Privacy Policy

This Privacy Policy describes how the TopikLab application (the “App”), developed by Maksim Butakov (“we”, “us”), collects, uses, and protects your personal data.

The App is available via web browser at web.topiklab.com and on Google Play.

1. What Data We Collect

Data You Provide

• Email address — for registration and login
• Password — stored in encrypted form (bcrypt), not accessible to staff
• Exam results — your answers, scores, and completion times
• Written works — texts you enter in the “Writing” section

Data from Google Sign-In

When using Google Sign-In, we receive your email address and name from your Google account. This data is used only to create and identify your account in the App. We do not access your contacts, files, or other Google data.

Automatically Collected Data

When using the App, our server automatically receives your IP address and browser/device type (User-Agent). This data is used exclusively to ensure the service’s functionality and security and is not shared with third parties.

Analytics Data

We use Firebase Analytics (a Google service) to collect anonymous usage statistics: screens viewed, features used, app version, and general device characteristics (platform, language). This data does not include your email, exam answers, or written work texts. On the web version, Firebase Analytics may set cookies. On Android, device identifiers are used.

2. How We Use Data

• Authentication — email and password (or Google account) are used for account login
• Functionality — exam results are saved to track your progress
• AI writing evaluation — texts from the “Writing” section are sent to OpenAI (GPT) for automated review and scoring. Only your answer text is transmitted, without email or other personal data

3. Third-Party Data Sharing

We do not sell or share your data with third parties, except:

• OpenAI — written work texts are transmitted via API for evaluation. OpenAI processes data in accordance with its privacy policy. Data sent via the API is not used by OpenAI to train models
• Google (Firebase Analytics) — anonymous usage statistics (screens viewed, in-app events, device type). Only anonymized data is transmitted, without email, answers, or written works. Google processes data in accordance with its privacy policy

4. Data Storage and Protection

• Data is stored on a secure server located in the Russian Federation
• All data is transmitted over encrypted connections (HTTPS / TLS 1.2+)
• Passwords are stored as hash values (bcrypt), not in plain text
• Database access is restricted by row-level security (RLS) policies
• Backups are created automatically and stored in encrypted form

5. Data Retention

• Account data (email, results, written works) — retained until you delete your account
• Texts sent to OpenAI — not retained by OpenAI after request processing (per OpenAI API terms)
• Server logs (IP address, User-Agent) — retained for no more than 30 days
• Analytics data (Firebase Analytics) — retained for up to 14 months in aggregated, anonymized form

6. Your Rights

You have the right to:

• Access — view your data (results, written works) in the App
• Deletion — delete your account and all associated data via “Settings” → “Delete Account”
• Correction — change your email address in account settings
• Data export — request an export of your data by writing to support@topiklab.com

7. Account Deletion

You can delete your account and all associated data at any time via “Settings” → “Delete Account” in the app. Upon deletion, the following are permanently removed:

• Your profile and email address
• All exam results
• All written works and their evaluations
• Block practice progress

Deletion is immediate and irreversible.

8. Cookies and Analytics

The App uses Firebase Analytics (a Google service) to collect anonymous usage statistics: screens viewed, features used, and general device characteristics. This data helps us improve the App and does not include your personal information (email, answers, written works).

On the web version, Firebase Analytics may set cookies for analytics purposes. No advertising SDKs are used.

9. Age Restrictions

The App is intended for users aged 13 and older. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with their data, please contact us — we will delete this information.

10. Changes to This Policy

We may update this policy. For significant changes, we will notify you by email or through a notification in the App. The current version is always available at info.topiklab.com/privacy. The last update date is indicated at the beginning of the document.

11. Contact

For privacy and data protection inquiries:

Maksim Butakov Email: support@topiklab.com