologies:

• Session Management - Local Storage maintains your login session
• Preferences - Your class selections and UI preferences are saved locally
• No Tracking - We do not use tracking cookies or third-party analytics
• Transparency - You can view and clear stored data in your browser settings

10.Account Deletion

Users can request deletion of their Clsmate account and all associated data by contacting us at [email protected].

• All personal data (name, email, profile photo, etc.) will be permanently deleted upon request.
• Backup data will be purged automatically after 30 days.
• Requests will be processed within 7 business days.

By contacting us, users can exercise their right to data deletion without needing to delete their account manually.