Your data, plainly.

Sublevo (sublevo.app) is an independent study tool for ISC Class 12 Physics, Chemistry and Mathematics. For the purposes of India’s Digital Personal Data Protection Act, 2023, Sublevo is the data fiduciary for any personal data described here. You can reach us at support@sublevo.app.

• Without an account: nothing leaves your device. Practising and reading the notes work with no sign-in and no sign-up.
• If you make an account: your email address; your name and the web address of your Google profile picture, if you sign in with Google and they share them (Sublevo stores that address with the sign-in but never shows or uses the picture); which sign-in method you used; and when the account was created. If you use a password, it is stored only as a one-way hash by our authentication provider: nobody at Sublevo can read it.
• Your study record (kept on your account only if you sign in): for each question you answered, which question it was, how long you took, which option you chose and whether it was right where the answer is verified, whether you showed the answer to a written question, and whether you flagged it; which notes articles you have opened; and the last ten sets you started (which questions were in each), so you can pick one up on another device. Sublevo never records a mark for a written answer.
• Technical logs: our hosting provider records ordinary request data (IP address, browser type, the page requested, the time) to run and protect the service. We do not use it to profile you.
• If you write to us: your email address and what you tell us, including the question id and build number that the “Report a problem” link fills in. We use it to answer you and to fix the question.

We do not ask for your name or a photo, and we do not collect your phone number, address, school, exam marks, location or any payment details. Sublevo takes no payments.

• to sign you in and keep you signed in;
• to save your record and restore it on another device;
• to send the emails you ask for: confirming your address and resetting a password;
• to answer you when you write to us and to correct a question you report;
• to keep the service secure and working, and to investigate abuse.

That is the whole list. We do not use data for advertising, we do not build a marketing profile of anyone, and we do not send marketing email.

Your record of what you have answered and which articles you have read is kept on this device from your first question. If you sign in, it is sent to your account; when you sign out, the copy on this device is removed.

Your light or dark theme choice, the options you last chose in Practise and the sets you started are kept in your browser’s local storage too, and are never sent anywhere.

Sublevo sets no cookies when you are not signed in. If you sign in, we set only the cookies needed to keep you signed in, plus a short-lived one (15 minutes) that makes a password-reset link work safely. There are no advertising, analytics or third-party tracking cookies, so there is nothing to opt out of. The fonts and the maths display are served from sublevo.app itself, so your browser does not contact any other company to show a page. The one exception is when something breaks: your browser then sends a short error report to our error-reporting provider (see below).

We use a small number of service providers, each only to do its one job for us:

• Vercel: hosts the website and keeps its request logs.
• Sentry: receives a short error report when something breaks in the app, and when someone opens an address that does not exist. A report holds only the error message, the technical trace of where it happened, the page address (never anything after a question mark in it, which is where a sign-in code or an email address could be), the address you came from (the same way), the type of browser and device, and the version of the site. It never holds your answers, your record, your name, your email address or any cookie, and it does not record clicks, typing or what you did before the error. We turn off the storing of IP addresses and of the location worked out from them, and an email address or long code that appears inside an error message is blanked before it is sent. There is no session recording, and no cookie is set for it. Reports are kept for 90 days.
• Supabase: sign-in and the database that holds your account and record. Stored in its Mumbai (India) region.
• Resend: delivers the confirmation and password-reset emails.
• Google: only if you choose to sign in with it. It tells us your email, your name and the web address of your profile picture; its own privacy policy covers what it holds.

Some of these providers may process data outside India. We share nothing else with anyone, except where the law requires us to.

Most Sublevo students are under 18. If you are, please use Sublevo with the knowledge and agreement of a parent or guardian: ask them to read this page. Sublevo does not track behaviour, show advertising, or build profiles, for anyone, at any age.

A parent or guardian can write to support@sublevo.app at any time to ask what we hold about their child, or to have the account and everything in it deleted.

You can, at any time:

• ask what we hold about you, and take a copy;
• correct it: write to us and we will fix it;
• have it deleted: see below;
• withdraw your consent, as easily as you gave it;
• nominate someone to exercise these rights for you if you cannot;
• complain: to us first, and if you are not satisfied, to the Data Protection Board of India.

Write to support@sublevo.app from the email address on the account and ask for it to be deleted. We will confirm, then delete your account, your profile and your whole study record from our database, and tell you when it is done: normally within a few days and always within 30.

The record kept on your own device is yours to clear: it goes when you sign out, or when you clear this site’s data in your browser settings.

Your account and record are kept for as long as you have an account, and deleted when you ask. Hosting logs are kept only for the short period our provider retains them. Emails you send us are kept while we are helping you, and for a reasonable time after in case you write again.

All traffic is encrypted (HTTPS). Every row of your record in our database is locked to the account that owns it, so one student can never read another’s. How we protect the service, and how to report a problem, is on the Security page. If a breach ever affected anyone’s data, we would tell them and the Data Protection Board as the law requires.

If this policy changes, the date at the top changes with it. If a change affects how we use data you have already given us, we will tell you before it takes effect.

For any question or complaint about your personal data, write to support@sublevo.app with “Privacy” in the subject line. We will acknowledge it and aim to resolve it within 30 days.