Privacy Policy

Effective date: February 22, 2026
Last updated: February 22, 2026

Chorchaghor ("we", "our", "us") provides educational services through the Chorchaghor app. This Privacy Policy explains how we collect, use, store, and share information when you use our services across SSC, BCS, Python, English, Scholarship, and Tutor features.

1. Authentication and Access Control

You can use the app with email/password login or with a Firebase anonymous account for explore mode.

• If a protected SSC/BCS MCQ or short-question or english/python dataset is opened without an existing signed-in account, an anonymous Firebase account may be created automatically.
• Firebase authentication tokens (JWT) are used to authorize protected API requests to AWS services.

2. Content Source Transparency

This section describes educational content sources and ownership claims.

• SSC MCQs are based on Bangladesh government education board questions (Dhaka, Rajshahi, Khulna, Barishal, Sylhet, Chattogram, Dinajpur, Cumilla, Jashore, and Mymensingh) from 2015 to 2023.
• No questions from private institutions are intentionally used in SSC and BCS MCQ datasets.
• SSC short questions are prepared by our team.
• Some MCQs include images/diagrams created by our team; we do not intentionally use institution-owned diagrams.
• BCS MCQs are based on previous Bangladesh government commission exam questions.
• Python and English learning materials are created or managed by our team, and additional modules may be released over time.

3. Information We Collect

a) Account and technical identifiers:

• Email and password when you register/login with email.

Firebase anonymous account ID and authentication tokens when explore mode is used.

b) User-submitted and listing data:

• Tutor profile details such as name, subjects, phone, email, WhatsApp, bio, and location.
• Scholarship listing details managed by authorized admins in Firestore (for example full details, apply portal link, university link, and contact action).
• Question reports and support/contact messages you submit.

c) Location:

Location permission is requested only for tutor-related features. If granted, your approximate location is used to show nearby tutors. If denied, manual location input is still available.

d) External service interactions:

When you open YouTube, WhatsApp, Facebook, university portals, or other external links, those services handle your interaction under their own policies.

4. Content Delivery, Encryption, and Cache

SSC/BCS and other protected learning datasets are delivered via AWS (including S3-backed content/API routes) with JWT-authorized access.

• After first fetch, question data may be stored as encrypted local cache.
• When shown in the UI, cached data is decrypted in app runtime.
• Learning cache older than about 60 days is automatically cleaned.
• Some question images are delivered via GitHub + CDN and may be cached locally for faster loading.

5. Feature-Specific Notes

• SSC includes MCQ, short questions, and topic-based video links. Video links open public YouTube videos owned by third parties.
• BCS includes MCQ and MCQ images with caching behavior similar to SSC. BCS currently has no short-question section and no video section.
• Scholarship data is fetched from Firestore and does not use the same long-term question-bank cache model.
• Scholarship WhatsApp buttons open a prefilled message; the message is not sent automatically.
• Authorized admins with elevated access can add, update, and remove scholarship records.
• Tutor listings can be added/updated by tutors, and students can contact tutors via email, phone, and WhatsApp actions.

6. How We Use Information

• Provide learning features (SSC, BCS, Python, English, tutor, scholarship).
• Authenticate users and secure API access.
• Enable tutor search and user-initiated contact via WhatsApp.
• Enable scholarship contact actions requested by users.
• Operate, maintain, troubleshoot, and improve app performance and safety.
• Respond to user reports, support requests, moderation, and compliance needs.

7. Third-Party Services and Links

We use or link to third-party services including:

• Amazon Web Services (AWS) for content and API infrastructure.
• Google Firebase for authentication and Firestore database features.
• GitHub and CDN providers for selected asset/content delivery.
• YouTube for public educational videos opened by user action.
• Facebook links (Group/Page) opened from the app by user action.
• WhatsApp for user-initiated contact with prefilled messages.

8. Sharing and Disclosure

We do not sell or rent personal information.

We share information with service providers only as needed to operate the app (for example AWS, Firebase, GitHub/CDN, YouTube, Facebook, and WhatsApp when opened by user action). We may also disclose information if required by law or to protect users and the service.

9. Data Retention

• Encrypted local learning cache: up to about 60 days.
• Locally cached question images: retained by app/device cache policy.
• Account and profile data: kept while your account is active, unless deletion is requested.
• Tutor/scholarship records: kept until updated or removed by authorized users/admins.
• Reported question records: kept as needed for review, support, and safety operations.
• For tutor discovery, we store tutor listing data for display; we do not intentionally store separate student profile data beyond authentication and technical operation data.

10. Security

We use reasonable technical and organizational safeguards, including HTTPS/TLS for data in transit, Firebase authentication, token-based API access, and managed access controls on backend services.

11. User Controls and Rights

• You may request access, correction, or deletion of personal data we hold.
• You may request account deletion by contacting us at office@chorchaghor.com.

12. Children and Minors

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13 without required consent. If we learn such data was collected, we will delete it.

13. External Links and Messaging

The app can open external services such as university portals, YouTube, Facebook, and WhatsApp. Their privacy practices are governed by their own policies.

When you tap a WhatsApp contact button, the app opens WhatsApp with a prefilled message. The message is not sent automatically; you must confirm and send it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be posted in the app and/or website with a revised "Last updated" date.

15. Contact Us

For privacy questions, data requests, or deletion requests:
Email: office@chorchaghor.com
App: Use the in-app Contact/Support option