Plain-Language Privacy Commitment
HimGK Plus is an educational tool, not an advertising network. We do not sell your personal data, we do not host third-party advertising SDKs, and we collect only the information strictly necessary to provide authentic examination preparation, assess quiz performance, and schedule your revisions.
1. Introduction & Publisher Identity
This Privacy Policy applies to the HimGK Plus Android application and its related web services operated by HimGK Plus Education (“we”, “us”, or “our”).
HimGK Plus provides bilingual study materials, diagnostic testing, mistake tracking, and rule-based spaced repetition specifically focused on Himachal Pradesh state competitive examinations (such as HPAS, HP Allied Services, Naib Tehsildar, and Police SI).
2. Information We Actually Collect
We collect information directly from you when you register an account, configure study preferences, or use the application:
A. Account Identity & Authentication
- Name: To personalise your student dashboard and study plans.
- Email Address: Used as your unique account login identifier and to communicate essential service notices.
- Password: Encrypted using industry-standard bcrypt hashing before saving to the database. We never store or transmit plaintext passwords.
- Device Name: (Optional descriptor, e.g., “Android Phone”) stored alongside your API bearer token to manage active authenticated sessions.
B. Student Study Preferences & Academic History
- Language Choice: Your preferred study language (Hindi or English).
- Target Examination Selection: The specific state examination(s) you are preparing for (e.g. HPAS, Allied).
- Daily Study Goal: Your daily target study time in minutes (e.g., 30, 45, or 60 minutes) to budget tasks.
- Lesson Bookmarks: Lessons you mark for revision, including any personal notes you attach.
- Assessment Records: Quiz attempts, questions answered, selected options, start and completion timestamps, and resulting scores.
- Mistake Notebook: Questions answered incorrectly during quizzes, tracking incorrect answer frequency and resolution dates so you can re-practise them.
- Study Plan & Spaced Repetition Progress: Completed and skipped daily tasks, spaced repetition ease factors, review intervals, and scheduled due dates.
C. Technical & Diagnostic Logs
- Server Access Logs: Standard web server connection data (IP address, operating system, app client version, timestamps, and requested URL paths) recorded to safeguard against brute-force attacks and diagnose server faults. Logs are rotated and purged within 30 days.
3. What We Do Not Collect or Share
4. Purpose and Legal Basis for Processing
We process your data strictly to perform our educational service to you:
- To verify your student credentials and authenticate requests to the API.
- To deliver tailored curriculum content matching your selected examination and language.
- To calculate quiz scores and provide accurate diagnostic breakdowns of your weak syllabus topics.
- To automatically populate your Mistake Notebook with missed questions so you can re-attempt them.
- To mathematically schedule your daily revisions using transparent spaced repetition algorithms.
- To defend against denial-of-service, credential stuffing, and unauthorized access via rate limiting.
5. Data Storage & Security Practices
We implement technical and organizational safeguards to protect student data:
- Transport Layer Security: All client-to-server traffic is transmitted over encrypted HTTPS/TLS connections.
- Encrypted On-Device Token Storage: Authentication tokens are stored using Android KeyStore / EncryptedSharedPreferences via Flutter's secure storage library.
- Server-Side Assessment Secrecy: Question solutions and correct options remain hidden on the server during assessment attempts, preventing answer extraction or client-side tampering.
- Data Isolation: All student records, quiz answers, bookmarks, and mistake items are strictly partitioned by authenticated user ID; students cannot inspect or modify another candidate's records.
6. Retention & Account Deletion (Google Play Compliance)
We retain your academic profile and study records as long as your account remains active so you can continue your preparation across sessions.
Your Right to Delete: You have the right to request the complete, permanent deletion of your account and all associated records.
To request the deletion of your account, you can submit an online request through our dedicated Data Deletion Request Page or email us at privacy@himgkplus.in from your registered email address.
What Gets Deleted: Upon receiving and verifying your request, we permanently delete your user profile, email address, password hash, personal access tokens, lesson bookmarks, quiz attempt answers, mistake notebook entries, and study plans from our database. Backups containing historical records are overwritten within 30 days.
7. Children's Privacy
HimGK Plus is designed for candidates preparing for state civil service and government recruitment examinations (ordinarily aged 18 and older). We do not knowingly solicit or collect personal information from children under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us immediately, and we will delete such data.
8. Changes to this Policy
We may update this Privacy Policy to reflect changes in our features, statutory guidelines, or Google Play policy requirements. Any revisions will be published on this page with an updated effective date. Continued use of the application after revisions indicates acceptance of the updated policy.
9. Contacting the Privacy Officer
For questions, privacy inquiries, or data deletion requests, contact us at:
Organization: HimGK Plus Education
Privacy Email: privacy@himgkplus.in
Support Desk: support@himgkplus.in
Online Request: https://www.himgkplus.cubebitz.com/data-deletion