Privacy policy

GKRider uses Google sign-in to create and authenticate your account and save your onboarding and profile preferences across devices.

Information we collect and use

When you sign in, Google supplies your stable Google account identifier, name, email address, email verification status, and profile picture URL. We use these to identify your account and prefill your name. You may edit your display name. GKRider does not receive your Google password or request access to your Gmail, Drive, contacts, or calendar.

We store your display name, optional gender, language, selected exams, onboarding progress, and completion status. These support your account setup and preferences. Gender may be left unspecified. Learning screens marked as demos contain prototype content; selecting an exam does not imply that a complete course is available.

We also store session identifiers, expiry times, and technical session information such as IP address and browser user agent when supplied, to maintain sign-in and support security. Authentication records may contain encrypted Google access and refresh tokens. Google identity tokens are verified during sign-in and are not retained in the account record.

Storage, cookies, and sharing

Account records are stored in GKRider's PostgreSQL database on its hosting infrastructure. Hosting and infrastructure providers process data to operate the service. Authorized operators may access records when needed to maintain the service, investigate issues, or handle account requests. Google processes sign-in under its own privacy policy: Google Privacy Policy.

GKRider uses secure, HTTP-only session cookies. Sessions have a 30-day rolling lifetime and may renew with activity. Signing out revokes the current session; it does not delete your account or sign you out of Google. Google authentication tokens are not stored in browser local storage.

This account release does not sell Google account information or use it for advertising. Account information is used for authentication, saved preferences, service operation, and support.

Retention and your choices

Account and profile records remain stored while your account is maintained. This release does not provide automatic deletion or an inactivity deletion schedule. You can edit your profile in settings. To request access, correction, or deletion, contact shobhit@dodost.org. We will verify account ownership before acting on a request. Revoking GKRider access in your Google Account does not itself delete GKRider's stored profile.

Database backups currently rotate after 30 days. Data removed from the active database may remain in existing backups until they expire. Session expiry prevents use of that session but does not itself guarantee immediate removal of all associated database records.

Contact and changes

Contact shobhit@dodost.org with privacy questions. We will update this policy when account data practices change and obtain further consent when required before using Google data for a new purpose.