Privacy Policy

1. Information we collect

• Account information. When you register or sign in, Firebase Authentication processes your email address, authentication credentials, account identifier, and sign-in records. If you choose Google Sign-In, we receive the identity information Google makes available for authentication, which may include your name, email address, and profile image. We do not receive your Google password.
• Learning preferences and content. We store your selected topics, onboarding status, and associated update times with your account. Cards you create, including titles, text, image links, creation times, and photos you choose to attach, are stored using Firebase so you can retrieve them through your account.
• Information stored on your device. CodeBits stores favorites, reading positions, appearance preferences, onboarding state, notification preferences, and cached content locally. Study reminders are scheduled on your device. Device backups may include local app data, depending on your operating-system settings.
• Notifications. When you enable push notifications, we process a messaging token, an app-generated device registration identifier, your account identifier, device platform, notification-enabled status, and registration update time to deliver notifications.
• Usage and diagnostics. The app includes Google Analytics for Firebase and Firebase Crashlytics. These services may automatically process app interactions and sessions, app-instance or installation identifiers, device model, operating-system and app versions, crash traces, and diagnostic information. Analytics may derive approximate location from network information such as an IP address. CodeBits does not request GPS location for its learning features.
• Security and network information. Firebase services and app-integrity providers process technical information such as IP addresses, request records, app identifiers, and attestation results to operate the service and prevent abuse.
• Support communications. If you email us, we receive your email address, message, and any attachments you choose to send. Please do not send passwords or unnecessary sensitive information.

2. How we use information

We use information to authenticate users; save and retrieve learning content and preferences; deliver requested reminders and notifications; understand app usage; diagnose crashes; maintain and improve reliability; prevent unauthorized access and abuse; respond to support and privacy requests; and meet applicable legal obligations.

We do not sell your personal information or use your cards and photos for targeted advertising.

3. Service providers and sharing

We use Google Firebase for authentication, cloud databases and image storage, hosting and backend processing, messaging, analytics, crash reporting, and app integrity checks. On Apple devices, notification delivery and app integrity checks also involve Apple services; on Android, integrity checks may involve Google Play services. Providers receive the information necessary to perform those functions.

We require service providers handling personal information on our behalf to protect it consistently with this policy and applicable law, with the same or equivalent protection. Their processing is also governed by their applicable service and data-protection terms. See Firebase Privacy and Security, Google's Privacy Policy, and Apple's Privacy Policy.

We may disclose information when legally required or when necessary to protect users, investigate abuse, or establish or defend legal rights. If the app changes ownership, information may transfer to the new operator subject to appropriate safeguards and any legally required notice.

4. Permissions and your choices

• Camera: access is used when you choose to take a picture for a card. The picture is uploaded when you save the card with that picture attached. You can create text cards without camera access and revoke camera permission in device settings.
• Notifications: you can turn push notifications off in CodeBits notification settings or your device settings. Local study reminders can be managed separately. Disabling notifications does not delete your account or saved cards.
• Saved content: you can delete individual cards through the app and change available preferences. For other account information or privacy requests, contact us using the email below.
• Consent: where processing relies on your consent, you may withdraw it by changing the relevant permission or setting, or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal. The current app does not provide a separate analytics or crash-reporting switch.

5. Retention and deletion

We retain account information and cloud-saved content while your account remains active or as needed to provide the service. You can request deletion of your account and associated data by emailing reymishra08@gmail.com from the email address associated with your account. We may ask for information reasonably necessary to verify account ownership; we will never ask for your password.

After verifying a deletion request, we delete account information and associated content under our control, except information needed for legal obligations, security, fraud prevention, or resolving disputes. Limited residual copies may remain in backups and service logs until their retention cycles expire. Analytics and diagnostic records are subject to the relevant service's configured retention and deletion processes; records that cannot reasonably be linked to you may remain in aggregated form.

Local information remains until removed through available app controls or by deleting the app's local data. Uninstalling the app or signing out does not delete your cloud account or cloud-saved content. Device or cloud backups are managed separately through your platform provider.

6. Privacy requests

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, restrict or object to certain processing, or withdraw consent. Email us to exercise these rights. We handle requests in accordance with applicable law and may verify your identity before acting. Where applicable, you may also complain to your local data-protection authority.

7. Security and international processing

We use safeguards such as encrypted network connections, authentication, access controls, and app-integrity checks to protect information. No storage or transmission method can guarantee absolute security.

Our providers may process information in the United States and other countries where they operate. These countries may have different privacy laws from yours. Where required, international transfers are subject to applicable legal safeguards and provider data-protection terms.

8. External content and websites

Learning materials may load images from external hosts, and the app lets you open articles, videos, and other websites, including through an in-app browser. Those services may receive your IP address and browser or device information and may use cookies or other tracking technologies under their own policies. Review their policies before providing information. This policy covers CodeBits, not independently operated websites.

If this policy is hosted on GitHub Pages, GitHub also processes technical visitor information to serve and secure the page. See the GitHub Privacy Statement. This policy page itself contains no analytics scripts, advertising, or forms.

9. Children's privacy

CodeBits is a general programming education app and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it as appropriate. Where a higher age threshold applies, we follow applicable requirements.

10. Changes to this policy

We may update this policy as the app or our practices change. We will post the revised policy here and update the date above. For material changes, we will provide additional notice or request consent when required by law.