1. Who we are
ChapterAce (the “App”, “we”, “us”) is a study tool that turns school textbook chapters into exam-style practice questions. It is operated by Iniyarajan, an individual based in Coimbatore, Tamil Nadu, India (the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 — the “DPDP Act”).
This policy covers the ChapterAce mobile app and the website at chapterace.com. By using them you agree to this policy. If you do not agree, please do not use ChapterAce.
2. Data we collect
| Category | What exactly | Source |
|---|---|---|
| Account | Email address; display name and user ID provided by your sign-in method (Email & password, Google, or Apple). With “Hide My Email” on Apple we receive a relay address. | You / sign-in provider |
| Study preferences | Board (CBSE, TN State Board, TN Matric) and class you select. | You · stored on your device |
| Generation history | Board, class, subject, chapter number, status and timestamps of each question set you generate; a monthly count of generations. | Created by the App |
| Uploaded content | If you use Upload Content: the PDF or photo you choose, the text extracted from it, and the questions generated from it. | You |
| Support messages | Anything you send us on WhatsApp or email, including your phone number or email address. | You |
| Technical | Standard server logs (IP address, request time, app version) needed to run and secure the service. | Automatic |
What we do not collect: precise location, contacts, photos other than the ones you deliberately upload, advertising identifiers, or any data from your device beyond what is listed above. The App contains no advertising or analytics SDKs.
3. Why we use it (purposes & legal basis)
- Provide the service — sign you in, remember your board and class, generate and show your question sets, and explain answers. Basis: your consent when you create an account, and performance of the service you asked for.
- Fair-use limits — count monthly generations to apply free-tier limits and prevent abuse. Basis: legitimate use of the service.
- Support — reply to you when you contact us. Basis: your request.
- Security and reliability — detect misuse, debug failures. Basis: legitimate use; legal obligations.
We do not use your data for advertising, profiling, or sale to anyone, and we do not combine it with data bought from third parties.
4. AI processing
Questions and explanations are generated by large language models from Anthropic (Claude). To do this we send the textbook chapter text — fetched from the public DIKSHA / NCERT / Samacheer Kalvi sources — or, if you used Upload Content, the text extracted from your upload, to Anthropic’s API. We do not send your name, email or account ID with these requests.
Anthropic processes this content to return a result and, under its commercial API terms, does not use API inputs or outputs to train its models. Anthropic’s servers may be located outside India.
Generated questions are machine-produced and may contain mistakes; see our Terms of Service.
5. Service providers (data processors)
| Provider | Purpose | Data |
|---|---|---|
| Google Firebase (Authentication, Firestore, Storage) | Sign-in, account record, generation history and usage counts, textbook PDF storage | Account data, generation history |
| Anthropic | AI question generation and answer explanations | Chapter text or uploaded-content text (no identity data) |
| Apple / Google | Sign in with Apple / Google | Handled under their own privacy policies |
| Our application server (India) | Runs the generation pipeline and job queue | Account ID, generation requests, temporary upload files |
| Vercel | Hosts this website | Standard web request logs |
Our own application server is hosted in India. Firebase and Anthropic may store or process data on servers outside India; where that happens we rely on their contractual safeguards and the DPDP Act’s provisions on cross-border transfer. If we introduce payments (Apple In-App Purchase, Razorpay) or crash reporting in a future version, we will update this policy before doing so.
6. Children & parental consent
ChapterAce is designed for school students, many of whom are under 18. Under the DPDP Act, anyone under 18 is a child and their personal data may only be processed with the verifiable consent of a parent or lawful guardian.
- If you are under 18, your parent or guardian must create the account for you, or consent to you creating it, and may contact us at any time to review or delete it.
- We do not track children, build behavioural profiles, or show targeted advertising — to anyone, of any age.
- If we learn that an account was created for a child without parental consent, we will delete it. Parents can request this at iniyarajan86@gmail.com.
7. Retention & deletion
- Account data — kept while your account exists.
- Study preferences — stored only on your device; removed when you delete the App or your account.
- Generation history and monthly counts — kept while your account exists.
- Uploaded files — the file itself is held on our server only for the minutes needed to extract its text and is then deleted. The extracted text and generated questions are kept so the App can explain answers to you.
- Library chapters (CBSE / TN textbooks) and the questions generated from them are not personal data; they are cached and reused for all students.
- Server logs — rotated within 30 days.
Deleting your account: open the App → Account → Settings → Delete account, or follow the steps at chapterace.com/delete-account. In-app deletion immediately deletes your sign-in identity, profile record and usage counts. Records created from content you uploaded are removed within 30 days of a request to iniyarajan86@gmail.com. Firebase may require a recent sign-in before deletion; the App will tell you if so.
8. Your rights
As a Data Principal under the DPDP Act you may:
- Access a summary of the personal data we hold about you and how it is used;
- Correct inaccurate or incomplete data (your name and email can be changed with your sign-in provider);
- Erase your data (in-app Delete account, or by email);
- Withdraw consent at any time — the easiest way is to delete your account; the service cannot run without the data described above;
- Nominate another person to exercise these rights on your behalf;
- Raise a grievance with us (see section 12) and, if unresolved, with the Data Protection Board of India.
We respond to requests within 30 days. We may ask you to verify that you are the account holder (or the parent/guardian) first.
9. Security
All traffic between the App, our server and our providers is encrypted with TLS. Access to your records is controlled by Firebase security rules and signed authentication tokens; our API accepts requests only with a valid token. Uploaded files are written to temporary storage and deleted after processing. No method of transmission or storage is perfectly secure; if we become aware of a breach affecting your data we will notify you and the Data Protection Board as the DPDP Act requires.
10. This website
chapterace.com is a static site. It sets no cookies and runs no analytics or advertising scripts. Vercel, which hosts it, records standard request logs. Links to WhatsApp or payment pages take you to those services, which have their own policies.
11. Changes to this policy
We will post any changes here with a new “Last updated” date. For material changes — for example, adding payments or crash reporting — we will also tell you inside the App before they take effect. Continued use after the effective date means you accept the updated policy.
12. Contact & grievance officer
For privacy questions, data requests, or grievances under the DPDP Act, contact:
Iniyarajan — Grievance Officer, ChapterAce
Email: iniyarajan86@gmail.com
Coimbatore, Tamil Nadu, India
We acknowledge grievances within 72 hours and aim to resolve them within 30 days.