Privacy Policy

1. Scope

This Policy covers all features including:

• Free calculators (molar mass, pH/pOH, gas laws, stoichiometry, etc.)
• AI-powered tools (ChemLab AI, Retrosynthesis Planner, Spectroscopy Analysis)
• ChemAI chatbot and study materials
• Subscription services (Basic & Pro plans)
• Progressive Web App (PWA) features

2. Information We Collect

2.1 Account & Authentication Data

When you create an account or sign in (Email/Password, Google, or Anonymous), Firebase stores:

• Email address (except for anonymous sign-in)
• Display name (if provided)
• Authentication identifiers (UID, provider info)
• Account creation timestamp

2.2 Usage & Performance Data

Google/Firebase Analytics collects pseudonymous metrics:

• Pages visited and features used
• Device type, browser, and operating system
• Approximate location (derived from IP)
• Session duration and engagement patterns

2.3 Local Device Storage

• Chat History: Stored via localStorage in your browser.
• Service Worker Caches: Static assets cached for offline access.
• Preferences: Theme settings, recently used tools.

2.4 Optional Inputs

• Images: Uploaded for problem analysis, processed via AI APIs.
• Voice Input: Captured for real-time transcription only; not stored.

3. Payment Data

For subscription services (Basic $10/mo, Pro $30/mo), we use Razorpay as our payment processor.

3.1 What Razorpay Collects

• Card number, expiry, CVV (processed securely, not stored by us)
• UPI ID (for UPI payments)
• Billing address (if required)
• Transaction ID and payment status

3.2 What We Store

• Subscription plan type (Basic/Pro)
• Subscription start and end dates
• Payment confirmation ID (for support purposes)
• AI request usage count per billing cycle

3.3 Razorpay's Privacy

Razorpay is PCI-DSS compliant. For their data practices, see: Razorpay Privacy Policy

4. AI & LLM Disclosure

Several ChemAI features use artificial intelligence to provide responses:

4.1 AI Services Used

• Google Gemini API: Powers ChemLab AI, Retrosynthesis Planner, Quiz Generator
• Local Processing: Some calculators run entirely in your browser

4.2 What We Send to AI APIs

• Your chemistry question or query text
• Uploaded images (for visual problem analysis)
• Context from previous messages in the same session

4.3 What We Do NOT Send

• Your email address or account information
• Payment details or subscription status
• Personal identifiers or location data

4.4 Data Retention by AI Providers

Google Gemini API may temporarily cache queries for processing. We do not have control over Google's internal data practices. See: Google AI Terms

5. How We Use Information

• Provide secure account access and session management
• Process payments and manage subscriptions
• Improve tool accuracy, reliability, and performance
• Detect, prevent, and mitigate abuse or security incidents
• Send transactional emails (payment confirmations, password resets)
• Support accessibility, offline use, and user experience

6. Legal Basis (GDPR)

If you are in the EU/EEA, our legal bases for processing are:

• Consent: For optional features (voice input, push notifications)
• Contract: To provide the educational service you requested
• Legitimate Interests: Security, fraud prevention, platform improvement

7. Sharing & Disclosure

We do not sell personal data. Limited sharing occurs with:

• Firebase (Google): Authentication and analytics
• Razorpay: Payment processing
• Google Gemini: AI query processing
• AWS SES: Transactional emails

We may disclose information if required by law or to protect rights and safety.

8. Retention

• Account data: Until you request deletion
• Payment records: 7 years (legal/tax requirements)
• Analytics data: 14 months (Firebase default)
• Local chat history: Until you clear browser storage
• Anonymous sessions: Purged after inactivity

9. Security

We implement industry-standard protections:

• TLS/HTTPS encryption for all data in transit
• Firebase Security Rules for database access control
• PCI-DSS compliant payment processing (Razorpay)
• Regular security reviews and updates

No system is perfectly secure. Report vulnerabilities via the Contact page.

10. Children's Privacy

ChemAI is designed for educational use by students. If you are under the minimum digital consent age in your jurisdiction (13 in most countries, 16 in some EU countries), please obtain guardian permission before creating an account.

We do not knowingly collect personal data from children below these age thresholds beyond authentication essentials.

11. Your Rights

You have the right to:

• Access: Request a copy of your account data
• Rectify: Update your profile information
• Delete: Request account deletion
• Port: Export your data in a readable format
• Object: Opt out of analytics or marketing
• Withdraw Consent: Disable push notifications anytime

Submit requests via Contact. We respond within 30 days.

12. International Transfers

Firebase, Google, and Razorpay infrastructure may process data in multiple regions including the US, EU, and India. Appropriate safeguards (Standard Contractual Clauses) apply where required by law.

13. Changes to This Policy

Material changes will be highlighted with a new "Last Updated" date. Continued use after updates indicates acceptance. For significant changes, we may notify you via email or in-app notification.

14. Contact

For privacy inquiries, data requests, or questions about this policy:

• Use the Contact Page
• Include "Privacy Request" in your message subject
• Specify what action you're requesting (access, deletion, etc.)