Privacy Policy

1. Who We Are

Plus2 is operated by Plustwo Technologies Pvt. Ltd., a private limited company registered in Nepal ("Plus2," "we," "us," or "our"). Plus2 is an AI-powered guidance platform that helps Nepali students explore their educational pathways across school, +2, undergraduate, and graduate levels — including stream selection, career planning, college and university discovery, and application support.

This Privacy Policy explains, in plain language, what information we collect, how we use it, who we share it with, and the rights and choices you have. We have written this Policy with younger users in mind because many of our users are between 13 and 17 years old.

2. Who This Policy Covers

This Policy applies to every person who:

• Creates a Plus2 account or uses the Plus2 app
• Visits Plus2's website or contacts us through email or social channels
• Receives services from Plus2 (including paid services such as entrance preparation, statement-of-purpose support, application support, and guidance letters)

3. Information We Collect

3.1 Information You Provide Directly

• Account information: name, email address, password (stored only as an encrypted hash), and phone number (optional, used for verification)
• Profile information: current education level (school, +2, bachelor, master), academic stream, graduation year, location (district / city), and goals
• Quiz and roadmap inputs: your responses to interest, aptitude, and goal-setting questions used to generate your personalized roadmap
• Saved content: colleges, programs, or scholarships you shortlist or save
• Paid service information: if you purchase a Plus2 paid service, we collect the information needed to deliver that service (for example, your draft SOP, target programs, application timeline)
• Communications: messages, feedback, reviews, or support requests you send us

3.2 Information We Generate For You

Based on your inputs, our system generates a personalized AI guidance roadmap that includes recommended career paths, salary ranges, recommended education pathways, suggested colleges or programs, and step-by-step next actions. This roadmap is stored against your account so you can return to it later and revise it as your goals evolve.

3.3 Information Collected Automatically

To keep Plus2 working reliably and to improve the product, we automatically collect limited technical and usage information:

• Device type, operating system, app version, and device language
• Anonymized usage data — which screens you visit, which features you use, session duration
• Crash reports and error logs (so we can fix bugs)
• General location at the country, district, or city level (we do not collect precise GPS location)
• IP address and basic network information for security and fraud prevention

3.4 Information We Do Not Collect

Plus2 does not collect: precise GPS location, your contacts list, photos library, microphone input, camera input, or any biometric data. We do not request these device permissions.

4. How We Use Your Information

We use the information we collect for the following purposes, and nothing else:

• To provide the Plus2 service — generating your AI roadmap, matching you with suitable colleges and programs, and saving your shortlist
• To personalize your experience — tailoring recommendations based on your interests, location, education level, and goals
• To deliver paid services you have purchased (entrance preparation, SOP support, guidance letters, application support)
• To communicate with you — about your account, important updates, features you have asked to be notified about, and educational content relevant to your goals
• To improve Plus2 — fixing bugs, understanding which features help students most, and developing new features
• To prevent fraud and abuse — detecting fake accounts, scraping, and misuse of the service
• To comply with applicable laws in Nepal, including the Individual Privacy Act, 2075 (2018) and the Electronic Transactions Act, 2063 (2008), and other applicable regulations

5. How College Recommendations Work

Plus2's AI roadmap and recommendations are based first and foremost on fit — your goals, education level, stream, location, budget, and interests. We do not recommend colleges that do not fit your needs.

Plus2 has commercial relationships with some colleges and programs ("Partner Colleges") who pay us for visibility within Plus2. Here is exactly how this works:

• Fit always comes first. If a Partner College does not fit your needs (wrong location, wrong stream, wrong level, outside your stated preferences), we will not show it to you.
• Among colleges that genuinely fit you, Partner Colleges may appear earlier in the list or be highlighted with a "Partner" or "Sponsored" label.
• Geography is non-negotiable. If you search for colleges in a specific district, we will not substitute distant Partner Colleges in place of relevant local options.
• You will always be told. Wherever a Partner College is shown to you, it will be visibly labeled so you can identify it.
• Non-Partner colleges are never hidden. Our college directory shows all colleges in our database regardless of whether they pay us anything.

This model lets Plus2 keep the core student guidance free while staying honest about the commercial relationships that fund the service.

6. Our Firm Commitments to You

Plus2 is built on principles we take seriously:

• We do not sell your personal information to anyone — not now, not ever.
• We do not use your personal data to train external AI models. Your quiz answers and roadmap are used only to serve you.
• We do not share your information with parents, schools, colleges, or other third parties without your consent, except as required by law or as expressly described in this Policy.
• We do not push colleges that do not fit your needs simply because they pay us. Fit comes first.
• We do not currently show third-party advertising in the Plus2 app. If we introduce advertising in the future, we will update this Policy and notify you in advance, and we will not show personalized advertising to users under 18 based on personal data or in-app behavior.

7. Service Providers Who Help Us Operate

Plus2 uses a small set of trusted technology providers to operate the service. These providers process limited data on our behalf, under written contracts with confidentiality and data-protection terms:

• Supabase — secure storage of your account, profile, quiz responses, and roadmap
• Anthropic (Claude API) — to power the AI that generates your roadmap. Your inputs are sent solely to generate your roadmap and, per Anthropic's API terms, are not used to train Anthropic's models.
• Cloud hosting providers (such as Render and Google Cloud) — for application hosting and infrastructure
• Sentry — anonymized crash and error reporting
• Email and notification providers — for verification emails, password resets, and important account communications
• Payment processors — when you purchase a Plus2 paid service, payment information is processed by a licensed payment provider; Plus2 does not store full payment card details on its own servers

We share with these providers only the minimum data required for them to perform their function.

8. Children and Younger Users

Plus2 is intended for users aged 13 and above. Plus2 is not designed for, and we do not knowingly collect information from, children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

For users between 13 and 17 years old, who form a significant part of our user base:

• We collect only the information needed to operate the service
• We do not show personalized advertising (and currently show no advertising at all)
• We strongly recommend that users under 16 review this Privacy Policy with a parent or guardian before signing up
• If you are a parent or guardian and want to review, correct, or delete data about your child, contact us at privacy@plus2.ai and we will respond promptly

9. Your Rights and Choices

You are in control of your data on Plus2. At any time, you can:

• Access the personal information we hold about you
• Correct information that is inaccurate or out of date
• Delete your account and your associated personal data
• Export a copy of your data in a portable format
• Withdraw consent for any optional data use
• Object to any use of your information you find inappropriate
• Lodge a complaint with us, or with the relevant authority in Nepal, if you believe we have not handled your data properly

To exercise any of these rights, email privacy@plus2.ai. We aim to respond within 7 working days. We will not charge you for exercising your rights, and we will not penalize you in any way for doing so.

10. How We Protect Your Data

Security is built into Plus2 from the ground up:

• All data in transit between your device and our servers is encrypted with HTTPS / TLS
• Passwords are hashed (one-way encrypted) and never stored in readable form
• Authentication tokens are stored only in your device's secure storage (iOS Keychain / Android Keystore)
• Database access is restricted by role and audited
• Service-provider relationships are governed by data-processing agreements with confidentiality obligations
• We follow industry-standard security practices and review them regularly

No system is perfectly secure. If we ever experience a breach that affects your personal data, we will notify you and the relevant authorities promptly, in line with applicable Nepali law.

11. Data Retention

We keep your personal data only for as long as we need it:

• Active accounts: we retain your data while your account is active
• Account deletion: if you delete your account, we delete your personal data within 30 days, except where we are legally required to retain certain records (such as financial records related to paid services)
• Anonymized analytics: data that has been fully anonymized and cannot be linked back to you may be retained longer to help us understand product usage trends
• Legal hold: if we are legally required to retain data for ongoing legal proceedings, we will retain it only for the period required

12. International Data Transfers

Plus2 is operated from Nepal. Some of our service providers (such as Supabase, Anthropic, Render, and Google Cloud) operate servers outside Nepal, including in the United States, the European Union, and other regions. By using Plus2, you understand that your information may be transferred to and processed in these locations under contractual safeguards designed to protect your data to a comparable standard.

13. Cookies and Similar Technologies

The Plus2 mobile app uses limited local storage on your device (for example, to keep you signed in and remember your preferences). The Plus2 website, when offered, may use essential cookies for site functionality and anonymized analytics cookies to understand how the site is used. We do not use cross-site tracking cookies for advertising purposes.

14. Changes to This Privacy Policy

We may update this Privacy Policy as Plus2 evolves — for example, when we add new features, expand to new countries, or change service providers. When we do:

• We will update the "Last Updated" date and version number at the top of this Policy
• For material changes, we will notify you in the app, by email, or both, before the changes take effect
• For material changes that affect minors, we will provide at least 30 days' notice where reasonably possible
• Older versions of this Policy will remain accessible for reference

Your continued use of Plus2 after the changes take effect means you accept the updated Policy. If you do not agree with the changes, you can delete your account at any time.

15. Governing Law

This Privacy Policy is governed by the laws of Nepal, including the Individual Privacy Act, 2075 (2018), the Electronic Transactions Act, 2063 (2008), and other applicable regulations. Any disputes arising from this Policy will be subject to the exclusive jurisdiction of the courts of Nepal.

16. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or your data, we want to hear from you: