Privacy Policy

Effective 1 July 2026.

1. Who we are

Fyra is a study task manager and focus helper based in India. We take your privacy seriously — most of your data never leaves your phone. This policy explains what we collect, where it lives, and your rights.

2. What we collect

On your device only (never sent to us):

Your tasks, goals, due dates, school apps, and study progress.
Photos you take for AI grading or task completion proof.
Practice tool content you generate (flashcards, quizzes, summaries, podcasts, videos).
App settings: theme, language, font, voice, reminders.
Your PIN (hashed) and backup password (hashed).
Skill Check results and Practice tool score history.

On Fyra's server (Cloudflare Workers KV):

Parent's first name and email address (from signup).
Country code (from signup).
Grade level (from Skill Check, if you complete it).
Subscription status (trial or paying) and signup date.
Last-active timestamp, updated at most once every 6 hours when you open the app.

That's the complete list. We do not collect: school name, teacher's name, address, payment card details (handled by Razorpay), photo content, task content, browsing history, location, IP address (beyond what Cloudflare automatically logs), contact lists, or anything from your phone outside the Fyra app.

3. How we use this info

Local data powers all in-app features. It stays on your device unless YOU choose to send it (e.g. uploading a photo for AI grading sends it to our AI provider for that one request).
Server data is used to: know how many users we have, send important account or billing emails, provide customer support when you ask, detect fraud/abuse, and improve Fyra.
We do not use your data for targeted advertising. We do not sell or rent your data. We do not train AI models on your data.

4. Legal basis for processing (DPDP & GDPR)

We process your data based on your consent (given when you create the account and tick the "I agree" box on signup) and on our legitimate interest in providing and improving the service. You can withdraw consent at any time by deleting your account.

5. Third-party services

Anthropic (Claude AI): When you use AI features, your photos/text are sent to Anthropic via our Cloudflare Worker proxy. Anthropic's privacy policy: anthropic.com/privacy.
Cloudflare: Hosts our server (Workers + KV storage). Cloudflare's privacy policy: cloudflare.com/privacypolicy.
Netlify: Hosts our web app and PWA. Netlify's privacy policy: netlify.com/privacy.
Google Classroom (optional): If you sign in with Google to import assignments, Google's privacy policy applies. Fyra only requests READ access to coursework — never posts, modifies, or deletes anything.
Razorpay (India payments): Handles subscription payments. Your card details go directly to Razorpay, never to Fyra. Razorpay's privacy policy: razorpay.com/privacy.
Apple / Google in-app purchases (mobile apps): If you subscribe inside the iOS or Android app, the App Store or Play Store handles the transaction. Their terms apply.

6. Children and minors

Fyra is designed for parent-supervised use by students. Parents are the legal account holders and consent on behalf of any minor user. Under India's DPDP Act 2023, parental consent is required for processing minor data. Under the US Children's Online Privacy Protection Act (COPPA), data on users under 13 in the US is collected only with parent consent. The parent agreement at signup serves as this consent. If you believe a child has provided data without parental consent, email us — we'll delete it within 48 hours.

We share data only with the third-party services listed above, strictly to provide the features you use. We do not sell, rent, or trade your data. We may disclose data only if required by a valid court order or law-enforcement request, and only after verifying the request is legitimate.

8. Your rights

You have the right to:

Access: See what data we have about you (email us to request a copy).
Delete: Use Settings → Delete account from Fyra server to permanently delete your server-side record. Use Settings → Reset Everything to wipe all local data. Both can be combined.
Export: Use Settings → Data → Export Backup to download all your local data as JSON.
Correct: Edit your name and country in Settings → Profiles.
Withdraw consent: Delete your account at any time — no questions asked.
Complain: If you are in India and we mishandle your data, you can complain to India's Data Protection Board (under the DPDP Act 2023). If you're in the EU, you can complain to your national supervisory authority (under GDPR).

9. Security

Your PIN and backup password are hashed on-device (never sent to our server). Fyra uses HTTPS for all third-party API calls. Server data is stored encrypted at rest in Cloudflare KV. Because most data is local, your device security matters most — keep your phone's OS updated, use a screen lock, and don't share your PIN.

10. Data retention

Server data is kept while your account is active. If you delete your account, it's permanently removed from our database within 48 hours. Local data stays on your device until you uninstall the app or use Settings → Reset Everything. Backups you download to your device are yours — we don't keep copies.

11. International data transfers

Some of our third-party services (Anthropic, Cloudflare, Netlify) are based in the United States. By using Fyra, you consent to your data being transferred to the US for processing. These providers operate under appropriate data-protection safeguards.

12. Changes

We may update this Privacy Policy. We'll update the effective date and announce significant changes inside the app. Continued use means you accept the updated policy.

13. Contact

Privacy questions? Tap the 💬 Feedback button inside the app, or email privacy@fyrafocus.in.