TL;DR — The Short Version
Overview
Dheeyudha ("we", "our", or "us") is an educational quiz platform that connects students and verified teachers for academic learning and competitive quizzes. This Privacy Policy explains how we collect, use, store, and protect information in connection with your use of Dheeyudha at Dheeyudha.app and related services.
By creating an account or using Dheeyudha, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service and contact us to delete your account.
This policy applies to all users — students, teachers, and visitors — regardless of how they access Dheeyudha (web browser, mobile device, etc.).
Data We Collect
2.1 Account Information
When you register, we collect:
- Full name (as provided during signup)
- Email address (used for authentication and communication)
- Password (stored as a secure bcrypt hash — never in plain text)
- Username (unique, lowercase, no spaces — public identifier)
- User role: student or verified teacher
2.2 Profile Information (Optional)
You may optionally add:
- School name and class grade
- A biography / bio text
- Profile avatar image (uploaded to our storage)
- Banner / cover image
- Teacher-specific: primary teaching subject
⚠️ Profile information you provide is publicly visible to all users and visitors unless noted otherwise.
2.3 Usage & Activity Data
- Questions you attempt and scores you achieve
- Quiz battles you participate in (opponents, outcomes, timestamps)
- Questions created by teachers (title, body, subject, options)
- Follow relationships (who you follow and who follows you)
- Profile interactions (avatar updates, username change timestamps)
2.4 Technical Data
- Browser type and device information (for compatibility)
- IP address (logged by Supabase for security purposes)
- Session tokens and JWT authentication data
- Storage paths for uploaded files (avatars, banners, question images)
How We Use Your Data
We use your information strictly for the following purposes:
We do not use your data for advertising, profiling, or selling to third parties.
Third-Party Services
Supabase
Authentication, Database & Storage
We use Supabase to manage user authentication, store application data (profiles, questions, follows, scores), and host uploaded files (avatars, banners). Supabase is SOC2-compliant and stores data in secure cloud infrastructure.
Read Supabase Privacy Policy →Vercel / Next.js
Web Hosting & Delivery
Dheeyudha is hosted on Vercel, which serves the web application globally. Vercel may collect standard web server logs (IP addresses, timestamps, request paths) as part of their infrastructure.
Read Vercel Privacy Policy →Data Security
We take security seriously and have implemented multiple layers of protection:
While we implement strong security measures, no system is 100% infallible. We encourage users to use strong, unique passwords and to report any suspicious activity to us immediately.
Public Information
Some of the information you provide is visible to all users and visitors of Dheeyudha — even without an account. This includes:
- Your display name and username (e.g. /user/your-username)
- Your profile avatar and banner image
- Your bio / biography text
- Your school name and class grade (if provided)
- Your global rank and point total (on the leaderboard)
- Your followers count and following count
- Questions posted by teachers (title, body, subject, difficulty)
- Achievements and badges earned on your profile
Your Rights & Choices
Access & Correction
You can view and edit most of your personal information directly on your profile page at /profile. This includes your name, username, bio, avatar, and banner.
Username Changes
You may update your username up to 4 times per 30-day period from your profile page. This limit helps maintain the integrity of @mentions and profile links across the platform.
Account Deletion
You have the right to request complete deletion of your account and all associated personal data. To do so:
- Contact us at the email listed in the Contact section below.
- Include your registered email address in your request.
- We will process the deletion within 14 business days.
- Note: some data (quiz outcomes, posted questions) may be retained in anonymised form for platform integrity.
Objection & Restriction
If you believe we are processing your data unlawfully or incorrectly, you have the right to object. Please contact us and we will review your request promptly.
Dheeyudha uses minimal browser storage to function properly:
| Type | Purpose | Duration |
|---|---|---|
| Auth Session Cookie | Keeps you logged in across page visits | Until sign out |
| JWT Access Token | Authenticates API requests securely | 1 hour (auto-refreshed) |
| Refresh Token | Obtains a new access token silently | 30 days |
| localStorage (UI) | Saves light UI preferences like sidebar state | Browser session |
We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out: