Privacy Policy

We collect information you provide directly to us when you register, use our services, or communicate with us. This includes:

• Account information — name, email address, password, and profile photo.
• Educational profile — educational level, university, college, academic year, and grade level.
• Contact details — phone number and parent/guardian contact information (for minors).
• Device information — device token used to deliver push notifications.
• Usage data — courses enrolled, session watch progress, exam attempts, and ratings.

We use the information we collect to:

• Create and manage your account and provide access to courses.
• Process course subscriptions and validate access codes.
• Track learning progress, exam scores, and course completion.
• Send you push notifications, system alerts, and service-related communications.
• Personalize your experience and recommend relevant content.
• Improve platform performance, fix bugs, and develop new features.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell, trade, or rent your personal information. We may share it only in the following circumstances:

• Service providers — trusted third-party vendors (e.g., push notification services, cloud hosting) who process data on our behalf under strict confidentiality agreements.
• Social login providers — when you choose to sign in via Facebook or Google, those providers share limited profile data with us per their own privacy policies.
• Legal requirements — when required by law, court order, or governmental authority.
• Business transfers — in the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction.

We retain your personal data for as long as your account remains active or as needed to provide you with our services. If you request account deletion, we will delete or anonymize your personal information within 30 days, unless we are required to retain it for legal or regulatory reasons.

Aggregated and anonymized data (e.g., usage statistics) may be retained indefinitely for analytical purposes.

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encrypted data transmission over HTTPS/TLS.
• Bcrypt hashing for all stored passwords.
• JWT tokens with configurable expiry for API authentication.
• Role-based access controls limiting data access to authorized personnel only.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests or direct marketing.
• Restriction — request that we limit how we process your data in certain circumstances.

To exercise any of these rights, please contact us using the details in Section 9.

Our platform is designed to serve students of all ages, including minors. We collect a parent or guardian's mobile number as part of the student registration process solely to facilitate course access and emergency contact.

We do not knowingly collect data from children under the age of 13 without verifiable parental consent. If you believe we have inadvertently collected such data, please contact us immediately and we will promptly delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Send an in-app notification or push notification to registered users.

Your continued use of the platform after the effective date of the revised policy constitutes your acceptance of the changes.