Effective Date: May 27, 2026 · Last Updated: May 27, 2026
FirellySAT ("FirellySAT", "we", "us", "our") operates the Platform at firelly.in. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights as a user.
By using FirellySAT, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Platform.
Contact: firellysat@gmail.com · Subject: Use "Privacy Request" in the subject line for any data rights requests.
The data controller for personal information collected through FirellySAT is the individual creator and operator of FirellySAT, reachable at firellysat@gmail.com. FirellySAT is operated from India. For users in the EU/EEA, this entity acts as the data controller within the meaning of the GDPR.
A. Account and Authentication Data (Server-Side)
When you sign in using Google Sign-In, Google provides us with the following information:
This data is stored in a secure, server-side session (JWT token managed by NextAuth.js) and is used to identify your account and verify your Pro subscription status. We collect the minimum data necessary from Google and comply with the Google API Services User Data Policy. We do not use Google user data for advertising, profiling, or any purpose beyond authentication and service delivery.
B. Subscription and Payment Data (Server-Side)
If you subscribe to FirellySAT Pro, your payment is processed entirely by LemonSqueezy. We do not receive or store your credit card, debit card, or banking details. We receive from LemonSqueezy only: your email address, subscription status (active/cancelled), and subscription ID. This data is used to verify and maintain your Pro access. LemonSqueezy processes payment data under their own Privacy Policy.
C. Practice and Study Data (Browser Only — localStorage)
All practice data — including questions attempted, correct/incorrect answers, scores, notes, study plans, streak data, XP, and logbook entries — is stored exclusively in your browser's localStorage. This data never leaves your device unless you explicitly use an AI feature (see D below). We do not operate a practice data database. If you clear your browser storage or switch devices, this data is lost.
D. AI Feature Request Content (Transmitted to Third-Party AI)
When you use AI features (Mitra, AI explanations, AI study plan generation, or test image analysis), the content of your request — which may include practice question text, your answer, your performance data, and uploaded images — is transmitted to our AI service providers to generate a response. This content is processed by:
| Provider | Used For | Their Privacy Policy |
|---|---|---|
| NVIDIA (integrate.api.nvidia.com) | AI explanations, study plans, mentor, question generation | NVIDIA Privacy |
| Hugging Face (router.huggingface.co) | Fallback AI for all AI features | HF Privacy |
These providers process your request data under their own terms. Hugging Face does not retain inference payloads beyond the processing period. NVIDIA retains data per their Data Processing Addendum. We have Data Processing Agreements with both providers restricting use of your data to service delivery only.
E. Cookies and Session Data
FirellySAT uses session cookies managed by NextAuth.js for authentication. These cookies:
We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.
F. Server Logs
Our hosting infrastructure may automatically collect standard server logs including IP addresses, browser type, pages accessed, and access timestamps. These logs are used solely for security, error diagnosis, and abuse prevention. They are not linked to your identity and are retained for a maximum of 90 days.
We use your personal data only for the following purposes:
We do not: sell your data, use it for behavioral advertising, build advertising profiles, share it with data brokers, or use it to train AI models.
For users in the European Union/EEA, our legal bases for processing personal data are:
| Data Type | Retention Period |
|---|---|
| Account data (email, name) | While account is active + 90 days after deletion request |
| Subscription/Pro status | While subscription is active + 90 days (for billing disputes) |
| Practice data (scores, notes, plans) | Browser only — deleted when you clear localStorage |
| AI request content | Not retained by us after response is delivered |
| Server logs / IP data | Maximum 90 days, then automatically deleted |
| Session cookies | Until sign-out or session expiry |
We share personal data only in the following limited circumstances:
We do not sell your personal data. We do not share your data with advertisers, data brokers, or marketing platforms.
FirellySAT is operated from India. Our AI service providers (NVIDIA, Hugging Face) may process data on servers located in the United States or other countries outside your home jurisdiction. For users in the EU/EEA, such transfers are made under Standard Contractual Clauses or equivalent safeguards as required by GDPR Chapter V. For users in India, data may be transferred internationally in accordance with the Digital Personal Data Protection Act 2023.
We implement appropriate technical and organizational security measures, including:
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but commit to addressing identified vulnerabilities promptly.
FirellySAT is designed for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has registered, please contact us immediately at firellysat@gmail.com and we will delete the account and associated data promptly.
For users aged 13–17:
Regardless of where you are located, you may:
To exercise any of these rights, email us at firellysat@gmail.com with the subject line "Privacy Request". We will respond within 30 days.
To delete practice data: Since all practice data is stored in your browser, you can delete it at any time by clearing localStorage. In your browser DevTools → Application → Local Storage — clear all entries prefixed with firellysat_.
If you are in the European Union or EEA, you have the following additional rights under the General Data Protection Regulation (GDPR):
You also have the right to lodge a complaint with your national supervisory authority. A list of EU data protection authorities is available at edpb.europa.eu.
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you the following rights:
To submit a CCPA rights request, email firellysat@gmail.com. We will respond within 45 days.
If you are a user in India, the Digital Personal Data Protection Act 2023 (DPDP Act) provides you with the following rights:
We process your personal data based on your free, specific, informed, and unambiguous consent provided at account creation. You may withdraw consent by deleting your account.
In the event of a personal data breach, we will notify affected users and the Data Protection Board of India (DPBI) within 72 hours of becoming aware of the breach.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected users by email (to your registered address) and, where legally required, notify the relevant supervisory authority:
Some practice questions on the Platform originate from College Board's publicly accessible SAT Suite Question Bank. These questions remain College Board's intellectual property. We do not transmit College Board copyrighted question content to AI systems. AI explanations, AI-generated questions, and AI mentor responses use only FirellySAT Original questions or paraphrased content — not verbatim College Board materials. College Board content is shown locally in your browser only.
In compliance with applicable transparency regulations (including the EU AI Act, effective August 2, 2026, and FTC guidelines):
We may update this Privacy Policy as our Platform evolves or as required by law. Material changes will be communicated by updating the "Last Updated" date above and, where appropriate, by email to your registered address. Your continued use of FirellySAT after the effective date constitutes acceptance of the updated policy.
For any privacy-related questions, rights requests, or concerns:
Email: firellysat@gmail.com
Subject line: "Privacy Request"
Response time: Within 30 days (GDPR) / 45 days (CCPA) / 30 days (DPDP)