Privacy Policy

[PLACEHOLDER: Working draft prepared for review by a Bangladeshi lawyer before public launch.]

The short version

We collect what we need to run a learning platform — who you are, what you bought, and how you study — and nothing more. We don’t sell your data. We don’t run third-party advertising.

What we collect

Account data. Phone number and/or email, your name, and a password hash if you use email login. Phone verification codes are handled by our authentication provider and are never stored by us in readable form.

Purchase data. What you bought, when, the amount, and a transaction reference from the payment gateway. We never receive or store card numbers, CVVs, or bKash PINs — those go directly to SSLCommerz or bKash.

Learning data. We record how you study — videos watched, where you pause or rewatch, quiz answers (including which option you chose), and similar activity — to personalise your learning and improve our teaching. It powers features like “continue where you left off” today and tailored practice over time. This data is tied to your account and never sold, and it is deleted when you delete your account.

Technical data. Standard logs (IP address, browser type, pages visited), error reports, and product analytics events. Where possible these are pseudonymised.

What we use it for

To provide the service you paid for; to send transactional messages (verification codes, receipts, enrollment confirmations, exam reminders); to calculate teacher royalties on an aggregated basis; to fix bugs; and to understand which parts of the product work so we can improve it.

We do not send marketing messages without consent, and every marketing email includes an unsubscribe link.

Who we share it with

Service providers who process data on our behalf, under contract:

• Supabase (database and authentication hosting)
• Vercel (application hosting)
• Cloudflare (content delivery and video streaming)
• SSLCommerz and bKash (payment processing)
• Twilio and SSL Wireless (SMS delivery)
• Resend (email delivery)
• Sentry (error monitoring) and PostHog (product analytics) — both configured to scrub sensitive fields such as verification codes and to mask phone numbers

We also disclose data where required by Bangladeshi law or a valid legal order. We do not sell personal data to anyone.

Watermarking

Course videos and PDFs you view are marked with your account identifier. This is a piracy deterrent, not tracking of your behaviour beyond the platform.

Cookies

We use strictly necessary cookies for login sessions, and analytics cookies to understand product usage. We don’t use advertising cookies.

Retention

Account and purchase records are kept for as long as your account exists and as required by Bangladeshi tax and commercial record-keeping rules thereafter. Learning data is deleted or anonymised when your account is deleted.

Your choices

You can view and update your profile in Account settings. You can request a copy of your data, or deletion of your account and associated personal data, by emailing support@eudikalearn.com from your registered email or phone. We respond within 30 days. Some records (for example, payment records) must be retained for the period required by law even after account deletion.

Children

Our courses are designed for O Level students, many of whom are under 18. We collect the minimum data needed and expect purchases by minors to be made or authorised by a parent or guardian. Parents can contact us about their child’s data at any time.

Changes

If we materially change this policy we’ll notify you by email or in-product notice before the change takes effect.

Contact

support@eudikalearn.com
[PLACEHOLDER: registered office address]