Privacy Policy

1. Information We Collect

When you use Riakoo, we collect the following information to provide and improve our service:

• Account data — name, email address, and profile photo obtained from Google OAuth.
• Exam data — questions, answers, and exam configurations created by exam administrators.
• Participant data — User ID/password credentials created by the exam administrator (passwords are stored as bcrypt hashes and never in plain text).
• Proctoring data — screenshots captured at configured intervals, GPS coordinates, tab-switch events, and copy-attempt events recorded during an active exam session.
• Usage data — browser type, IP address, and interaction logs for security and debugging purposes.

2. How We Use Your Information

We use collected data to:

• Authenticate users and maintain secure sessions.
• Deliver core exam-monitoring features (live dashboard, screenshots, incident log, PDF export).
• Process subscription payments via Lemon Squeezy.
• Improve product reliability and detect abuse or security threats.

3. Data Storage and Retention

All data is stored in Google Firebase (Firestore and Cloud Storage) hosted in Singapore or Jakarta regions. Screenshots are stored in Firebase Cloud Storage scoped to individual exam sessions.

Exam session data is retained for 90 days after the exam is closed, after which proctoring media (screenshots) is automatically deleted. Account and exam metadata can be deleted at any time from the dashboard.

4. Sharing of Information

We do not sell or share your personal data with third parties except as required to operate the service:

• Firebase / Google Cloud — infrastructure and authentication provider.
• Lemon Squeezy — payment processing. See their Privacy Policy.
• Vercel — hosting and edge delivery.

5. Proctoring Consent

Exam participants are explicitly informed before an exam begins that their camera, microphone (if applicable), GPS location, and on-screen activity will be monitored and recorded. Participants must grant browser permissions before the exam starts. By proceeding, participants consent to this monitoring.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at hello@riakoo.com. We will respond within 30 days.

7. Cookies

We use a single HTTP-only session cookie (__session) for authentication. No third-party tracking or advertising cookies are used.

8. Children's Privacy

Riakoo is not directed at children under 13. If you believe a child under 13 has submitted data without parental consent, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy periodically. We will notify registered users of material changes via email or an in-app notice at least 14 days before changes take effect.

10. Contact

Riakoo is operated by Maleo Labs. For privacy inquiries: hello@riakoo.com