**Effective Date:** 7 September 2026
**Last Updated:** 7 September 2026

Welcome to **Gritora**.

Gritora is committed to protecting your privacy and handling your personal information responsibly, transparently, and securely. This Privacy Policy explains how information is collected, used, stored, shared, and protected when you access or use the **Gritora mobile application**, related websites, services, and features collectively referred to as the **"Services"**.

By accessing or using Gritora, you acknowledge that you have read and understood this Privacy Policy.

---

## 1. About Gritora

Gritora is a learning and self-evaluation platform designed to help users improve their knowledge through multiple-choice questions, educational topics, explanations, progress tracking, achievements, leaderboards, and other learning features.

Depending on the features available in the application, users may be able to:

* Create and manage a user profile;
* Select learning topics;
* Answer multiple-choice questions;
* Receive immediate feedback and explanations;
* Track learning progress and performance;
* Earn points, achievements, badges, or similar rewards;
* Participate in leaderboards;
* Receive learning reminders and notifications; and
* Access other educational and community-related features offered by Gritora.

---

## 2. Information We Collect

We collect only the information reasonably necessary to provide, maintain, secure, and improve the Services.

### 2.1 Account and Authentication Information

When you register for or sign in to Gritora, we may collect information such as:

* Mobile phone number;
* Authentication identifiers;
* One-time password ("OTP") verification status;
* User ID or account identifier;
* Account creation date; and
* Authentication and security-related information.

Passwords may not be required where authentication is performed using OTP or another supported authentication mechanism.

Authentication may be provided using services such as **Firebase Authentication**.

### 2.2 Profile Information

Depending on the functionality made available within Gritora, you may provide information such as:

* Display name;
* Profile image or avatar;
* Username;
* Age or age range, where required;
* Country or region;
* Preferred language;
* Areas of learning interest; and
* Other information you voluntarily add to your profile.

Some profile information may be visible to other users where social or leaderboard features are enabled.

### 2.3 Learning and Activity Information

When you use Gritora, we may collect information relating to your learning activity, including:

* Topics selected;
* Questions viewed;
* Answers submitted;
* Correct and incorrect responses;
* Hints viewed;
* Explanations viewed;
* Quiz or learning-session history;
* Scores and points;
* Learning progress;
* Completion information;
* Achievements, badges, or rewards;
* Leaderboard performance;
* Streaks or participation history; and
* Date and time of learning activities.

This information helps us provide personalized learning experiences and track your progress.

### 2.4 Device and Technical Information

We may automatically collect certain technical information when you use the application, including:

* Device type;
* Device model;
* Operating system and version;
* Application version;
* Device identifiers;
* Language and regional settings;
* IP address;
* Network information;
* Application performance information;
* Crash reports;
* Diagnostic information; and
* Security-related logs.

We use this information primarily for application functionality, security, troubleshooting, analytics, and performance improvement.

### 2.5 Notification Information

If you enable push notifications, we may process:

* Device notification tokens;
* Notification preferences;
* Notification delivery information; and
* Interactions with notifications.

You can normally manage notification permissions through your device settings.

### 2.6 Communications and Support Information

If you contact Gritora for support, feedback, complaints, or other enquiries, we may collect:

* Your name;
* Contact information;
* The contents of your communication;
* Screenshots or files voluntarily provided by you;
* Support request information; and
* Information necessary to investigate and resolve your request.

---

## 3. Information We Do Not Intentionally Collect

Unless a particular feature clearly requires it and appropriate notice is provided, Gritora does not intend to collect sensitive information such as:

* Financial account passwords;
* Credit or debit card PINs;
* Government-issued identity documents;
* Biometric information;
* Precise location information;
* Health or medical information;
* Religious beliefs;
* Political opinions; or
* Other highly sensitive personal information.

Please do not submit sensitive personal information through free-text fields, feedback forms, or support communications unless specifically requested and necessary.

---

## 4. How We Use Your Information

### 4.1 Providing the Services

We use information to:

* Create and maintain user accounts;
* Authenticate users;
* Provide access to learning content;
* Record answers and learning progress;
* Calculate scores;
* Maintain learning history;
* Provide explanations and feedback;
* Display achievements;
* Operate leaderboards; and
* Provide application features requested by users.

### 4.2 Personalizing the Learning Experience

We may use learning activity to:

* Recommend suitable topics;
* Adjust the learning experience;
* Identify areas where additional practice may be useful;
* Display progress and performance statistics; and
* Improve the relevance of questions presented to you.

### 4.3 Application Improvement

We may analyze aggregated or appropriately protected usage information to:

* Understand how users interact with Gritora;
* Improve application usability;
* Improve educational content;
* Identify technical problems;
* Measure application performance;
* Develop new features; and
* Improve the overall user experience.

### 4.4 Security and Fraud Prevention

Information may be processed to:

* Protect user accounts;
* Detect suspicious activity;
* Prevent abuse;
* Protect our systems;
* Investigate security incidents;
* Enforce application rules; and
* Maintain the integrity of leaderboards and scoring systems.

### 4.5 Communications

We may use your information to:

* Send authentication messages;
* Send important service announcements;
* Respond to support requests;
* Notify you of changes affecting your account;
* Send learning reminders where enabled; and
* Deliver notifications you have chosen to receive.

### 4.6 Legal and Regulatory Purposes

We may process information where reasonably necessary to:

* Comply with applicable laws;
* Respond to lawful requests from authorities;
* Protect our legal rights;
* Investigate misuse of the Services; or
* Establish, exercise, or defend legal claims.

---

## 5. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal information, we may rely on one or more of the following:

* **Performance of a contract:** Where processing is necessary to provide the Services you request.
* **Consent:** Where you have provided consent for a particular activity.
* **Legitimate interests:** Where processing is necessary for operating, protecting, improving, or securing Gritora and those interests are not overridden by your rights.
* **Legal obligation:** Where processing is required to comply with applicable law.
* **Protection of vital or legal interests:** Where applicable in exceptional circumstances.

Where processing is based on consent, you may withdraw that consent at any time, subject to applicable law.

---

## 6. Firebase and Third-Party Service Providers

Gritora may use technology services provided by third-party service providers to operate the application.

These may include services provided through **Google Firebase**, such as:

* Firebase Authentication;
* Cloud Firestore;
* Firebase Cloud Messaging;
* Firebase Storage;
* Firebase Analytics;
* Firebase Crashlytics;
* Firebase Performance Monitoring;
* Firebase Remote Config;
* Firebase App Check; and
* Cloud Functions for Firebase.

These services may process technical, authentication, usage, diagnostic, or device-related information as necessary to provide their functionality.

Third-party service providers process information according to their own privacy policies, contractual obligations, and applicable data protection requirements.

Gritora does not permit service providers to use personal information for purposes unrelated to providing their services to us, except where separately permitted by law.

---

## 7. Analytics

We may use analytics technologies to understand how the application is used.

Analytics information may include:

* Application sessions;
* Features used;
* Screens viewed;
* General engagement information;
* Application version;
* Device characteristics;
* Performance information; and
* Events generated while interacting with the application.

Where practicable, analytics information is used in aggregated or pseudonymized form.

We use analytics to improve Gritora and not to determine sensitive characteristics about individual users.

---

## 8. Crash Reporting and Performance Monitoring

Gritora may use crash-reporting and application-performance technologies such as Firebase Crashlytics and Firebase Performance Monitoring.

These services may collect information such as:

* Application crash information;
* Device model;
* Operating system;
* Application version;
* Technical logs;
* Performance metrics; and
* Diagnostic information.

This information is used to identify technical failures, improve stability, and maintain application performance.

---

## 9. Leaderboards and Public Information

Gritora may provide leaderboards or other social learning features.

If you participate in these features, certain information may be visible to other users, such as:

* Display name;
* Avatar;
* Points;
* Rank;
* Achievements;
* Learning streak; or
* Other performance information specifically identified within the application.

We recommend that users avoid using their full legal name or other sensitive personal information as a public username or display name.

Information designated as private within your account will not intentionally be displayed publicly unless otherwise communicated to you.

---

## 10. How We Share Information

We do **not sell your personal information**.

We may share limited information only where reasonably necessary in the circumstances described below.

### 10.1 Service Providers

Information may be shared with trusted technology providers that help us provide:

* Cloud infrastructure;
* Authentication;
* Data storage;
* Application hosting;
* Analytics;
* Crash reporting;
* Security;
* Notifications; and
* Technical support.

These providers are permitted to process information only for appropriate business and service-related purposes.

### 10.2 Legal Requirements

We may disclose information if we reasonably believe that disclosure is necessary to:

* Comply with applicable law;
* Respond to a court order or lawful government request;
* Investigate fraud or unlawful activity;
* Protect users;
* Protect Gritora's rights or property; or
* Address a security threat.

### 10.3 Business Transactions

If Gritora is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to appropriate confidentiality and data-protection requirements.

---

## 11. Data Storage and International Transfers

Gritora may use cloud infrastructure provided by third-party service providers.

As a result, personal information may be processed or stored in countries other than the country in which you reside.

Where required by applicable law, appropriate safeguards will be used when transferring personal information internationally.

These safeguards may include contractual protections, recognized transfer mechanisms, or other legally permitted safeguards.

---

## 12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

* Whether your account remains active;
* The nature of the information;
* The purpose for which it was collected;
* Security requirements;
* Legal obligations;
* Fraud-prevention requirements; and
* Legitimate operational requirements.

When information is no longer required, we may delete, anonymize, or securely dispose of it, subject to applicable law and technical limitations relating to backups.

---

## 13. Account Deletion

You may request deletion of your Gritora account and associated personal information.

Where an in-app account deletion feature is available, you should use that feature to initiate deletion.

Alternatively, you may contact Gritora using the contact details provided in this Privacy Policy.

Following an account deletion request:

* Your account may be disabled or deleted;
* Personal information associated with the account will be deleted or anonymized where appropriate;
* Certain information may be retained where required by law, fraud prevention, security, dispute resolution, or legitimate record-keeping obligations; and
* Information stored in system backups may remain temporarily until normal backup-retention cycles expire.

Deletion of an account may permanently remove learning progress, scores, achievements, and other account-related information.

---

## 14. Your Privacy Rights

Depending on where you reside, you may have rights in relation to your personal information.

These may include the right to:

* Request access to personal information;
* Request correction of inaccurate information;
* Request deletion of personal information;
* Request restriction of processing;
* Object to certain processing activities;
* Withdraw consent;
* Request a portable copy of certain information; and
* Lodge a complaint with an applicable data-protection authority.

These rights may be subject to limitations or exceptions under applicable law.

We may need to verify your identity before processing certain privacy requests.

---

## 15. Children's Privacy

Gritora is designed as an educational platform and may offer learning content suitable for different age groups.

We take children's privacy seriously.

Where applicable law requires parental or guardian consent before a child can use particular features or provide personal information, Gritora will take reasonable measures to obtain the required authorization or restrict access to those features.

Users below the minimum age at which they may independently consent to the processing of personal information in their jurisdiction should use Gritora only with the involvement and authorization of a parent or legal guardian.

We do not knowingly seek to collect unnecessary personal information from children.

If a parent or guardian believes that a child has provided personal information to Gritora inappropriately or without required authorization, they may contact us to request review or deletion of that information.

---

## 16. Security

We implement reasonable administrative, organizational, and technical safeguards designed to protect personal information against:

* Unauthorized access;
* Accidental loss;
* Unauthorized disclosure;
* Alteration;
* Destruction;
* Misuse; and
* Other unlawful processing.

Security measures may include:

* Secure authentication;
* Access controls;
* Encryption during transmission;
* Cloud-platform security controls;
* Application integrity protection;
* Monitoring and logging;
* Restricted administrative access; and
* Security updates.

However, no internet-based or electronic storage system can be guaranteed to be completely secure. Users should also take appropriate precautions to protect their devices and accounts.

---

## 17. OTP and Authentication Security

Gritora may use OTP-based authentication.

You should never share an authentication OTP with another person.

Gritora representatives will not ordinarily ask you to disclose an OTP sent to your mobile device for authentication purposes.

If you believe someone has gained unauthorized access to your account, please contact us promptly.

---

## 18. Push Notifications

Gritora may send push notifications relating to:

* Learning reminders;
* Progress;
* Achievements;
* New learning material;
* Account activity;
* Important application updates; and
* Other relevant service information.

You may disable optional push notifications through the application settings, where available, or through your mobile device's notification settings.

Certain essential service or security communications may still be provided through appropriate channels.

---

## 19. Permissions

Depending on the features you use, Gritora may request certain device permissions.

Permissions will be requested only where reasonably necessary to provide a feature.

Examples may include:

* Notification permission;
* Camera or photo-library access for uploading a profile picture; or
* Other device functionality required by a feature you choose to use.

You can manage application permissions through your device settings.

Disabling certain permissions may prevent the corresponding feature from functioning correctly.

---

## 20. Third-Party Links

Gritora may occasionally contain links to third-party websites, applications, or resources.

We are not responsible for the privacy practices, security, content, or availability of third-party services.

When you access a third-party service, its own terms and privacy policy will apply.

We encourage you to review the privacy policies of third-party services before providing personal information.

---

## 21. Advertising

Unless otherwise clearly disclosed within the application, Gritora does not use personal information to provide targeted advertising based on sensitive personal characteristics.

If advertising functionality is introduced in the future, this Privacy Policy will be updated as appropriate and any consent required under applicable law will be obtained.

---

## 22. Automated Processing

Certain Gritora features may automatically process your learning activity to:

* Calculate scores;
* Determine achievements;
* Produce rankings;
* Recommend questions or topics;
* Identify learning progress; or
* Personalize educational content.

Such processing is intended to support the learning experience.

Where required by applicable law, users may have additional rights concerning decisions made solely through automated processing that produce significant legal or similar effects.

---

## 23. Anonymized and Aggregated Information

We may create aggregated or anonymized information from application usage data.

When information has been properly anonymized so that it can no longer reasonably identify an individual, it may be used for purposes such as:

* Product improvement;
* Educational research;
* Statistical analysis;
* Performance measurement; and
* Service development.

Anonymized information is not treated as personal information where applicable law recognizes it as non-personal data.

---

## 24. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

* Changes to Gritora;
* New application features;
* Changes in technology;
* Changes in our information-processing practices;
* Changes in applicable laws; or
* Security and regulatory requirements.

When material changes are made, we may provide notice through the application or another appropriate communication channel.

The **"Last Updated"** date at the top of this Privacy Policy identifies when the latest version became effective.

We encourage you to review this Privacy Policy periodically.

---

## 25. Governing Privacy Requirements

Gritora will seek to process personal information in accordance with applicable privacy and data-protection laws relevant to its operations and users.

Depending on your jurisdiction, additional rights or requirements may apply.

Nothing in this Privacy Policy is intended to limit rights that cannot lawfully be restricted under applicable data-protection legislation.

---

## 26. Contact Us

If you have questions, concerns, complaints, or requests relating to this Privacy Policy or the processing of your personal information, please contact:

**Gritora Privacy Team**
**Email:** [Insert Privacy/Support Email Address]
**Website:** [Insert Website Address]

For privacy-related requests, please include sufficient information for us to identify your account and understand your request.

**Never include passwords, OTPs, or other authentication secrets in your communication.**

---

## 27. Consent and Acknowledgement

By creating an account or using Gritora, you acknowledge that you have been provided with this Privacy Policy and understand how Gritora processes information as described above.

Where consent is specifically required under applicable law, Gritora will request that consent separately and will provide an appropriate mechanism for withdrawing it.

---

**© 2026 Gritora. All rights reserved.**