Privacy Policy

1. Scope & Offline-First Architecture

PhysioPilot ("we", "the Platform") is an offline-first educational reference and university exam preparation application built specifically for undergraduate Bachelor of Physiotherapy (BPT) students in India.

The mobile Android application functions 100% offline using a local SQLite database (Room DB) stored securely inside Android's private application sandbox (MODE_PRIVATE). We never collect, upload, store, or transmit Protected Health Information (PHI), live patient medical charts, hospital records, or diagnostic patient evaluations. All clinical scenarios, OSCE rubrics, and case proforma exercises in the application are synthetic pedagogical simulations.

2. Data Collected via This Website

When students, faculty, or campus ambassadors voluntarily submit the beta inquiry, campus ambassador application, or contact form on this website, entries are routed through a form gateway (formsubmit.co) to our official operations email (physiopilotofficialwebsupport@gmail.com) or student WhatsApp desk. We collect only:

• Full Name (to address you in communications)
• Physiotherapy College & Affiliated University (to verify BPT student eligibility)
• Academic Year & City (to deliver relevant curriculum release waves)
• WhatsApp / Mobile Number or Email (strictly to transmit direct APK download links and release notifications)
• Optional Notes / Inquiries (to address specific questions)

We never sell, lease, rent, or trade your contact details to third-party marketing agencies, lead brokers, or advertising networks.

3. Zero Third-Party Telemetry & Ad Trackers

PhysioPilot's production Android application contains zero third-party advertising SDKs, zero user tracking pixels, and zero invasive telemetry services. Your question scores, card review intervals, and Mistake Bank logs remain strictly confined to your device's internal SQLite storage.

4. Optional AI Features (Google Gemini API)

The application includes an optional Socratic clinical assistant connecting directly to Google's official Gemini API. When you provide your own Google AI Studio key:

• Your API key is encrypted on your local Android device using software AES-256-GCM cipher with a private salt (SecureApiKeyStorage.kt) in application-private storage (MODE_PRIVATE). It never passes through any intermediary proxy. Hardware-backed KeyStore StrongBox is planned for Phase 3.
• Only your academic reasoning prompt is transmitted to Google's official Gemini endpoint. No personal device identifiers, student contact details, or private files are attached.

5. Data Subject Rights & DPDP Position

Under India's Digital Personal Data Protection Act, 2023, you hold the right to:

• Request a copy of the contact details you provided during beta sign-up.
• Request immediate correction of inaccurate contact information.
• Request complete deletion / erasure of your contact details from our cohort distribution list at any time.

Note: This policy is a founder review draft reflecting current pre-launch beta operations. Formal legal review and data protection officer appointment will be finalized prior to commercial incorporation.

6. Inquiries & Deletion Requests

To exercise your data protection rights or submit privacy-related questions, contact our founding team directly at:

Email: physiopilotofficialwebsupport@gmail.com
Subject: Data Privacy / Information Request