Privacy Policy
How AlawiGAT collects, protects, and handles your diagnostic test data, cognitive derivation metrics, and account credentials.
1. Information We Collect
A. Account & Profile Information
When you create an account or verify your email on AlawiGAT, we collect your email address, full name or display pseudonym, target GAT percentile goal (50–100), and scheduled official exam date. Passwords are never stored in plaintext; they are securely hashed by Supabase Auth using salted cryptographic algorithms.
B. Cognitive Telemetry & Drill Performance Data
To power our Cognitive Mistake Engine and provide accurate pace analytics, we log your per-question responses, timestamp of each submission, derivation duration in seconds (elapsed pace), selected options, and classified error categories (e.g., speed traps, calculation slips, formula gaps, concept misunderstandings).
C. Device, Browser & Offline PWA Storage
We utilize browser LocalStorage and IndexedDB to cache question banks, lesson articles, and offline study states so you can practice seamlessly during connectivity drops. No persistent device fingerprinting or third-party tracking pixels are employed.
2. How We Use Your Data
A. Adaptive Diagnostic Scoring & Score Projection
Your question attempts are run through our diagnostic pace calculator to compute real-time derivation speed, rush error frequencies, hesitation metrics, and your projected score percentile.
B. Educational Personalization
We analyze weak topic vectors (such as Geometry transversal angles or Exponent rules) to prioritize high-yield formulas and tailored practice drills in your dashboard.
C. Service Communications & Account Verification
We use your email exclusively for transactional purposes: account confirmation links, password reset tokens, and security notices. We do not sell, rent, or lease your personal information to third-party advertisers.
3. Data Storage, Supabase Cloud & Encryption
A. Cloud Database Infrastructure
Production data is stored on Supabase managed PostgreSQL instances with encrypted storage at rest (AES-256) and TLS 1.3 encryption in transit for all client-to-server communications.
B. Row Level Security (RLS) Enforcements
Every database table implements PostgreSQL Row Level Security (RLS). Question attempt records, mock exam scores, and personal preferences are strictly constrained to auth.uid() = user_id. Other students cannot read, query, or infer your private practice sessions.
4. Discord Webhooks & Automated Daily Questions
A. Public Curriculum Broadcasts
Our administrative Discord Bot and Daily Question webhooks transmit only educational curriculum content: question prompts, mathematical figures, LaTeX derivations, and spoiler-tagged correct choices. Zero student personal data, usernames, or individual test results are ever broadcast to Discord.
5. Student Rights & Data Protection (Saudi PDPL & GDPR)
A. Right to Access & Export
You maintain full ownership of your study history. You may request an export of all your logged question attempts, accuracy records, and profile details at any time.
B. Right to Deletion (Right to Be Forgotten)
Upon your request, your profile, authentication records, and associated cognitive drill logs will be permanently deleted from our database using cascading foreign key purges.
C. Saudi Personal Data Protection Law (PDPL)
AlawiGAT complies with the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL) issued by Royal Decree No. (M/19), ensuring lawful, transparent, and purposeful processing of student educational data.
Contact Data Protection Officer
For privacy inquiries, data deletion requests, or questions regarding our cognitive telemetry practices, contact us directly at: