This policy explains what personal data the GAT Study mobile and web app (the "app") and the website gatstudy.com collect, why, who processes it on our behalf, how long it is kept and the choices you have. The app and the website are operated by Faisal Ibrahim Alnaseri Establishment, a sole proprietorship registered in the Kingdom of Saudi Arabia ("we", "us"). We handle personal data in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia.

Questions or requests: [email protected].

In short

We collect what the app needs to work: your sign in details, your study profile and your practice results.
Payments are handled by Apple and Google. We never see your card details.
We use Google Firebase for sign in, storage, analytics, crash reports and notifications, and RevenueCat for subscriptions.
We do not sell your data, and the app shows no ads.
You can delete your account in the app, and ask us to erase everything linked to it.

1. Data we collect

Your account

You can use parts of the app without an account. If you sign in with Google or Apple, Firebase Authentication creates an account for you and gives us a user ID, your email address, your name and profile photo link as your Google or Apple account shares them, and which of the two you used. If you choose Apple's "Hide My Email", we receive only the relay address Apple creates.

Your study profile

When you are signed in, the app keeps your profile in Google Cloud Firestore so it follows you across devices: the username you choose, your exam date, your experience level, your target score, the past scores you enter, your daily study goal and the points you earn in the app.

Your practice

When you are signed in, the app saves your quiz and drill results to Cloud Firestore: for each question, its ID, topic and difficulty, the answer you chose, whether it was correct, how long you took and when you finished. It also saves your progress by topic, your study streak and the questions you bookmark.

Question statistics

On a schedule, our server copies the answers in those results (the question ID, topic, difficulty, your answer, whether it was correct, the time taken, when you finished and your user ID) into our own database. We use them to work out figures about each question, such as how many learners answer it correctly, and totals such as the number of questions solved this week. The app shows only these combined figures, never another learner's answers.

Question reports

If you report a question as wrong, the app sends our server at api.gatstudy.com the question's ID, the reason you choose or write, your platform (for example iOS or Android), the app's version and, if you are signed in, your user ID. We use reports to correct the questions.

Subscriptions

Purchases are made through the App Store or Google Play, and Apple or Google process the payment. RevenueCat manages your subscription for us. It receives your user ID, the product you bought, the store's purchase and renewal records, your subscription status and basic device information (platform, app version, country). We can see your subscription status and history, never your payment details.

Analytics

Firebase Analytics tells us how the app is used: which screens and features are opened, sessions, and steps such as starting a quiz or a purchase. With it come device details (model, operating system, app version, language), an app instance identifier, an approximate location at country or region level derived from your IP address, and your user ID when you are signed in. We use it to understand what works and what to improve, not for advertising.

Crash reports

If the mobile app crashes or hits an error, Firebase Crashlytics sends us a report: what the app was doing, device model, operating system and app version, and your user ID when you are signed in. The web app sends no crash reports.

Notifications

If you allow notifications, Firebase Cloud Messaging gives your device a token so we can send you reminders and news about new questions. Some reminders are scheduled on your device itself. You can turn notifications off at any time in your device's settings.

App configuration

Firebase Remote Config lets us change some of the app's settings without an update. To do so it uses an identifier for the app's installation.

On your device

The app stores your progress, settings, bookmarks and downloaded question images on your device so it works quickly and offline. This stays on the device and is removed when you uninstall the app, reset your progress or delete your account. The web app keeps the same data in your browser's storage, and Firebase Analytics may store identifiers in your browser.

Requests to our server

The app downloads questions and statistics from our server at api.gatstudy.com. Like any server, it receives your IP address with each request. We use it only to protect the server from abuse and do not store it with your data.

This website

The pages of gatstudy.com set no cookies and run no analytics or advertising scripts. Our host, Cloudflare, processes standard request data (such as your IP address and browser type) to deliver and protect the site. If you follow a download link, the store may receive the link's campaign name so we can see which links bring installs. The web app at gatstudy.com/app/ works as described above.

2. How we use your data

To run the app: sign you in, save and sync your progress, and adapt practice to your results.
To provide subscriptions and restore them on your devices.
To keep the questions accurate, using your reports and the combined question statistics.
To find and fix crashes and to understand how the app is used so we can improve it.
To send the notifications you allowed.
To protect the app and our server from abuse, and to meet our legal obligations.

We process your data to provide the service you asked for, on the basis of your consent where we ask for it (such as notifications), and for our legitimate interest in running and improving the app.

3. Who processes your data

We share data only with the providers that run parts of the app for us, and only for that purpose:

Google (Firebase Authentication, Cloud Firestore, Analytics, Crashlytics, Cloud Messaging, Remote Config), and Google Sign In if you use it.
Apple (Sign in with Apple, the App Store and its payments).
Google Play (its payments).
RevenueCat, Inc. (subscription management).
Oracle Cloud Infrastructure (the server and database behind api.gatstudy.com).
Cloudflare, Inc. (hosting of gatstudy.com).

We do not sell or rent your personal data. We may disclose it if the law requires us to, or to protect our rights or the safety of others.

4. Where your data is processed

These providers may store and process data outside the Kingdom of Saudi Arabia. We rely on their security commitments and data protection terms, and transfer only what each needs.

5. How long we keep it

Your account, profile and practice data: while your account exists, then deleted as described below.
Question statistics and reports: for as long as we need them to maintain the questions. We remove your user ID from them when you ask us to erase your data.
Analytics and crash reports: for the retention periods set in Firebase, after which Google deletes them.
Subscription records: as long as needed for your subscription and for tax and accounting obligations.

6. Deleting your account

In the app, open Settings and choose Delete account (shown while you are signed in). This deletes your sign in account and your profile, signs you out of your subscription on that account, and clears the app's data on your device.

To make sure every record linked to your account is erased, including your practice history in Firestore and your user ID in our statistics and reports, email [email protected] from the address you signed in with, or with your user ID, and we will complete it within 30 days. Deleting your account does not cancel a subscription: cancel it in your App Store or Google Play settings.

7. Your rights

You can ask us for a copy of your personal data, to correct it, to delete it, or to stop a use you agreed to. Email [email protected] and we will answer within 30 days. We may need to confirm that the account is yours first. You can also withdraw consent for notifications in your device settings at any time.

8. Children

The app is meant for students preparing for the GAT and is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has given us personal data, contact us and we will delete it. If you are under the age of majority where you live, use the app with the permission of a parent or guardian.

9. Security

Data travels over encrypted connections, and access to your stored data is limited to your own account and to us. No system is perfectly secure, but we take reasonable steps to protect your data and to act quickly if something goes wrong.

10. Changes to this policy

If we change this policy, we will update the effective date above, and tell you in the app if the change is significant.

11. Contact

Faisal Ibrahim Alnaseri Establishment, Kingdom of Saudi Arabia.
Email: [email protected]

Privacy Policy