Privacy Policy

1. Introduction

Knowbotic ("we," "us," or "our") is operated by knowbotic.app. This Privacy Policy describes how we collect, use, and protect your personal information when you use our AI-powered educational platform.

By using Knowbotic, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Data: Name, email address, profile picture (via OAuth)
• Profile Information: Phone number, location, role (Student/Teacher/Professional)
• Content: Documents uploaded to your knowledge base (PDF, DOCX, TXT, MD files)
• Learning Data: Questions answered, quiz results, progress metrics

2.2 Automatically Collected Information

• Usage Data: Features accessed, time spent, interaction patterns
• Device Information: Browser type, IP address, device identifiers
• Cookies: Session cookies for authentication

2.3 Third-Party Data

• OAuth Providers: Basic profile information from Google, Facebook, and Apple when you sign in

3. How We Use Your Information

ℹ️ We do NOT use your data to train general AI models. Your content is processed only for your specific learning experience.

We use your information to:

• Provide and maintain the Knowbotic service
• Generate personalized AI questions and quizzes
• Process and analyze your uploaded study materials
• Track your learning progress and achievements
• Improve our platform and develop new features
• Send service-related notifications
• Ensure security and prevent fraud
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information to third parties.

4.1 Service Providers

We share data with trusted service providers who process it on our behalf:

• AWS (Amazon Web Services): File storage and infrastructure
• Neon: Database hosting
• Qdrant Cloud: Vector database for AI features
• OpenAI: AI processing for text embeddings (not for training)

4.2 OAuth Providers

When you sign in with Google, Facebook, or Apple, we receive limited profile information according to their respective privacy policies. We comply with all platform requirements.

4.3 Legal Requirements

We may disclose information when required by law or to protect our rights and safety.

5. AI & Data Processing

5.1 How We Process Your Content

• Documents you upload are converted to text embeddings using OpenAI's API
• Embeddings are numerical representations stored in our vector database
• This enables AI-powered question generation based on your materials
• Your data is NOT used to train OpenAI's models

5.2 Data Storage

• User data: Neon PostgreSQL (encrypted)
• Files: AWS S3 (encrypted at rest with AES-256)
• Embeddings: Qdrant Cloud
• All data encrypted in transit using TLS/SSL

6. Data Security

We implement industry-standard security measures:

• End-to-end encryption (TLS/SSL in transit, AES-256 at rest)
• Secure OAuth 2.0 authentication
• Access controls and role-based permissions
• Regular security audits and monitoring

While we implement strong security measures, no method of transmission over the internet is 100% secure.

7. Your Rights & Choices

You have the right to:

• Access: View and download your personal data
• Update: Modify your profile information anytime
• Delete: Request deletion of your account and data
• Export: Download your learning data and uploaded content
• Object: Opt-out of marketing communications

To exercise these rights, visit your profile settings or our Data Deletion page.

8. Data Retention & Deletion

When you delete your account:

• Account deletion processed within 30 days
• Personal information removed from all databases
• Uploaded files deleted from AWS S3
• Vector embeddings removed from Qdrant
• Only anonymized analytics data retained (if legally required)

9. Cookies & Tracking

We use essential cookies for authentication and session management. You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

10. Children's Privacy

Knowbotic is intended for users aged 13 and above. We do not knowingly collect information from children under 13. If you believe we have collected data from a child under 13, contact us immediately at hi@knowbotic.app.

11. International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards through standard contractual clauses and compliance with applicable data protection laws (GDPR, CCPA, PDPA).

12. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on this page
• Updating the "Effective Date" at the top
• Sending email notification for material changes

Your continued use after changes constitutes acceptance of the updated policy.

14. Regional Compliance

14.1 GDPR (European Users)

If you are in the EU/EEA, you have additional rights under GDPR including data portability and the right to lodge complaints with supervisory authorities.

14.2 CCPA (California Users)

California residents have the right to know what personal information is collected, request deletion, and opt-out of data sales (we do not sell personal information).

14.3 PDPA (Singapore Users)

We comply with Singapore's Personal Data Protection Act and handle your data in accordance with its requirements.

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy: