ExamCite

Privacy Policy

Version 1.0 · Pre-Launch Beta Effective date confirmed at public launch

ExamCite LLC (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what personal information we collect when you use the ExamCite application (“the App”), how we use it, with whom we share it, and the choices you have regarding your information.

By creating an account or using any part of the App, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, do not use the App. This Policy applies to all platforms on which ExamCite is available, including the web application at examcite.com and the iOS app (v1.1). Android support is planned for a future release and will be covered by this same Policy.

1. Information We Collect

We collect information in the following categories:

1.1 Account Information

When you register for an account, we collect your email address. Passwords are managed securely by Firebase Authentication (Google) and are never stored in plain text by ExamCite.

1.2 Exam & Study Data

When you use the App, we collect data about your study activity, including:

• Practice exam results, scores, and pass/fail outcomes
• Exam session timestamps and duration
• Per-topic performance and question response history
• Progress over time (streaks, completion rates)

1.3 Usage Analytics

We use Firebase Analytics to collect anonymised data about how users interact with the App, including pages and features viewed, session frequency and duration, and in-app events (exam started, exam completed, upgrade tapped). This data is aggregated and does not identify you individually.

1.4 Device & Technical Information

We automatically collect certain technical information when you use the App, including device type, model, and operating system version; app version; browser type and version (web only); IP address; and general geographic location derived from IP (country/state level only).

1.5 Crash & Diagnostic Reports

We use Firebase Crashlytics to automatically collect crash reports when the App experiences an error. These reports may include the type and cause of the error, device state at the time of the crash, and a stack trace identifying where the error occurred. Crash reports do not include the content of your exam sessions or AI chat queries.

1.6 AI Chat Queries (RAG Chat)

When you use the RAG Chat feature, the text of your questions is transmitted to Anthropic, PBC via their Claude API to generate a response. ExamCite does not store your chat history between sessions. However, your queries may be processed and retained by Anthropic in accordance with their own privacy policy and terms of service. We recommend you do not include personal or sensitive information in your chat queries.

1.7 Subscription & Payment Information

If you purchase a subscription, payment is processed by Apple (via the App Store on iOS) or Stripe, Inc. (via the web). On iOS, subscription management is handled by RevenueCat, Inc. ExamCite does not collect or store your credit card number, bank account details, or full payment card data. We do receive and store transaction metadata including your subscription tier, billing date, renewal status, and a transaction identifier from Apple, Stripe, or RevenueCat.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide, operate, and maintain the App and its features
• Authenticate you and manage your account
• Process subscription payments and manage your entitlement
• Power the AI-assisted RAG Chat study assistant
• Track and display your exam progress and performance
• Analyse usage patterns to improve the App’s design and content
• Identify and fix technical errors via crash reports
• Communicate with you about your account, subscription, or support requests
• Detect and prevent fraud, abuse, or violations of our Terms of Service
• Comply with applicable laws and legal obligations

We do not use your information for advertising purposes and we do not serve ads within the App.

3. Third-Party Services

ExamCite relies on the following third-party services to operate. Each has access to your data only as necessary to perform their function.

4. Data Sharing

We do not sell your personal information to third parties. We do not share your data with advertisers. We may share your information in the following limited circumstances:

• With the third-party service providers listed in §3 above, solely to operate the App
• If required to do so by law, court order, or lawful government request
• To protect the rights, property, or safety of ExamCite LLC, our users, or the public
• In connection with a merger, acquisition, or sale of all or substantially all of our assets — in which case we will notify you via email or in-app notification

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the App’s services.

• Account and study data: retained while your account is active. Upon account deletion, your personal data will be deleted within 90 days, except where retention is required by law.
• Analytics data: retained per Google’s Firebase Analytics retention settings (typically up to 14 months).
• Crash reports: retained per Google’s Crashlytics settings (typically 90 days).
• Payment records: retained as required by applicable financial regulations (typically 7 years).

To request deletion of your account and data, contact us at support@examcite.com.

6. Security

We take reasonable technical and organisational measures to protect your personal information, including:

• All data transmitted between the App and our servers is encrypted in transit using HTTPS/TLS
• Firebase Authentication manages password security — passwords are never stored in plain text
• Firestore Security Rules restrict data access so users can only read and write their own data
• API keys and service credentials are stored in server-side environment variables and are never exposed in client code

While we implement these safeguards, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Privacy Rights

7.1 All Users

Regardless of your location, you may:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Opt out of non-essential analytics (contact us to request this)

To exercise any of these rights, email us at support@examcite.com. We will respond within 30 days.

7.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request a report of the categories and specific pieces of personal information we have collected about you in the past 12 months, and the purposes for which it was collected.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Opt Out of Sale: We do not sell your personal information. You do not need to take any action to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email us at support@examcite.com with the subject line “CCPA Request” and include your name and the email address associated with your account. We will verify your identity and respond within 45 days.

8. Children’s Privacy

ExamCite is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you are under 18, you may not use the App.

If we become aware that we have inadvertently collected personal information from a person under 18, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a minor, please contact us at support@examcite.com.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification or by email to the address on your account at least 14 days before the changes take effect. The updated Privacy Policy will be posted at examcite.com/privacy with a revised effective date. Your continued use of the App after the effective date constitutes acceptance of the updated Policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: