Privacy
policy.

01 · The short version

02 · What we collect

These are the things we receive. Everything else stays on your device unless you turn on CTBE Premium (section 04).

Your account

When you sign in with Google or Apple, we receive your name, email address (or Apple’s private relay address, if you choose that), and profile photo. We store a display name and avatar so the app can show who’s signed in.

Your device & install

To confirm that your copy of the app is a genuine, paid install, we record your platform (iOS or Android), device model, OS version, app version, and a one-time security signal your phone produces to confirm the install hasn’t been tampered with. We keep timestamps of when an install was first and last verified.

AI Tutor activity

When you use the AI Tutor, the messages and any images or PDFs you attach are sent to our AI provider to generate a reply (see section 05). We keep a ledger of your AI Credit balance and transactions — how many credits a purchase added and how many a request used — recorded as counts and cost. Without CTBE Premium we never store the content of your messages.

Crash and security diagnostics

When the app or our servers hit an error, a crash report goes to our error-tracking service: the technical error, the app version, and your device model and OS version. The app’s built-in tamper protection also reports security signals (for example, a modified or debugged copy of the app) to its provider. Neither includes your study data or messages.

Duels and Bayanihan

If you play Duels, we keep your matches, answers and rank. Your opponent sees your display name, profile photo and rank, and the leaderboard shows your display name, rank and win–loss record to other players. If you publish a deck or quiz to Bayanihan, it is shown to other learners of that board exam with your display name.

CTBE Premium subscription

If you subscribe, we receive your subscription status from the App Store or Google Play (product, renewal and expiry dates — never your payment details), plus the copy of your study data described in section 04 and a list of the devices and browsers signed in to it (device name, type and when it was last seen; for phones and tablets also one-way hashes of the network address and the app’s user-agent string it last synced with — never the address itself).

Sign-in logs

Our sign-in provider keeps a security log of sign-ins and sessions, including the time, network address and browser or device used.

03 · How we use it

We use the limited data we hold to:

• Sign you in and confirm your purchase so you can download exam packs
• Verify that an install is a genuine paid copy and guard against tampering
• Run the AI Tutor and meter AI Credits accurately
• Run Duels, the leaderboard and Bayanihan
• If you subscribe to CTBE Premium, sync your study data between your devices and show it in the web app
• Answer your support emails

We do not sell your data, share it with advertisers, or build an advertising profile of you. There are no ads in the app.

04 · Your study data

By default the app keeps your study data with you: your quiz history, answers, scores, mistake journal, bookmarks, notes, streaks, daily goals, planner, flashcard decks, saved tests and AI Tutor chat history are stored on your phone.

Your own cloud backup (free). You can back this data up to your own iCloud or Google Drive. The backup is encrypted with a key tied to your account before it leaves your phone, and it is stored in your own iCloud or Google Drive, which we have no access to.

Cloud sync (CTBE Premium subscription). If you subscribe, the app also sends a copy of that study data — including your AI Tutor conversations, the text read from files you attach, and your pictures and drawings — to our servers so it can sync to your other phones, tablets and the web app. This copy is encrypted in transit and at rest by our hosting providers, but it is not end-to-end encrypted: our servers can read it in order to merge your devices’ changes and run the web app. We use it only to provide Cloud sync and the web app to you.

Without Cloud sync or your own backup, deleting the app deletes your on-device data and we have no copy to restore. Your purchase, however, stays tied to your account — reinstalling and signing in restores access to the content.

The web app

The CTBE web app uses only cookies it needs to work: your sign-in session, an identifier for the browser, your time zone and display preferences, and two reminders that this browser has seen the welcome screens (one of them names the account it was set up for). It sets no advertising or analytics cookies.

05 · AI Tutor

When you ask the AI Tutor something, the text of your message — plus recent context from the same conversation, and any image or PDF you attach — is sent to our AI provider to produce an answer. Images and PDFs may first be converted to text so the model can read them.

Without CTBE Premium we don’t store your AI Tutor conversations on our servers; the chat history lives only on your device, and our servers record only the size and credit cost of each request. With CTBE Premium, your conversations are part of the synced copy described in section 04. The AI providers process what they receive under their own terms to generate the response.

If you’d rather not use the AI Tutor at all, simply don’t open that tab — the rest of the app works fully offline without it.

06 · Sharing with third parties

We rely on a small set of trusted service providers to keep the App running. Each one receives only what it needs to do its job:

• A cloud backend that holds your account, install records, AI Credit history, duel records and, with CTBE Premium, your synced study data.
• A file-storage provider that holds Bayanihan uploads and, with CTBE Premium, your synced pictures and attachments.
• The identity services that let you sign in with your Apple or Google account, and the app stores that process your purchases.
• A purchase-validation service that verifies your App Store and Google Play receipts and subscriptions so we can credit them to your account, and remove unspent credits if a purchase is refunded.
• AI model providers that process your AI Tutor messages, images, and PDFs to generate replies.
• The device-integrity checks built into iOS and Android, which confirm your install is a genuine, untampered copy, and the app’s tamper-protection provider.
• An error-tracking service that receives the crash reports described in section 02.

We don’t share your data with anyone beyond what’s needed to run these functions. We don’t work with data brokers or advertisers. We would respond to lawful, narrowly scoped requests from Philippine authorities, but given how little we hold, there is usually nothing to share.

07 · Retention

• Account & install records — kept while your account and install stay active.
• AI Credit ledger — kept as a record of your purchases and balance.
• AI Tutor message content — without CTBE Premium, not stored on our servers at all; the chat history on your device stays until you delete it.
• Cloud sync study data — kept while your subscription is active. If it lapses, we keep the copy for about 60 days so you can pick up where you left off if you resubscribe, then delete it within about a week. Your devices keep their own copy.
• Duel records and Bayanihan uploads — kept while your account is active.
• Deleting your account removes your account and the records tied to it, including your Cloud sync copy, and takes down anything you published to Bayanihan. It does not cancel a CTBE Premium subscription — cancel that in your App Store or Google Play account settings.
• Support emails — kept while we need them to help you, then deleted.

08 · Your rights

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), and comparable laws elsewhere, you can ask us to:

• Tell you what data we hold about you
• Provide a copy of it
• Correct anything inaccurate
• Delete your account and the records tied to it

Email [email protected] for any of these and we’ll respond as promptly as we can.

09 · Children

The app is made for board-exam candidates, who are typically adults. It is not directed at children, and we don’t knowingly collect data from anyone under 18 (or the age of majority in your country). If you believe a minor has provided us data, contact us and we’ll remove it.

10 · Changes to this policy

When we make a material change to this policy, we’ll update the version and date at the top of this page and post a notice in the app. The “last updated” date will always reflect the most recent revision.

11 · Contact

Questions, requests, or concerns about your privacy:

XenonLabs
Conquer The Board Exam
Email: [email protected]
Philippines