Purpose and Scope
This document pertains to iLurna (referred to as "we", "us", or "Company") with registered office at Uttara, Dhaka-1230, Bangladesh. Our primary objective is to safeguard and respect your privacy. To fulfill this commitment, we outline in this privacy policy (referred to as the "Policy") the types of personal data we collect and the purposes for which we collect them. This applies when we provide you with our applications (referred to as the "App" or "Services"), when you use our app or visit our website, or when you contact us in any other manner. We assure you that all personal data collected by us comply with applicable data protection laws and regulations in Bangladesh.
If you have any questions about this Policy or if you wish to make any requests regarding the processing of your personal data, please reach out to us at def.sumon@gmail.com.
Personal Data Sources
Personal data processed by the Company may come from the following sources:
- Directly from you: For example, when you create an account using Google Sign-In, upload profile information, or use app features, you provide your personal data on the app.
- Automatically generated: For example, when you are browsing or using the App, which generates usage statistics data, device information, and activity analytics.
- From third parties: For example, we receive personal data from Google when you use Google Sign-In, or from service providers that help us operate the app.
You are responsible for ensuring that the personal data you provide is accurate, correct, and complete. You must inform us immediately if there are any changes to the personal data you have provided.
What Information We Process, For What Purpose, and On What Basis
User Account Management
For the purpose of providing our services and user account management, including creating and managing user accounts, facilitating user authentication via Google Sign-In, and enabling account recovery, we may process the following personal data: name, email address (Gmail), username, user ID, device ID, profile picture URL, and authentication tokens.
Storage terms: User account data will be retained for as long as the user maintains an active account. If an account remains inactive for a period of 6 months, the data will be deleted unless you request otherwise.
Interview Practice and AI Feedback
For providing AI-powered interview coaching, analyzing your performance, generating personalized feedback, and tracking your progress, we may process camera recordings (video of your practice interviews), microphone recordings (audio of your responses), text responses, practice session history, performance metrics, AI-generated feedback reports, and proficiency assessments.
Storage terms: Practice session data and recordings will be retained as long as you maintain an active account or until you manually delete specific sessions. You can delete individual practice sessions or all recordings at any time from within the app.
Personalized Learning Experience
For tracking interview preparation progress, providing personalized recommendations, customizing coaching content, and improving the app's features based on your needs, we may process user preferences, interview types practiced, interaction history, learning patterns, improvement areas, and skill level data.
Storage terms: User progress data will be retained as long as the user maintains an active account. If an account remains inactive for 6 months, the data will be deleted.
MCQ Practice and Learning Analytics
For providing MCQ exam preparation services, tracking your learning progress, generating performance analytics, and offering personalized study recommendations, we may process practice session data, quiz attempts, correct/incorrect answers, time spent per question, exam category preferences, topic-wise performance metrics, and progress tracking data.
Storage terms: Practice data and performance analytics will be retained as long as you maintain an active account or until you manually delete specific data. You can clear your practice history at any time from within the app.
Personalized Study Experience
For tracking exam preparation progress, providing personalized question recommendations, identifying weak areas, and customizing study plans based on your performance, we may process user preferences, exam types practiced, question categories, learning patterns, improvement areas, and performance trends.
Storage terms: Study progress data will be retained as long as the user maintains an active account. If an account remains inactive for 6 months, the data will be deleted.
Communication and Support
To facilitate communication with users, respond to inquiries, provide customer support, send notifications about app updates and tips, we may process name, email address, message content, and support messaging history.
Storage terms: Communication data will be retained as long as necessary to provide support or until you request deletion.
Performance Analysis and App Improvement
For analyzing app usage, identifying popular features, detecting usage patterns, fixing bugs, and improving app performance, we may process aggregated usage data, pages/screens visited, interaction patterns, device information (device model, operating system version, device ID), app version, crash reports, error logs, and usage analytics.
Storage terms: Aggregated performance data will be retained for 365 days for analysis and improvement purposes.
Legal and Security Purposes
To fulfill legal obligations, enforce terms of service, protect against fraud, prevent unauthorized access using device ID verification, detect security threats, and comply with applicable laws and regulations in Bangladesh, we may process user data associated with legal and security incidents such as device IDs, access logs, and account activity records.
Storage terms: Data will be retained as long as necessary to fulfill legal obligations or until it is no longer required for security purposes.
Camera and Microphone Permissions
Leo requires camera and microphone access to provide video-based and audio-based interview practice features. These permissions are only activated when you explicitly use the interview practice features. We do not record in the background.
Camera: Used to record video of your practice interviews for review and AI analysis of non-verbal communication.
Microphone: Used to record audio of your interview responses for speech analysis and AI feedback.
You maintain full control and can revoke these permissions at any time through your device settings. All recordings are encrypted and securely stored. You can delete any recording at any time.
Google Sign-In
When you use Google Sign-In to create or access your account, we receive your Google account email address, name, and profile picture URL. This information is used solely for authentication and account management purposes. Your use of Google Sign-In is also subject to Google's Privacy Policy.
Device ID
We collect and use your device's unique identifier (Device ID) to enhance security, prevent unauthorized access to your account, detect fraudulent activity, and ensure a consistent experience across sessions. The Device ID is securely hashed and encrypted.
Data Recipients and Third-Party Services
We may share your personal data with trusted third-party service providers who assist us in operating the app and providing services. These include:
- Cloud Storage Providers: AWS, Google Cloud Platform (for secure data storage)
- Authentication Services: Google (for Google Sign-In)
- Analytics Services: Firebase Analytics, Google Analytics
- Customer Support Tools: For responding to your inquiries
We may also disclose your personal data to public authorities, legal advisors, auditors, and other parties as required by law or necessary to protect our rights. All third-party service providers are contractually obligated to protect your data and use it only for specified purposes.
Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest (AES-256)
- Secure authentication mechanisms and access controls
- Device ID verification to prevent unauthorized access
- Regular security audits and vulnerability assessments
- Secure data centers with physical security measures
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Data Subject Rights
You have the following rights regarding your personal data:
- Right to be Informed: Understand how we process your personal data
- Right of Access: Request a copy of all personal data we hold about you
- Right to Correction: Update or correct inaccurate or incomplete information
- Right to Deletion: Request deletion of your account and associated data
- Right to Data Portability: Request your data in a structured, machine-readable format
- Right to Withdraw Consent: Revoke permissions at any time
To exercise these rights, please contact us at def.sumon@gmail.com or use the in-app settings. We will respond to your request within 30 days.
Children's Privacy
Our apps are not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at def.sumon@gmail.com, and we will delete such information from our systems.
Final Provisions
We regularly review this Policy and reserve the right to make changes in accordance with applicable laws. Any changes will take effect immediately upon publication in the app or on our website. We will notify you of material changes via email or in-app notification.
Your continued use of our apps after such changes constitutes acceptance of the updated Privacy Policy.
Contact Information
iLurna
Uttara, Dhaka-1230, Bangladesh
Email: def.sumon@gmail.com