Welcome to Oxfai (operated by Oxfai Corp / published by Hamdi Sadaoui, “we,” “us,” or “our”). We are committed to protecting the privacy and personal data of our users (“you,” “your,” or “students”). This Privacy Policy explains how we collect, use, process, and protect your information when you use our mobile application (Oxfai) and our official website (https://oxfai-acadx2.com).

Oxfai is engineered with a privacy-first approach, aligned with Apple’s App Store Review Guidelines (including 2.3.1, 5.1.1, and 5.2.4) and the General Data Protection Regulation (GDPR). The English text on this page is the controlling version for App Store review.

Terms of Service · Legal notice · support@oxfai-acadx2.com

1. Data We Collect and How We Collect It

To provide our AI-driven academic micro-learning platform, we collect only the minimum data necessary to operate accounts, generate custom academic roadmaps, and keep the service stable.

A. Information You Provide to Us

• Account credentials: When you register, we collect your email address and name. This data is handled via Firebase Authentication.
• Academic profile metadata: You may provide your higher-education institution name and field of study (for example, “Computer Science & Artificial Intelligence”) so the AI Tutor can tailor recommendations.

B. Content and Documents (“Backpack Vault”)

• Uploaded files: Academic notes or course content (PDF or Word documents) stored in your Backpack Vault are encrypted at rest using industry-standard AES-256 encryption.
• Text extraction (Guideline 5.2.4): To limit transmission overhead and respect intellectual-property boundaries, the system extracts only necessary contextual elements or short abstract summaries, truncated under a 250-word limit, to fuel personalized flashcard decks. Oxfai does not host or redistribute publisher full text.

C. Device and Location Data

• Campus Core Explorer: When you use campus maps or related MapKit features, the app may request access to your device location via Apple’s CoreLocation and MapKit frameworks.
• Privacy shield: GPS coordinates are processed in real time on your local device to centre the map. They are not transmitted to our servers, and they are not tracked, stored, or sold.
• Security & integrity: We use Apple DeviceCheck / Firebase App Check tokens to authenticate device integrity and reduce automated bot abuse, API scraping, and scripted exploits.

D. Academic research queries

Library search queries are proxied to authorized indexes (including Springer Nature, Crossref, arXiv, and OpenAlex). Keywords are processed to return metadata and truncated abstracts (≤ 250 words). Links resolve to official publisher pages. Oxfai does not bypass publisher paywalls.

2. How We Process and Share Data (The Cloud Pipeline)

We do not sell, rent, or trade your personal data with third-party advertising companies. Your data travels through a restricted technical pipeline:

• Backend orchestration (Render): Dynamic tutor request routing is orchestrated through our backend hosted on Render. Connections use HTTPS/TLS.
• Anonymized AI processing (Groq and Claude APIs): When you send a tutor prompt (for example from “Help me understand this topic”), the request includes localized academic context such as your major. User identity tokens are decoupled and anonymized (SHA-256 hashing) before evaluation by LLM engines such as Groq or Claude. Raw user credentials and full document directories are not shared with LLM providers.
• Performance tracking (App Store Connect): Technical telemetry such as crash reports, battery, memory, and exceptions may be recorded in anonymized form via Apple’s native distribution analytics (Xcode Organizer / App Store Connect) for stability auditing.
• Advertising (Freemium only): Labelled banner ads and optional rewarded video may appear on utility screens (Grades / ECTS, Backpack, and Focus timers). The AI Tutor remains ad-free for all tiers. Ad networks may process device advertising identifiers according to your ATT choice and Apple’s privacy labels.

3. Data Retention and Deletion Rights (GDPR)

Under the GDPR framework, you hold rights over your personal academic ledger, including access, rectification, and erasure.

• Right of erasure: You can delete your account from Oxfai Settings. Tapping “Delete Account” triggers cascading deletion across Firebase Authentication and associated encrypted database slots.
• Retention: Account metadata is retained only for the active lifecycle of your student profile, except where a short legal or security retention is required (for example, fraud prevention or Apple billing records that we do not ourselves store as card data).

4. Updates to This Privacy Policy

We may refine this policy to align with new App Store or data-protection requirements. We will notify you of structural modifications by refreshing the “Last Updated” timestamp at the top of this page.

5. Contact Us

For inquiries about stored metadata or to exercise privacy rights, contact:

Hamdi Sadaoui — publisher of Oxfai
Cité AADL 3200 BT 1 N° 1
Ighzer Ouzarif, Oued Ghir
Béjaïa 06017, Algeria
Email: support@oxfai-acadx2.com
Phone: +213 798 948 455
Website: https://oxfai-acadx2.com