Draft for review. An administrator must complete the business details and publish these policies before launch.
Privacy Policy
Last updated: 16 September 2026
This Privacy Policy explains how Add legal name in Admin → Settings → Legal pages, of Add registered address in Admin → Settings → Legal pages ("Justify", "we", "us" or "our"), collects, uses, shares, secures and keeps personal data when you use Justify.
1. Data we collect
- Account and profile data: name, email address or phone number, authentication records and profile preferences.
- Academic data: education level, board, passing year, GPA, subjects and target exams or universities that you choose to provide.
- Learning activity: practice answers, timings, skips, scores, battle participation, rankings, flashcard reviews, study plans, reports and doubts.
- Uploads and communications: images or text you submit, support messages and feedback.
- Transactions: the product or battle, amount, status, payment reference and refund record. Payment credentials are processed by the payment provider and are not stored by Justify.
- Prize delivery: the payout number you provide, payout status and transaction reference.
- Technical and integrity data: IP address, browser, device identifier, session, security events, timestamps and signals used to diagnose faults, prevent abuse and protect fair battles.
2. Why we use data
- To create and secure your account and provide practices, exam rehearsals, battles, rankings, analysis, premium access, refunds and prizes.
- To personalise study recommendations and show progress.
- To detect cheating, fraud, account abuse and technical failures.
- To answer support requests, review reported questions and communicate important service changes.
- To comply with legal, accounting and payment obligations and to establish or defend legal claims.
- To improve content and features using statistics and feedback, with identifying information removed or limited where practical.
We process data to provide the service you request, protect legitimate interests such as security and fairness, meet legal obligations, and obtain consent where applicable law requires it. You may withdraw consent for future processing where consent is the basis, but earlier lawful processing remains valid.
3. Leaderboards and visibility
A leaderboard may show your display name, score, rank and public result details. It does not display your answers, academic profile, contact information or payment record to other students.
If you win or place in a battle, challenge or live exam, your display name, profile photo, rank and score may also appear in winner lists, the Hall of Fame and Justify's social media and promotion, as the Terms of Service explain. You can switch this off at any time in your profile; your contact details, answers and payment record are never used for this.
4. Service providers and sharing
We do not sell personal data. Providers currently described for this service are: Supabase (authentication, database and file storage); the payment provider shown at checkout; and approved AI providers when a student submits a request to an AI feature..
We share only the data reasonably needed for hosting, authentication, storage, payments, communications, analytics, security or an AI feature you choose to use. We may also disclose data when law requires it, to protect users or the service, or as part of a business reorganisation with appropriate safeguards. A provider may process data outside Bangladesh; where that happens, we use reasonable contractual and security protections required by applicable law.
5. AI features
If you choose an AI feature, the prompt, question, image or relevant learning context may be sent to an approved AI provider to generate the response. Do not include unnecessary personal or confidential information. An AI response can be wrong and should be checked against trusted study material.
6. Security
We use access controls, encrypted connections, restricted administrative tools, audit records, backups and monitoring intended to protect data. No online service can promise absolute security. Tell us promptly if you believe your account or data is at risk.
7. Retention and deletion
We keep data while your account is active. After account closure, we normally delete or de-identify account data within 24 months, unless a longer period is reasonably necessary for a dispute, fraud prevention, payment or prize record, backup cycle, or legal obligation. Some aggregated data that no longer identifies you may be kept longer.
8. Your choices and rights
Subject to applicable law, you may ask to access, correct, update or delete your personal data, object to or restrict certain processing, withdraw consent, or ask how a decision affecting you was made. We may need to verify your identity and may retain information where law permits or requires it. Send a request to Add privacy email in Admin → Settings → Legal pages or use the Contact page.
9. Students under 18
Justify is used by students, including students under 18. A parent or legal guardian should be aware of and permit the account. We limit collection to what is reasonably needed for learning, safety and operation of the service. A guardian may contact us about a child's data.
10. Changes and contact
We will update the date above when this policy changes and give reasonable notice of material changes. Privacy questions and complaints can be sent to Add privacy email in Admin → Settings → Legal pages.