Privacy Policy

• We collect as little as we can: your email, and the profile you choose to fill in.
• Your email, name and college are encrypted in our database with a key unique to you.
• We don't store your chat messages with the AI tutor.
• We don't sell your data, show ads, or use advertising or analytics trackers.
• You can download or delete everything at any time in Settings. Deletion is immediate.

• Email address: to sign you in with a one-time code and to identify your account. Stored encrypted, with a keyed hash so we can look it up.
• Name and college (optional): to personalise Osler. Stored encrypted. If you sign in with Google we receive your name but don't store it; you type your profile yourself.
• University, MBBS phase and target exam: to tailor content and past-paper analysis. Stored as plain values because they don't identify you on their own.
• Google sign-in identifier: if you use Google, we store only a keyed hash of Google's account id, never the id itself or any Google access token.
• Sign-in sessions: a random token in a secure cookie (website) or your phone's secure storage (app). We store only a hash of it. A session lasts 30 days and ends after 14 days unused; on a shared device it lasts 12 hours, ends after an hour unused, and ends when you close the browser. You can have up to 10 at once.
• Signed-in devices: for each session, a rough device label such as "Chrome on Android" (encrypted, so only your account can read it), how you signed in, and the day you were last active, so you can see and sign out your devices. We don't store your IP address or location.
• Before your account exists: after you prove you own your email or Google account, your verified email waits in an encrypted, 15-minute sign-up ticket in your browser (not in our database) until you agree to these terms. If you leave, nothing is kept.
• Consent records: which policy versions you accepted and when, and your confirmation that you are 18 or older. You accept once when you create your account, and again only if we change these terms in a way that matters.
• Usage counters: how many AI questions you asked per day, to enforce fair-use limits. Counts only, not the questions.
• Security log: events such as "signed in" or "deleted account" with a time and your account id. It never contains your email or name.
• Your IP address is used briefly for rate limiting and bot protection and is not stored.

• Cloudflare hosts Osler, its database and its AI models.
• Resend delivers sign-in code emails and a few security notices (for example "Google sign-in was connected to your account" or "your account was deleted"). It receives your email address and that message, nothing else.
• Google handles "Sign in with Google" if you choose it.
• Cloudflare Turnstile checks that sign-in requests come from a person; it sees your IP address.

• Access: download all your data from Settings → Download my data.
• Correction: edit your profile at any time.
• Erasure: Settings → Delete account removes your account at once. Your encryption key is destroyed, which makes any remaining encrypted copies (for example in backups) unreadable.
• Withdraw consent: during the beta, withdrawing consent works the same as deleting your account.
• Grievances: contact us (see below). We will respond within the time limits set by the DPDP Rules.