Privacy Policy

This Privacy Policy explains what information PhysElo collects, how we use it, and who we share it with. PhysElo is operated by Junlajak Jongpipattanakul, an individual developer based in Thailand, who is the data controller for the information described here.

• Account information: when you sign in with Google, we receive your name, email address, and profile picture via Supabase Auth.
• Usage data: the problems you attempt, the answers you submit, your scores, and your mock exam attempts and results.
• Purchase records: which products you bought and when. We do not collect or store your card number or other payment card details — Paddle (see below) handles your payment directly, and PhysElo never sees that information.
• Support requests: anything you tell us when you contact us, e.g. via our contact form.

• To run your account and save your progress
• To grant access to mock exams you’ve purchased, and enforce that access
• To send you transactional emails — e.g. purchase receipts and account notices — via Resend
• To fix bugs, keep the Service secure, and improve the problem bank and mock exams
• To respond to support requests

We don’t use your data for advertising, and we don’t sell it.

We use a small number of service providers to run PhysElo, and share only what each one needs to do its job:

• Supabase — hosts our database and handles sign-in (authentication). Stores your account and usage data.
• Paddle — our payment provider and Merchant of Record for every purchase. Paddle collects and processes your payment details directly; we never see your card information. Paddle handles billing, tax, and receipts. See Paddle’s own privacy policy at paddle.com.
• Resend — sends transactional emails on our behalf (e.g. receipts, account notices). Receives your email address and the content of those emails.
• Vercel — hosts the PhysElo website and application, and processes standard technical/server logs (e.g. IP address, request logs) as part of serving the site.

We don’t use any analytics, advertising, or tracking services beyond what’s listed above.

We use one essential cookie, set by Supabase, to keep you signed in. We don’t use advertising or analytics cookies.

We keep your account and usage data for as long as your account is active. If you delete your account, we’ll delete or anonymize your personal data within a reasonable period, except where we need to keep records for legal, tax, or dispute purposes — for example, purchase records.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to certain uses of it. To exercise any of these, contact us (below) and we’ll respond as required by applicable law.

We take reasonable technical and organizational measures to protect your data, including relying on Supabase’s and Vercel’s infrastructure-level security. No system is perfectly secure, and we can’t guarantee absolute security.

PhysElo is aimed at high-school-age students preparing for physics olympiads, so we expect many of our users to be minors. You need to be at least 13 years old to create an account. Some countries in the European Economic Area set a higher age — up to 16 — at which you can consent to your own data being processed; if you’re under that age where you live, please get a parent or guardian’s permission first. We don’t knowingly collect personal information from children under 13, and if we learn we have, we’ll delete it.

If you’re under 18, please make sure a parent or guardian is happy for you to use PhysElo and to make any purchase. We don’t ask for anything beyond what Google sign-in provides, and we don’t collect more than we need to run the Service. If you’re a parent or guardian and you want your child’s account or data removed, contact us and we’ll take care of it.

PhysElo is based in Thailand, and our service providers (Supabase, Paddle, Resend, Vercel) may process and store data in other countries. By using the Service, you understand your data may be transferred internationally.

We may update this Privacy Policy as the Service changes. We’ll update the “Last updated” date above when we do.

Questions about this policy, or want to exercise a data right? Email us at support@physelo.com or use our contact form.