Privacy, in plain words.

Welcome to My Library App (the "Application", "App", or "Service"), a library management and student productivity platform for India and beyond. The Service is built and maintained by Mannu Yadav.

This Privacy Policy applies to everyone who uses the App — Students (including standalone users without a library), Library Owners, and internal Developer/Admin roles. It covers data processed on our servers (Supabase) and on your device (for example Focus Lock checks that stay local).

We do not sell your personal data to advertisers. We do not show third-party ads inside the App.

When you create an account, sign in with Google or Apple, or join a library through an invite link, you confirm that you have read this Privacy Policy and our Terms of Use.

• Students under 18. By creating an account, we assume you have parental or guardian consent where required by law.
• Library Owners. You are responsible for the accuracy of student records you approve and for using location and attendance tools only for legitimate library operations.
• AI disclosures. MLA Ji (App Guide) and Wellness Buddy require explicit in-app acceptance before first use. You may be asked to re-accept when the policy or consent version changes.
• Optional features. Focus Lock, emergency alerts, guardian SMS, and precise location for attendance are opt-in or context-specific — we explain each permission before it is used.

Our primary audience includes students aged 13–17 preparing for school and competitive exams. Protecting minors is a priority.

• Parental consent. Users under 18 should use the App only with parental or guardian permission.
• Data minimization. We do not collect behavioural advertising data from minors. Collection is limited to core library and study services.
• No ads. The App has no ad network integrations. Focus Browser blocks common trackers by design.
• AI safety. MLA Ji and Wellness Buddy include filters and reporting tools. Wellness Buddy is not a therapist or emergency service — use Tele-MANAS (14416) or emergency services (112) in crisis.
• Parental requests. Parents or guardians may contact us to review or request deletion of a minor's data (see Contact).

A. Account & profile data

Name, email, phone number (where provided), profile photo, country, date of birth, target exam category, guardian details (optional), referral/student codes, and role (student, owner, or developer). Sign-in metadata from Google or Apple when you choose those options.

B. Financial records (non-transactional)

Payment dashboards show membership fees, locker/parking charges, fines, and receipt records. The App does not process bank or card transactions. Owners record offline payments (cash, UPI, etc.) that students and owners already settled outside the App.

C. Library & study activity

Attendance check-in/out times and coordinates (when geofencing is enabled), seat assignments, study session durations, planner events, XP and leaderboard ranks, ebook reading progress, Focus Browser bookmarks and study queue, Focus Lock session stats (not which apps you opened), circulation loans/holds/fines (conventional libraries), support tickets, and notification preferences.

D. Safety & emergency data

If you enable emergency features: emergency contacts, guardian phone numbers for personal safety SMS, hold-to-alert events, library-wide alert participation, and approximate location when an alert is triggered (to help responders). Owners configure library safety settings; developers may oversee unresolved alerts on the platform.

E. Summary table

MLA Ji (App Guide)

Powered by Groq via our authenticated servers. Processes your messages and limited metadata to navigate the App and answer questions. Chats are retained up to 90 days for quality, safety, and abuse prevention, then deleted. Authorized developers may review retained chats through audited tools. Library owners cannot browse your private MLA Ji chats unless you escalate to Support.

Wellness Buddy (Mannu)

Supportive wellness chat processed by Groq. Not medical or crisis care. Do not share passwords, OTPs, or payment secrets in any AI chat.

Hisab (Owner AI coach)

Optional AI assistant for library owners (payments, occupancy, outreach). Uses owner-scoped operational data only; consent-gated with daily limits.

We do not use your personal chat logs to train third-party foundation models.

We request only what each feature needs — aligned with our low-overhead philosophy on student devices.

• Location. Verifies you are at the library during QR check-in (geofence). Not used for background tracking outside attendance or active emergency alerts you trigger.
• Camera. QR scanning and optional profile photos. No silent video recording.
• Photos / files. Only when you upload a profile picture, receipt, listing image, or similar.
• Focus Lock (Android). While your study timer runs and you opt in: usage access to detect foreground apps you chose to block, optional overlay for full block mode, optional battery exemption. Installed-apps list stays on your device — never uploaded. Owners see study hours, not which apps you blocked.
• Focus Browser. In-app browsing with tracker blocking and study queue. Downloads saved to your device; download history stored in your account if you use the manager.
• Notifications. Push (FCM) for announcements, payment reminders, safety alerts, and focus-session reminders. You can adjust preferences in Settings.
• Emergency & vibration. Loud alerts and vibration for hold-to-alert safety features when enabled.

• Library Owners. See attendance, payment status, and basic profile for students in their library — not private AI chats unless you escalate.
• Supabase. Database, authentication, storage, and edge functions (hosting region as configured for the project).
• Groq. AI inference for MLA Ji, Wellness Buddy, and owner Hisab.
• Google / Apple. Sign-in only when you choose those options.
• Firebase (FCM). Push notification delivery.
• Legal requirements. We may disclose data if required by applicable law or to protect safety.

We do not sell personal data to data brokers or ad networks.

• Encryption in transit. TLS between App and servers.
• Row-Level Security (RLS). Database policies so students, owners, and developers only access permitted rows.
• Server-side AI keys. Provider API keys are not bundled in the client app.
• Session monitoring. Suspicious logins may be flagged; you can revoke sessions after password changes.

Access & correction. Edit your profile in the App. Remove MLA Ji chats from your history (copies may remain for the 90-day safety window).

Account deletion. Request deletion from In-App Settings. We apply a 7-day grace period so accidental requests can be cancelled; after that, data is permanently purged except where law requires retention.

Students in a library. You may also ask your Library Owner to remove your membership record. Owners: contact support to delete a library instance and associated data.

Export. Owners may request exports of student and payment ledgers through support channels.

We update this policy when features or legal requirements change. Material updates are communicated through in-app notice. Continued use after the effective date means you accept the revised policy. AI features may require fresh consent when the policy version changes.

Policy version: privacy_2026_09_02

Privacy questions, parental requests, AI content reports, or data-protection inquiries: