Privacy Policy

• Account details: your mobile phone number (used to sign in and verified with a one-time code), your password (stored only as a secure hash), and your email address.
• Student profile: your name, district, ZIP / postal code, college name and EIIN, HSC batch, study version, and at least one parent or guardian phone number.
• Learning activity: enrollments, lesson progress, exam and quiz attempts and results, assignment submissions and uploaded files, XP, coins, badges, and medals (certificates).
• Payments: the order, amount, payment method and transaction ID you provide for a manual bKash or similar payment. We do not see or store your wallet PIN or card details.
• Community and support: posts, comments, messages in live rooms, contact-form messages, and bug reports with any screenshots you attach.
• Technical data: a random device identifier, session information, IP address and browser details, used for security, abuse prevention and rate limiting. Exams may record integrity signals such as leaving the exam window.

• To create and secure your account and send sign-in and password-reset codes.
• To deliver missions, track progress, grade work and issue medals.
• To verify payments and grant access to paid missions.
• To contact you about your account, classes and results by SMS, email or notification, and to contact a parent or guardian where you have given their number.
• To keep the platform safe: detecting fraud, cheating, and abuse.
• To improve the product using aggregate usage information.

We do not sell your personal data and we do not show third-party advertising.

Your mentors can see your progress, results and submissions for the missions they teach. Administrators can see account and payment details needed to run the platform. Other students can see your name, level and XP on leaderboards and in community areas, but not your phone number or email.

We use providers to operate the platform, and they process data only for that purpose: hosting and database services; SMS delivery for one-time codes; email delivery; file storage (Google Drive and UploadThing) for uploads and certificates; YouTube and Google Docs/Drive for embedded lesson media; Stream for live-room chat; Telegram if you link your account to the Proggaa bot; and an AI provider when a mentor uses AI-assisted question generation.

We use a small number of cookies to keep you signed in and to protect your account. See our Cookie policy for the full list and how to change your choice.

We keep account and learning records while your account is active, and payment and medal records for as long as needed to verify them and meet accounting obligations. Sign-in sessions expire after 30 days. When you ask us to delete your account, we delete or anonymise your personal data, except records we must keep.

You can view and update your profile details from your profile page, and change your login phone number there after verifying the new one. You can ask us to correct or delete your data, or change your cookie choice at any time, through the contact page.

Many of our students are under 18. We ask for a parent or guardian phone number so we can reach them about the student's account. Parents and guardians can contact us to review or delete a child's data.

Passwords are hashed, sessions are stored server-side, uploads are served only to people allowed to see them, and access to admin tools is restricted by role. No system is perfectly secure; please tell us straight away if you suspect your account has been misused.

If we change this policy we will update the date above and, for significant changes, notify you in the app. Questions or requests can be sent through our contact page.