Privacy Policy

1. Introduction

Welcome to Luxern ("we", "us", or "our"). Luxern is an educational social platform designed for Sri Lankan Advanced Level (AL) and Ordinary Level (OL) students. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at luxern.lk (the "Service").

2. Information We Collect

We collect information you provide directly to us when you:

• Create an account — When you sign in with Google, we receive your name, email address, and profile picture from your Google account.
• Complete your profile — Education level, year, subject stream, and optional bio.
• Use the platform — Posts, comments, quiz attempts, uploaded study materials, and interactions (fires, bookmarks, reports).

We also automatically collect usage data such as pages visited, features used, and device/browser information to improve the Service.

3. How We Use Your Information

• To provide, maintain, and improve the Service.
• To personalize your experience (e.g., relevant study spaces and content).
• To facilitate the gamification system (XP, levels, leaderboard).
• To send notifications about activity on your posts, quiz results, and community updates.
• To enforce our community guidelines and moderate content.
• To respond to your requests and support inquiries.

4. Information Sharing

We do not sell your personal information. We may share information in the following limited circumstances:

• Public profile data — Your display name, avatar, level, XP, and public posts are visible to other users.
• Service providers — We use Supabase for data storage and authentication, Cloudflare for content delivery, and Google for sign-in. These providers process data on our behalf under their respective privacy policies.
• Legal requirements — We may disclose information if required by law or to protect the rights and safety of our users.

5. Google User Data

We use Google OAuth 2.0 for authentication. The only data we request from Google is your basic profile information (name, email, and profile picture). We do not request access to your Google Drive, Gmail, contacts, or any other Google services. We do not share your Google user data with third parties except as described in this policy.

6. Data Storage & Security

Your data is stored securely using Supabase with row-level security (RLS) policies. Uploaded files are stored on Cloudflare R2. We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS) and at rest.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Control your notification and privacy preferences via Settings.

To exercise any of these rights, please contact us at the email below.

8. Cookies & Local Storage

We use browser local storage to save your preferences (notification settings, privacy toggles). We use essential cookies for authentication sessions. We do not use third-party tracking cookies or advertising cookies.

9. Children's Privacy

Luxern is designed for students, including those under 18. We collect only the minimum information necessary to provide the Service. We do not knowingly collect sensitive personal information from children beyond what is described in this policy. Parents or guardians may contact us to request access to, correction, or deletion of their child's data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new policy on this page with an updated "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please reach out to us at: hello@k4ze.dev