Privacy Policy for Dumerzel Education

Introduction

Welcome to Dumerzel Education ("Dumerzel," "we," "us," or "our"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information.

This Privacy Policy explains how we handle information when you use our mobile application and related services (collectively, the "Service"). By using Dumerzel, you agree to the collection and use of information as described in this policy.

Important: Dumerzel is designed as an educational tool. We do not sell your personal data to third parties, and we do not use your data for advertising purposes.

1. Information We Collect

1.1 Information You Provide Directly

Account Information:

• Email address
• Name (optional)
• Password (encrypted and stored securely)
• Profile picture (optional)
• Educational preferences (grade level, subjects of interest)

User-Generated Content:

• Voice recordings of your questions (temporarily stored for processing, then deleted)
• Photos or images of educational materials you upload (e.g., homework problems, textbook pages)
• Text messages in conversations with our AI tutor
• Conversation history and learning progress

1.2 Information Collected Automatically

Device Information:

• Device type and model (e.g., iPhone 15, Samsung Galaxy S24)
• Operating system version (iOS, Android)
• Unique device identifiers
• Mobile network information
• Time zone and language settings

Usage Data:

• App features you use most frequently
• Session duration and frequency
• Performance metrics (app crashes, response times)
• Error logs and diagnostic data

Location Information:

We do NOT collect precise location data. We may infer general location from IP address for language/time zone defaults only.

1.3 Audio and Camera Data

Voice Recordings:

• When you ask questions using voice input, we temporarily record your audio
• Audio is sent to our AI provider (OpenAI Whisper, Google Speech-to-Text) for transcription
• Original audio recordings are deleted immediately after transcription
• We retain only the text transcription of your question

Camera/Photo Access:

• When you photograph homework or educational materials, we process images using AI vision models
• Images are analyzed by our AI provider (OpenAI GPT-4 Vision, Google Cloud Vision)
• We store thumbnails of uploaded images for conversation history (can be deleted by you)
• Original images are not stored on our servers beyond 30 days unless you explicitly save them

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Core Educational Services

• AI Tutoring: Process your questions and provide personalized educational responses
• Speech Recognition: Convert your voice questions into text for AI processing
• Visual Learning: Analyze uploaded images of homework, textbooks, and educational materials
• Conversation History: Maintain context across your learning sessions
• Progress Tracking: Help you review past questions and track learning improvements

2.2 Service Improvement

• Performance Optimization: Monitor app performance and fix bugs
• Feature Development: Understand which features are most valuable to improve the app
• Quality Assurance: Ensure AI responses are accurate and helpful
• User Experience: Identify and resolve issues affecting your learning experience

2.3 Security and Compliance

• Account Security: Protect your account from unauthorized access
• Fraud Prevention: Detect and prevent misuse of the Service
• Legal Compliance: Comply with applicable laws and regulations
• Safety: Monitor for inappropriate content or violations of our Terms of Service

2.4 Communication

• Service Updates: Notify you about new features, improvements, or important changes
• Educational Tips: Send helpful learning suggestions (you can opt out)
• Support: Respond to your questions, requests, or feedback
• Account Management: Send password resets, account confirmations, and security alerts

3. How We Share Your Information

We do NOT sell your personal information to anyone. We share your information only in the following limited circumstances:

3.1 Service Providers (Third-Party Processors)

AI and Machine Learning Services:

• OpenAI (GPT-4, Whisper): Processes text questions and voice transcriptions to generate educational responses
  • Privacy Policy: https://openai.com/privacy
  • Location: United States
  • Data Shared: Text questions, conversation context, anonymized usage patterns
  • Note: We do NOT share your name, email, or personally identifiable information with OpenAI
• Google Cloud (Text-to-Speech, Vision AI): Converts text responses to speech and analyzes uploaded images
  • Privacy Policy: https://cloud.google.com/privacy
  • Location: United States (data centers may vary)
  • Data Shared: Text for speech synthesis, images for visual analysis

Infrastructure and Analytics:

• MongoDB Atlas: Database hosting for user accounts and conversation history
  • Privacy Policy: https://www.mongodb.com/legal/privacy-policy
  • Location: United States
  • Data Shared: All user data (encrypted at rest and in transit)
• Redis Cloud: Caching layer for improved performance
  • Privacy Policy: https://redis.com/legal/privacy-policy
  • Location: United States
  • Data Shared: Temporary session data, cached responses (automatically expires)
• Sentry: Error tracking and performance monitoring
  • Privacy Policy: https://sentry.io/privacy/
  • Location: United States
  • Data Shared: Error logs, performance metrics (PII is automatically redacted)

Important: All third-party providers are contractually required to protect your data and use it only for the specific services they provide to us.

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (court orders, subpoenas, search warrants)
• Investigations by law enforcement or government authorities
• Requests to protect the rights, property, or safety of Dumerzel, our users, or the public
• Enforcement of our Terms of Service or investigation of violations

3.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice in the app before your information is transferred and becomes subject to a different privacy policy.

3.4 With Your Consent

We may share your information with other parties when you explicitly consent, such as:

• Sharing your learning progress with a parent or guardian (if you're under 18)
• Integrating with third-party educational platforms you authorize
• Participating in research studies (always optional and anonymized)

4. Children's Privacy (COPPA Compliance)

Dumerzel is an educational tool suitable for students of all ages, including children under 13. We take children's privacy extremely seriously.

4.1 Parental Consent

For users under 13 years old:

• We require verifiable parental consent before collecting personal information
• Parents receive an email notification when their child creates an account
• Parents can review, update, or delete their child's information at any time
• Parents can revoke consent and request deletion of their child's account

To obtain parental consent:

1. Child attempts to sign up with an email address
2. We require a parent's email address during registration
3. We send a consent request to the parent's email with details about our privacy practices
4. Parent must click the verification link and confirm consent
5. Only after confirmation is the account activated

4.2 Enhanced Protections for Children

For users under 13, we implement enhanced privacy protections beyond our standard practices:

4.3 Parent Dashboard and Controls

Parents and guardians have full visibility and control over their child's account:

Viewing:

• View all conversation history and learning activities
• Review questions asked and responses received
• Monitor usage patterns and time spent

Managing:

• Download a complete copy of their child's data
• Delete specific conversations or all data
• Update account settings and preferences

Restricting:

• Disable voice recording features
• Disable camera/image upload features
• Set usage time limits (if available)

Terminating:

• Close the child's account at any time
• Request complete deletion of all data

To exercise parental rights: Contact us at privacy@dumerzel.com with your verification details, or use the parent dashboard in the app (if available).

5. Data Security

We implement industry-standard security measures to protect your information:

5.1 Technical Safeguards

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Authentication: Passwords are hashed using bcrypt with salt
• Access Controls: Role-based access limits who can view your data internally
• Firewalls: Network-level protection against unauthorized access
• Regular Audits: Security assessments and penetration testing

5.2 Operational Safeguards

• Employee Training: All staff are trained on data privacy and security
• Limited Access: Only authorized personnel can access user data (for support/debugging)
• Audit Logs: All data access is logged and monitored for suspicious activity
• Incident Response: We have procedures to detect, respond to, and report security breaches

5.3 Data Retention

• Account Data: Retained while your account is active, deleted 30 days after account closure
• Conversation History: Retained for 1 year or until you delete it, whichever comes first
• Voice Recordings: Deleted immediately after transcription (within 60 seconds)
• Uploaded Images: Deleted after 30 days unless you explicitly save them
• Error Logs: Retained for 90 days for debugging purposes
• Anonymized Analytics: May be retained indefinitely for product improvement

Note: Even after deletion, backups may retain data for up to 90 days before permanent removal.

6. Your Privacy Rights

You have the following rights regarding your personal information:

6.1 Access and Portability

• View Your Data: Access all personal information we have about you
• Download Your Data: Export your conversation history, learning progress, and account details in JSON format
• Request: Email hello@dumerzel.com or use the "Export Data" feature in Settings

6.2 Correction and Updates

• Update Profile: Change your name, email, password, and preferences in Settings
• Correct Errors: Request correction of inaccurate information
• Request: Update directly in-app or contact hello@dumerzel.com

6.3 Deletion (Right to be Forgotten)

• Delete Conversations: Remove individual conversations or all history
• Delete Account: Permanently close your account and erase all personal data
• Request: Use "Delete Account" in Settings or email hello@dumerzel.com
• Timeline: Account deletion completed within 30 days

6.4 Opt-Out Rights

• Marketing Emails: Unsubscribe via link in any email or in Settings
• Analytics: Disable usage data collection in Settings > Privacy
• Voice Features: Disable microphone access in device settings
• Camera Features: Disable camera access in device settings

6.5 GDPR Rights (For EU Residents)

If you are in the European Union, you have additional rights under GDPR:

• Right to Object: Object to processing for direct marketing
• Right to Restrict: Request limited processing of your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Lodge a Complaint: Contact your local data protection authority

Legal Basis for Processing:

• Contract Performance: Processing necessary to provide educational services
• Legitimate Interests: Improving our Service and preventing fraud
• Consent: Processing based on your explicit consent (can be withdrawn anytime)

Data Controller: Dumerzel Education, California, USA
EU Representative: To be appointed (contact privacy@dumerzel.com)

6.6 CCPA Rights (For California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do NOT sell personal information, so no opt-out is needed
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise CCPA rights: Email privacy@dumerzel.com with "California Privacy Request" in the subject line.

7. Cookies and Tracking Technologies

7.1 Cookies We Use

Our mobile app uses minimal tracking:

• Session Tokens: Store your login session (expires after 30 days of inactivity)
• Preferences: Remember your settings (language, theme, notification preferences)
• Analytics: Understand app usage patterns (you can opt out in Settings)

We do NOT use:

• Third-party advertising cookies
• Cross-site tracking
• Behavioral targeting for ads

7.2 Third-Party Analytics

We may use analytics services to improve our app:

• Sentry: Crash reporting and error tracking (privacy-focused, PII redacted)
• Custom Analytics: In-house performance monitoring (no third-party sharing)

You can disable analytics in Settings > Privacy > "Share Usage Data" (toggle off).

8. International Data Transfers

Dumerzel operates globally, and your information may be transferred to and processed in countries other than your own, including the United States.

Data Transfer Safeguards:

• Standard Contractual Clauses (SCCs): For EU data transfers, we use EU-approved SCCs
• Encryption: All data is encrypted in transit and at rest
• Third-Party Agreements: Our service providers are contractually bound to protect your data

By using Dumerzel, you consent to the transfer of your information to the United States and other countries where we operate.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal/regulatory reasons.

How We Notify You:

• In-App Notification: Prominent banner when you open the app
• Email Notification: If you have an account, we'll email you
• Effective Date: Changes take effect 30 days after posting (unless required sooner by law)

Your Options:

• Continue Using: Continued use of the Service after changes constitutes acceptance
• Opt Out: If you disagree with changes, you may delete your account before the effective date

Version History: Previous versions of this policy are archived at https://dumerzel.com/privacy/history

10. Third-Party Links

Our Service may contain links to third-party websites, plugins, or services not operated by us (e.g., educational resources, reference materials).

Important: We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies before providing any personal information.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Email: privacy@dumerzel.com
Support: support@dumerzel.com
Mail: Dumerzel Education
        California, USA

Response Time: We aim to respond to all privacy inquiries within 5 business days.

Data Protection Officer (if applicable): privacy@dumerzel.com

12. Jurisdiction-Specific Notices

12.1 European Union (GDPR)

• Data Controller: Dumerzel Education
• Legal Basis: Consent, contract performance, legitimate interests
• Supervisory Authority: Contact your local EU data protection authority
• Data Transfers: Standard Contractual Clauses (SCCs)

12.2 California (CCPA/CPRA)

• Do Not Sell: We do not sell personal information
• Shine the Light Law: Contact privacy@dumerzel.com for information sharing disclosures
• Categories of Data Collected: See Section 1
• Business Purpose: See Section 2

12.3 Brazil (LGPD)

• Data Controller: Dumerzel Education
• Legal Basis: Consent, contract performance, legitimate interests
• National Authority: ANPD (Autoridade Nacional de Proteção de Dados)

12.4 Canada (PIPEDA)

• Privacy Officer: privacy@dumerzel.com
• Consent: Express consent for sensitive data, implied for non-sensitive
• Office of the Privacy Commissioner: https://www.priv.gc.ca

13. Definitions

• Personal Information: Information that identifies, relates to, or could reasonably be linked to you.
• Service: The Dumerzel mobile application and all related features, content, and services.
• Third-Party Service Provider: A company we hire to perform services on our behalf (e.g., OpenAI for AI processing).
• PII (Personally Identifiable Information): Data that can be used to identify you individually (name, email, voice recording).
• Anonymized Data: Data that cannot be traced back to you individually, even with additional information.

Acknowledgment

By using Dumerzel, you acknowledge that you have read, understood, and agree to this Privacy Policy.

For users under 18: You confirm that your parent or legal guardian has reviewed and consented to this Privacy Policy on your behalf.

© 2025–2026 Dumerzel Education. All rights reserved.