Privacy Policy

01. Introduction & Core Philosophy

ARIA ("we", "us", "our", or "the Platform"), accessible at ariainterface.com, is an advanced AI study assistant, examination revision engine, and productivity operating system created by Jameel Rashid.

We are committed to absolute honesty and transparency regarding how user data is gathered, processed, and protected. We do not sell your personal data or study materials to advertisers, data brokers, or third-party marketing companies under any circumstances.

02. Information We Collect

We only collect information strictly required to authenticate your identity, deliver personalized educational responses, and maintain your account state:

A. Account & Identity Data

• Registration Details: Your full name, email address, and encrypted password (hashed securely using industry-standard bcrypt).
• Profile Information: Educational role (e.g. Student, Educator, Self-Learner), selected curriculum (e.g. Cambridge, KCSE, NECTA, International), subjects, and uploaded profile photos.
• OAuth Credentials: If you sign in via Google Identity Services, we receive your verified email, name, and profile picture avatar directly from Google.

B. Study Content & User Interactions

• Chat History & Prompts: Text queries, study revision questions, code snippets, notes, and interactive quizzes you generate inside ARIA.
• Vision OCR & Document Uploads: Photos of handwritten math problems, textbook diagrams, or assignment sheets you upload for Vision OCR analysis.
• Classroom & Analytics Data: Revision set scores, quiz completion timestamps, and study progress metrics.

C. Technical & Device Information

• Connection Details: IP address, browser type, device operating system, and approximate geographic location (used solely for localized pricing in KES/TZS/USD and latency routing).
• Cookies & Local Storage: Essential session tokens (JWT), authentication cookies, and offline UI preferences stored directly in your browser's LocalStorage and IndexedDB.

03. 100% Offline AI & Local Processing Privacy

When you are offline or using local AI:

• Your conversation text, study notes, and queries never leave your device and are never transmitted over the internet or logged to our servers.
• Local token usage counters and study history are stored strictly within your browser's private storage.

04. How Your Data is Used

We process your data exclusively for the following legitimate purposes:

• Delivering AI Tutoring: Generating step-by-step solutions, marking past-paper exams, rendering interactive HTML5 Canvas tools, and providing bilingual English/Swahili explanations.
• Account Management & Security: Authenticating logins, sending Two-Factor Authentication (2FA) verification codes, and preventing brute-force attacks.
• Subscription Processing: Managing ARIA Pro access, processing daily/monthly passes, and provisioning educator features.
• Platform Performance & Safety: Monitoring system uptime, mitigating abuse, preventing academic dishonesty exploit scripts, and improving server reliability.

05. Third-Party Integrations & Payment Processors

To deliver enterprise-grade performance and secure transactions, ARIA interfaces with reputable third-party infrastructure providers:

A. Payment Gateways (PesaPal & Mobile Money)

ARIA integrates with PesaPal, Safaricom M-Pesa, and Vodacom M-Pesa for processing Pro subscriptions and day passes.

B. Cloud AI Services

When operating in Online Mode, prompt inputs are processed through secure, enterprise-tier foundation model APIs (including Google Gemini, OpenAI, and Anthropic). These providers adhere to strict data privacy agreements ensuring user prompt data is not used to train public models.

C. Database & Hosting

Encrypted data is hosted on enterprise cloud servers (Render and MongoDB Atlas) with active firewall defense, automated backups, and SSL/TLS 1.3 encryption for all data in transit and at rest.

06. Peer Study Rooms & WebRTC Privacy

ARIA includes real-time collaborative Study Rooms utilizing WebRTC (PeerJS) technology:

• Direct Peer-to-Peer Transmission: Video streams, audio chat, and live collaborative whiteboard canvas strokes are transmitted directly between room participants (P2P).
• No Server Recording: ARIA does not record, intercept, or store your live study room video calls, webcam streams, or microphone audio on our backend servers.

07. YouTube Automation & Google API Services

ARIA provides an optional YouTube Content Automation tool for creators and educators to schedule study videos:

• ARIA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• We only request permissions strictly authorized by the user via Google OAuth to upload and schedule the specific video files you explicitly queue.
• OAuth refresh tokens are stored encrypted and can be permanently revoked by the user at any time from their Google Account Security settings.

08. Student & Minor Privacy (COPPA & Child Safety)

ARIA is an educational tool designed for secondary, high school, university students, and educators.

• Users under the age of 18 (or the age of digital majority in their jurisdiction) must have permission or supervision from a parent, legal guardian, or registered school educator to create an account.
• We do not knowingly collect personal information from children under 13 without verified parental or educational institution consent. If you believe a child under 13 has provided personal data without consent, please notify us immediately at ariaassistantsupport@gmail.com for prompt deletion.

09. Data Retention & User Deletion Rights

You maintain complete control over your personal data on ARIA:

• Right to Access & Export: You may request a machine-readable copy of your personal study data and chat records at any time.
• Right to Erasure (Account Deletion): You may permanently delete your account, chat logs, profile photos, and associated records by emailing us at jameeljay7@gmail.com or ariaassistantsupport@gmail.com with the subject "Delete My Account". All associated database records will be permanently purged within 7 business days.

10. Jurisdictional Compliance

ARIA complies with applicable international and regional data protection frameworks:

• Kenya Data Protection Act (KDPA, 2019): Respecting data subject principles of lawfulness, transparency, purpose limitation, and data minimization.
• Tanzania Personal Data Protection Act (PDPA, 2022): Ensuring lawful processing and secure handling of citizen data across East Africa.
• General Data Protection Regulation (GDPR / UK GDPR): Providing EU/UK users with rights of access, rectification, portability, erasure, and objection.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact our team directly:

• Primary Developer / Founder: Jameel Rashid
• Direct Email: jameeljay7@gmail.com
• Support Email: ariaassistantsupport@gmail.com
• Website (Production): https://ariainterface.onrender.com
• Custom Domain: https://ariainterface.com