Privacy Policy

Sum Code ("the App") is an AI-powered programming learning platform developed and operated by FS Sam ("we", "us", "our").

This Privacy Policy explains what personal data we collect when you use Sum Code, why we collect it, how we use and protect it, and what rights you have regarding your data.

• Full name (provided during registration)
• Email address
• Password (stored as a secure bcrypt hash — never in plain text)
• Google account profile (name, email, avatar) if you sign in with Google

• Contest participation, scores, rankings, and submission history
• Leaderboard entries — your name and score are publicly visible to other users
• Daily challenge completion and streak data
• Lessons completed and XP earned (stored locally on your device)

• Prompts sent to the AI tutor are forwarded to Google's Gemini API for real-time processing
• We do not permanently store your AI chat messages on our servers

• Device type and operating system version
• Anonymous usage patterns, crash reports, and performance metrics
• Ad interaction data (if you use the free tier with ads)

• Create and manage your Sum Code account
• Authenticate you securely on login
• Display your name and score on public contest leaderboards
• Track your contest results and calculate rankings
• Deliver personalised AI-powered learning features
• Send important service notifications (account changes, policy updates)
• Detect fraud, abuse, and security threats
• Improve app performance and features through anonymous analytics
• Comply with legal obligations

When you participate in a Daily or Weekly Coding Contest, your display name and contest score are shown on the public leaderboard. Other users of the app can see this information.

We do not sell, rent, or trade your personal data. We may share data only in these limited cases:

• Account data (name, email, hashed password) — retained while your account exists; deleted permanently when you delete your account
• Contest scores and leaderboard entries — retained while your account exists; deleted when you delete your account
• AI chat messages — not stored on our servers; processed in real-time by Gemini API only
• Local device data (XP, streaks, lessons) — stored on your device; cleared when you uninstall the app or reset progress
• Anonymous analytics — may be retained indefinitely in aggregated form

• Passwords are hashed using bcrypt — never stored in plain text
• All API communication uses HTTPS / TLS encryption
• Authentication tokens are stored in encrypted device storage
• Database access is restricted to authorised personnel only

However, no system is 100% secure. We encourage you to use a strong, unique password for your account.

Sum Code is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13.

If you are a parent or guardian and believe your child has created an account, please contact us immediately at williamjack1537@gmail.com and we will delete the account promptly.

Sum Code integrates the following third-party services. We are not responsible for their privacy practices:

• Google Gemini API — AI features (Google Privacy Policy)
• Google Sign-In — optional authentication
• Google AdMob — ad serving for free users
• Google Play Billing — in-app subscription management
• Meta (Facebook) Ads — ad performance tracking

Your data may be stored and processed on servers located outside your country. By creating an account and using Sum Code, you consent to the international transfer of your data in accordance with this Privacy Policy and applicable laws.

We may update this Privacy Policy when we add new features or change how we handle data. We will notify you within the app when significant changes occur. The "Effective Date" at the top will always reflect the latest version.

Continued use of Sum Code after changes constitutes your acceptance of the updated policy.

This Privacy Policy is governed by the laws of Bangladesh. Any disputes shall be resolved under Bangladesh jurisdiction.