Nesto Topper

Introduction

Welcome to Nesto Topper (referred to as "the App" or "our service"), an educational application designed to help students prepare for curriculum-based exams in Gujarat. This document sets out our privacy and data safety policies so you know exactly what information we handle.

1. Information Collection & Use

Our app values your privacy and is built to be simple and secure. We collect very minimal data to provide our core educational features:

• Guest Mode: You do not need to register or provide personal details to access standard textbook practice papers and question pools.
• Registered Profiles: If you create an account, we process only the details needed for login, profile restore, and progress sync, such as name, surname, mobile number, standard, district, and email.
• Local Progress Caching: Your test scores, practice results, and progress are stored on your device to enable offline study.
• Nesto Store Cosmetics: Students can exchange coins earned through quizzes for fixed avatars, frames, and name styles. There are no real-money purchases. The App stores unlocked product IDs, the coin cost at the time of unlock, unlock time, and the currently equipped cosmetic IDs. Guest Store data remains on the device; registered users' Store data is synchronized with their secured profile so it can be restored across devices.
• Network Logs: Temporary technical logs may be processed when downloading updated content bundles from our Supabase backend.

2. Analytics & App Usage Data

We use Firebase Analytics / Google Analytics for Firebase to understand how the App is used and to improve learning quality, stability, and performance.

• Usage Events: The App may record basic usage events such as app opens, quiz starts, quiz completions, bookmark actions, content sync status, and similar feature interactions.
• Purpose: Analytics data is used only to improve the App experience, identify technical issues, understand which learning features are useful, and plan better educational content.
• No Sensitive Analytics Logging: We do not intentionally send sensitive personal information such as student name, mobile number, email, exact answer text, or private account details inside analytics events.
• No Advertising ID Use: Advertising ID collection is disabled in the App. We do not use Firebase Analytics for advertising, ad personalization, or selling user data.
• Third-Party Service Provider: Firebase Analytics is provided by Google. Analytics data may be processed by Google as a service provider according to Google's Firebase and Google Analytics policies.
• Crash & Error Reporting: We may collect anonymous crash and error reports through Sentry to diagnose and fix technical issues. These reports contain technical diagnostics (such as error type, device model, and app version) and are not used for advertising.

3. Device Permissions

To function correctly, the App requires the following permissions:

• Internet Access: Required to query the database and fetch updated question bundles OTA (Over-The-Air).
• Network State Access: Used to check if the device is connected to the internet before trying to update content manifest.
• Notifications (Optional): No notification permission is requested at app startup. On supported Android versions, the Android permission prompt appears only after the user explicitly chooses to enable Daily Challenge reminders.

4. Optional Daily Challenge Reminders

When enabled, Android schedules an inexact reminder at approximately 9:00 AM India Standard Time and an evening reminder at approximately 9:00 PM while that day's Daily Challenge remains incomplete. Scheduling and completion checks happen locally on the device.

• No Push Profile: These reminders do not use Firebase Cloud Messaging, a push-notification token, or a server-side notification list.
• No Personal Data Transfer: No name, account detail, quiz answer, or other personal information is sent to a server to schedule these reminders.
• No Exact-Alarm Access: The App does not request Android's exact-alarm permissions. Delivery time may vary slightly so the reminders remain battery-friendly.
• Restart Recovery: Android's normal boot-completed signal is used only to restore reminders the user already enabled after a device restart or App update. It is not used to start tracking, upload data, or enable reminders without consent.
• Reminder Tap: Tapping a reminder opens the Daily Challenge inside the App. It does not bypass onboarding or account controls.
• User Control: Reminders are disabled by default and can be turned off at any time in the App or Android notification settings.
• Device Controls: Android battery and notification controls may delay or suppress a scheduled reminder.

5. Advertising

The App is free, and to help cover its running costs and the prizes given to students it may show ads served by Google AdMob. Nesto Topper is designed for children, so every ad request is configured for child-directed use.

• Where Ads Appear: Small banner ads may appear on waiting and summary screens such as quiz result screens, the weekly and daily leaderboards, Mega Test waiting screens, Battle Room waiting and result screens, the subject list, and level lists. Ads never appear while a student is answering questions in a quiz, the Daily Challenge, a Mega Test paper, or a Battle.
• Optional Rewarded Video: On some completed practice tests the App may offer an optional video that doubles the points that test earned. Watching is never required, the video starts muted, and the extra points are added only if the video is watched to the end. No other feature is locked behind an ad.
• Non-Personalised, Child-Directed Ads Only: Every ad request is tagged for child-directed treatment with a maximum content rating of G and asks for non-personalised ads. We do not use interest-based advertising, remarketing, or cross-app tracking.
• No Advertising ID: The Android Advertising ID permission is removed from the App, so neither the App nor the ads SDK can read the Advertising ID.
• No Personal Details Shared with Advertisers: We never pass a student's name, mobile number, email, district, scores, or answers to AdMob or to any advertiser.
• Data Processed by Google: To deliver ads, limit how often they are shown, measure them, and prevent fraud, Google may process limited technical information such as device type, operating system and app version, a truncated IP address, and interactions with the ad. We have turned off sharing of the full IP address. Google processes this data under its own policies for child-directed ad requests: How Google uses information from apps that use its services.
• Offline Use: Ads need an internet connection. When the device is offline, no ads are shown and every learning feature continues to work.
• Sponsored Prizes: Some competitions may name the person or organisation that provides a prize. This is shown only as a credit on the relevant screen and involves no sharing of student data.

6. Data Safety & Security

We are fully committed to protecting your data and adhering to Google Play Data Safety guidelines:

• No Sale or Ad Tracking: We do not sell, rent, or trade user data. Any ads in the App are non-personalised and child-directed, and we do not track students across other apps or websites (see Section 5).
• Encryption in Transit: Any communication between the App and our servers is secured using modern TLS/HTTPS encryption protocols.
• Private Profiles: Registered profile, progress, and Store rows are protected with row-level security. Weekly and daily leaderboards, Weekly Toppers, and Sunday Ceremony screens may publicly show the student name, standard, district, score, rank, and equipped avatar, frame, and name style. Mobile number, email, Store unlock history, and available coin balance are never shown there.
• Optional Top-3 Gift Claims: A weekly Top-3 winner who chooses to claim an educational kit receives a private claim code. The App can open a prefilled WhatsApp or SMS message containing the student name, rank, week, claim code, and the last four digits of the registered mobile number. A winner or guardian may voluntarily provide a delivery address in that conversation. These details are used only for claim verification, delivery, and related support and are never shown on leaderboards or sent to analytics. Selecting WhatsApp or SMS opens that third-party app, whose privacy practices apply to the message.
• No Location Tracking: The App does not track precise physical location or monitor background activities.

7. Educational Content & Accuracy Disclaimer

Some of the practice questions, answer keys, and detailed explanations inside the App are curated or generated using artificial intelligence and automated content models. While we make every effort to verify their accuracy and alignment with the official GCERT/GSEB textbooks, we encourage students and educators to double-check critical educational material. If you find any discrepancies, typos, or incorrect answers, please report them to us so we can update them in the next content release.

8. Account & Data Deletion Policy

We provide all users with full control over their account and stored data in compliance with Google Play Developer policies:

• In-App Deletion: You can delete your student profile and clear all locally cached practice progress directly within the App's settings page.
• Complete Account & Data Erasure: To request permanent deletion of your authentication account, registered profile, synced progress, Store unlock history, equipped cosmetic selections, and any associated gift-claim or delivery details, use the in-App deletion option or email us from your registered email address at nestocaresupport@gmail.com.
• Processing Time: Upon receiving your request, we will verify ownership and permanently erase all associated data from our servers within 7 business days.
• External Deletion Page: This section is the public account-deletion resource for Google Play. Its direct URL is https://nesto-topper-525b4.web.app/privacy-policy.html#account-deletion.

9. Developer Contact

If you have any questions, feedback, or data deletion requests regarding this Privacy Policy or the App, please reach out to us at:

Email: nestocaresupport@gmail.com