Privacy Policy

CAfy is a current-affairs and active-recall learning service. This policy explains what information we use to provide the service and the choices available to you.

Information we collect

• Account information: your email address, display name and sign-in method. CAfy can send app-update and service emails to your verified account address. You can unsubscribe from these updates. Promotional emails require a separate email opt-in, and turning on in-app promotions or daily digests does not enable promotional email. Campaign delivery records are retained for 90 days; security and verification emails are managed separately. We do not use campaign email open-tracking pixels.
• Learning preferences: exams, subjects and digest preferences you choose.
• Learning activity: saved articles, reading progress, quiz attempts, answers and recall statistics.
• Service information: security, request and error records needed to operate and protect CAfy.

Google sign-in

If you continue with Google, CAfy requests only OpenID Connect identity information: your unique Google account identifier, verified email address, name and basic profile. We use it only to create or locate your CAfy account and complete sign-in. CAfy does not receive your Google password. The access token used to retrieve this profile is not stored by CAfy.

How we use information

We use your information to authenticate you, personalize the learning flow, save progress, calculate recall insights, maintain security, troubleshoot failures and improve reliability. We do not sell Google user data or use it for advertising.

Usage analytics

CAfy uses Contentsquare and Google Analytics 4 to understand page visits, navigation paths, device and referral information, feature usage, performance, errors and where learners encounter friction. Contentsquare may record interactions such as clicks, scrolling and navigation. Authenticated areas and forms that may contain personal data are masked. We do not deliberately send account names, email addresses, passwords, support messages, quiz answers or article search text as custom analytics event properties.

Google advertising signals and ad personalization remain disabled. You can limit cookies and similar technologies through your browser privacy settings, although doing so may reduce the analytics information available to CAfy.

Across Android, installed web apps and browsers, CAfy records the signed-in account, a random client identifier, app or web release version and foreground activity to operate the service and understand usage. Browser profiles are not physical-device identifiers. Feature events contain approved feature and content identifiers, not typed text or private content. Older app versions may honour their existing analytics preference. Raw feature events are retained for 30 days, foreground event detail for 120 days and daily summaries for 400 days. Client records remain until account deletion. Offline events retain their original time when uploaded. Authorized administrators can view account-level learning reports. Signed-out website visits are measured separately using a random browser-profile identifier, platform, web release and fixed public-page categories. We do not attach these anonymous visits to an account or collect URL queries, search text or referrers for this reporting. Anonymous profiles and visits expire after 120 days. Counts describe observed browser profiles rather than identified people.

When information is shared

Information may be processed by infrastructure and database providers that help us run CAfy, under their service terms and security controls. We may disclose information when required by law or necessary to prevent fraud, abuse or harm. Providers may not use Google sign-in data for their own advertising.

Referrals and leaderboard

We keep code attribution, verification and qualifying learning records to confirm referral and promotional benefits. Referrers see invitation status, not your email or private activity. The monthly leaderboard displays a safe public name and points for qualifying learners. You can edit that name or hide your public listing in Progress.

We do not fingerprint devices or read the clipboard. Android uses Google Play’s install referrer to recover a shared code after installation. Account deletion removes public identity and associated scores; minimal anonymous reward accounting may remain to prevent duplicate claims.

Retention and security

We retain account and learning data while your account is active and as needed to provide the service, meet legal obligations, resolve disputes and protect the platform. We use encrypted HTTPS connections, restricted service identities and secure session cookies. No online service can guarantee absolute security.

Your choices

You may use email sign-in instead of Google and revoke CAfy's Google access from your Google Account. To request access to, correction of or deletion of your CAfy account data, submit a request through our Contact us. We may need to verify your identity before completing a request.

Changes and contact

We may update this policy as CAfy changes. Material updates will appear here with a new effective date. Questions can be submitted through our Contact us.