Privacy policy

[your name or registered business name], of [your address], decides what is collected here and why. Contact: [your phone].

• To create an account: mobile number, name, and optionally school, district and preferred medium.
• To keep the class paid-for: a coarse device fingerprint (a hash, never the raw details) so one account cannot be used on unlimited phones.
• From the classes themselves: attendance, quiz and mock-exam answers, scores, XP and streaks.
• To take payment: the amount, date, method and reference of each payment, and — if you pay by deposit — the photograph of the slip you upload.

We never see your card number. Card details are entered on PayHere's own payment page and never reach this platform.

To let you in to the classes you have paid for, to teach and mark you, to tell you when a class is starting, to keep proper payment records as tax law requires, and to stop paid material being shared with people who have not paid.

We do not sell your data, and we do not run advertising on this platform.

• Google Firebase — sign-in, database and hosting.
• PayHere — card payments (a licensed Sri Lankan payment gateway).
• Zoom — the live class itself.
• Cloudflare R2 — storage for notes, papers and recordings.

Each of these is used only to run the service, under their own terms. Some of them store data outside Sri Lanka.

If you are under 18, a parent or guardian should agree to this policy with you. A parent may ask to see what we hold about their child, to have it corrected, or to have the account closed, by contacting us on the number above. We may ask them to confirm their identity first — otherwise anyone could ask for a child's records.

Parents can also be given a read-only link showing their child's attendance and progress. That link is issued by the student from their own account.

Account and progress data for as long as the account exists, and for a year afterwards in case it is reopened. Payment records are kept for at least six years, because tax and accounting rules require it — that means a closed account still leaves its receipts behind, including any deposit slip uploaded as proof of payment.

You may ask what we hold about you, ask us to correct it, ask us to delete what we are not required to keep, and object to a particular use. Write to the contact above and we will answer within 30 days. Sri Lanka's Personal Data Protection Act No. 9 of 2022 gives you these rights and a route to complain to the Data Protection Authority if we get it wrong.

Sign-in is by one-time SMS code — there is no password to leak. Access to paid material is checked on the server on every request. Payment approvals and anything that grants access can only be written by our server, never by a browser. Nothing is perfectly secure, but nothing here is left to the honesty of the person's own device either.

One cookie: the session that keeps you signed in for five days. No advertising or third-party tracking cookies are set by this site.