Privacy Policy

1. Introduction

Welcome to Kuppi.ai ("we", "our", or "the Application"). We are dedicated to empowering Sri Lankan students with AI-assisted study tools, including past paper summarization, active recall flashcards, and automated revision quizzes.

This Privacy Policy explains how your personal information and uploaded study materials are collected, processed, stored, and protected when you use our mobile application and related API services.

2. Information We Collect

We collect only the minimum information necessary to authenticate your account and deliver educational AI features:

A. Account & Authentication Information

• Mobile Phone Number: Used as your unique account identifier and for sending secure One-Time Passwords (OTP).
• Carrier Masked Subscriber ID (massNumber): Provided by telecommunication carriers (Mobitel mSpace & Dialog Ideamart) to identify active subscription billing status without exposing credit cards or banking details.
• Profile Name: Optional student display name if provided by you.

B. Uploaded Study Materials & Educational Content

• PDF Files: Lecture notes, tutorial sheets, and past examination papers uploaded by you for text extraction and AI analysis.
• Generated Study Content: Summary points, flashcards, multiple-choice quizzes, and Q&A chat interactions generated from your study documents.

C. Technical & Device Data

• Device name, operating system version (e.g. Android), IP address, and session timestamps for security logging, rate-limiting, and fraud prevention.

3. How We Use Your Information

Your data is processed strictly for the following educational purposes:

• Authentication & Security: Verifying your phone number via carrier SMS OTP and issuing secure JWT session tokens.
• AI Educational Analysis: Parsing your uploaded study documents with the Google Gemini API to extract key definitions, generate flashcards, and create practice quizzes in Sinhala and English.
• Subscription & Usage Management: Enforcing fair daily upload limits (3 free uploads/day) and managing carrier billing subscriptions for unlimited student passes.
• Customer Support: Resolving student inquiries, troubleshooting login issues, and processing cancellation requests.

4. Automatic 3-Day File Deletion & Data Retention

We implement an automated background cleanup worker (powered by Redis & BullMQ) that runs periodically on our server infrastructure:

• 72-Hour Automatic Purge: Every uploaded PDF file, extracted text chunk, generated summary, flashcard set, and quiz question is automatically and permanently deleted from our server disks and database 3 days (72 hours) after creation.
• Account Sessions: Inactive authentication sessions expire after 7 days and can be revoked immediately upon logging out.

5. Third-Party Services & AI Processing

We collaborate with trusted technology partners under strict data confidentiality agreements:

• Google Gemini API: Study document text is securely transmitted to Google Gemini for real-time natural language processing and translation. Content sent through the API is not used by Google to train public machine learning models.
• Mobitel (mSpace) & Dialog (Ideamart): Used exclusively to deliver carrier SMS OTP verification codes and manage micro-subscriptions via mobile billing.
• Hosting & Database: Hosted on private Linux VPS instances with PostgreSQL databases protected by SSL and firewall rules.

6. Telecommunication Billing & Cancellation (Unsubscribing)

Kuppi.ai supports carrier direct billing for Sri Lankan students. No credit card or banking details are ever collected or stored on our servers.

• Daily Micro-Subscription: Daily subscription fees (e.g., Rs. 5 + tax/day) are charged directly to your Mobitel or Dialog prepaid account balance or postpaid monthly bill.
• How to Unsubscribe Anytime:
  1. Open the Kuppi.ai mobile application.
  2. Go to the Profile tab.
  3. Tap "Unsubscribe from Study Service".
  4. Your subscription will be immediately cancelled with the carrier (mSpace/Ideamart), and all active sessions will be revoked.

7. Data Security

We employ industry-standard technical measures to secure student information, including bcrypt password/OTP hashing, JWT access token authentication, HTTPS encrypted network communication, and isolated file storage directories.

8. Children & Student Privacy

Kuppi.ai is built for educational revision. We do not collect behavioral advertising tracking data, nor do we profile students for commercial marketing purposes.

9. Your Rights & Data Deletion Requests

You have the right to request the deletion of your account and all associated records. Because study files are automatically destroyed after 3 days, only your phone number record and session history are retained while your account remains active.

To request immediate permanent deletion of your account, email us at support@kuppiai.lk with your registered phone number.

10. Contact Us

If you have any questions, feedback, or concerns regarding this Privacy Policy, please contact our support team: