Privacy Policy

1. Introduction

Welcome to F2S (Feynman 2 Scroll), operated by Destan Gokalp ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

We respect your privacy and are committed to protecting your personal data. This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign in with Apple, we receive your Apple User ID and, if you choose to share them, your email address and display name.
• Study Materials: Documents, PDFs, images, and text you upload for learning purposes.
• Voice Recordings: Audio recordings of your answers during quizzes, which are processed for speech-to-text conversion.
• Learning Preferences: Your settings such as questions per session, pass threshold, and material preferences.

2.2 Information Generated Through Use

• Quiz Data: Questions generated from your materials, your answers, scores, and feedback.
• Learning Progress: Spaced repetition data, study streaks, session counts, and performance statistics.
• Intervention Records: Information about when the app activates to help you study before accessing other apps.

2.3 Subscription Information

We use RevenueCat to manage subscriptions. RevenueCat receives your anonymized user identifier and subscription status. We do not have access to your payment card details—all payments are processed securely by Apple through the App Store.

3. How We Use Your Information

We use your information to:

• Provide and improve the F2S learning experience
• Generate personalized quiz questions from your study materials
• Track your learning progress and implement spaced repetition
• Process your voice answers using AI-powered validation
• Manage your subscription and premium features
• Authenticate your account and maintain security
• Respond to support requests
• Measure marketing campaign effectiveness (with your consent)
• Analyze app usage patterns to improve the user experience

3.1 Legal Basis for Processing (GDPR)

For users in the EU/EEA, we process your data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the F2S service you requested (account management, learning features, subscription)
• Legitimate Interests: Improving our services, security, and fraud prevention
• Consent: Marketing analytics and tracking (you can withdraw consent at any time via device settings)

4. Third-Party Services

We use the following third-party services to provide our app:

4.1 Data Processors

The third-party services listed above act as data processors on our behalf. They process your data only according to our instructions and are contractually bound to protect your information.

4.2 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Data shared with our service providers is solely for operating and improving F2S.

5. Data Storage and Security

5.1 Where Your Data is Stored

• Cloud Storage: Your account data, study materials, and learning progress are stored in Firebase (Google Cloud) servers.
• Local Storage: Some data is cached locally on your device for offline functionality and performance.

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication via Sign in with Apple
• Firebase Security Rules restricting data access
• Regular security assessments

6. Data Retention

We retain your data for as long as your account is active. You can delete your account and all associated data at any time through the app's Settings menu. Upon account deletion:

• Your profile and settings are permanently deleted
• Your study materials and questions are permanently deleted
• Your learning progress and session history are permanently deleted

Some data may be retained in backups for up to 30 days after deletion.

7. Your Rights

Depending on your location, you may have the following rights:

7.1 For All Users

• Access: Request a copy of your personal data
• Deletion: Delete your account and all associated data
• Correction: Update or correct your information

7.2 For EU/EEA Residents (GDPR)

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

7.3 For California Residents (CCPA/CPRA)

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights
• Right to limit use of sensitive personal information

7.4 For UK Residents (UK GDPR)

UK residents have the same rights as EU/EEA residents under Section 7.2. For complaints, you may contact the Information Commissioner's Office (ICO).

7.5 For Brazilian Residents (LGPD)

• Right to confirmation of data processing
• Right to access your data
• Right to correction of incomplete or inaccurate data
• Right to anonymization, blocking, or deletion of unnecessary data
• Right to data portability
• Right to revoke consent

To exercise any of these rights, please contact us at the email address below.

8. Children's Privacy

F2S is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. Analytics and Tracking

We use AppsFlyer for mobile attribution and analytics to understand how users discover our app and measure the effectiveness of our marketing campaigns.

9.1 App Tracking Transparency

In accordance with Apple's App Tracking Transparency (ATT) framework, we will ask for your permission before collecting your device's Advertising Identifier (IDFA) for tracking purposes. You can choose to:

• Allow Tracking: We may use your IDFA to measure ad campaign effectiveness and provide personalized advertising.
• Ask App Not to Track: We will not collect your IDFA, though some anonymous, aggregated analytics may still occur.

You can change your tracking preference at any time in your device's Settings → Privacy & Security → Tracking.

9.2 Data Collected for Analytics

When you allow tracking, we may collect:

• Device advertising identifier (IDFA)
• App install and launch events
• Subscription events (trial start, purchase)
• Learning milestones (quiz completion, scores)

This data helps us improve our app and understand which marketing channels bring users who benefit most from F2S. Your personal learning content and study materials are never shared with advertising partners.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States where our service providers (Firebase, Google Cloud) are located. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the app and updating the "Last updated" date. Your continued use of the app after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: