Only what is needed.
Nothing vague.

This policy applies to CommonSource mobile apps, web services, desktop products and commonsourcelab.com. Because features and permissions differ by product, also review its store privacy information and any product-specific notice.

A product with its own privacy policy is governed by that product-specific policy. This page states the common standard; consult each product policy for current details.

CommonSource processes information only where it is needed to provide the service. Whenever practical, products are designed to keep information on your device.

When you contact us, we may process the email address, app name, device and operating-system details, and message you choose to provide.

A student-access application includes the applicant’s name and email address, requested app, platform, store region, eligibility category, and either a photograph or an official scan showing current enrollment, exam registration, or course participation. Unnecessary details, including portraits, dates of birth, addresses, phone numbers, student or candidate numbers, government ID numbers, QR codes, and barcodes, must be covered before photographing or attaching the proof.

Product version, device type, crash reports, and anonymized or pseudonymized usage statistics may be processed for reliability and improvement. Core content such as documents, photos, learning history, or vehicle data is handled on-device or only as needed for a feature you choose, as described by that product and its permission prompts.

We use information to answer support requests, diagnose errors, deliver services, maintain security, and improve our products. It is deleted when no longer needed for those purposes or when a legally required retention period ends. Product-specific web-service retention periods are stated in the service privacy policy.

Support emails may be retained for as long as needed to resolve an issue and provide follow-up. You may request their deletion at any time.

Student-access proof is deleted within 30 days after verification and code delivery. A minimal record of the applicant name, email address, app, platform, and issue month is retained for one year to prevent duplicate applications, then deleted.

Apple, Google, Google Cloud and Firebase, Microsoft, Vercel, and other providers involved in distribution, payments, hosting, authentication, or analytics may process information under their own terms and privacy policies. In a product with a generative-AI feature, content may be sent to an AI provider only when you expressly use that feature; the product provides notice before transfer.

CommonSource does not sell personal information. We do not disclose it to third parties except with your consent, as needed to provide a requested service, or where the law requires it.

Permissions such as camera, photos, microphone, notifications, motion and fitness, or Bluetooth are requested only when a related feature needs them. You can change permissions in operating-system settings, although doing so may limit that feature.

Data stored only on a device may not be recoverable after app deletion or device loss. Use an app’s export or backup tools to keep a separate copy of important material.

Subject to applicable law, you may request access, correction, deletion, restriction, or withdrawal of consent. A student-access request for anyone under 14 must be submitted by a parent or legal guardian; applications sent directly by a child under 14 are not accepted.

Send privacy questions or rights requests to contact@commonsourcelab.com. We may ask for the minimum additional information needed to verify your identity.

We may update this policy when laws, services, or processing practices change. Material updates will be announced on this website or in the relevant app, and the effective date above will be revised.