Privacy Policy.

Welcome to EDUS Online Tuition. This Privacy Policy explains how we collect, use, maintain, and disclose information gathered from students, parents, teachers, and administrators (collectively referred to as “Users”) when they interact with our website (https://edustutor.com), mobile applications for iOS and Android (“App”), and online learning services conducted via Google Meet and Google Classroom (“Services”).

By using our Site, App, or Services, you consent to the data practices described in this policy.

1. Contact Information

• Organization: EDUS Lanka (PVT) Ltd.
• Registration Number: PV 00232840
• Registered Address: No. 95, K.K.S Road, Jaffna, Sri Lanka.
• Contact Number: +94 70 707 2072
• Data Protection Officer Email: hello@edustutor.com

For any privacy-related inquiries, contact our Data Protection Officer (DPO).

2. Data We Collect

We collect and process data necessary for enrollment, participation, and management of our online tuition services. This includes:

a) Contact & Identity Information

• Name (required for enrollment and account creation)
• Email Address (used for login, authentication, and communication)
• Phone Number (used for login, security, and communication)
• Date of Birth (used to confirm the student’s grade level and age-appropriate access)
• Physical Address (optional, used for personalised services)
• Other Contact Information (for verification between students, parents, and teachers)

b) User Content

• Photos & Videos (used for submitting assignments, homework, and projects)
• Files & Documents (assignments, homework, and study materials you upload)
• Chat Messages (messages sent within class groups and to tutors or coordinators for academic support)
• Voice Recordings (audio you submit for spoken assignments, or captured within a recorded live class)

c) Payment Information

• Payment & Transaction Records (invoices, amounts, dates, and payment status). Card details are entered directly with our payment provider PayHere and are never stored by EDUS.

d) Technical Data

• IP Address (for security, fraud detection, and analytics)
• Device Information (for performance optimisation)
• Crash & Diagnostic Data (to detect and fix app errors)
• Cookies & Tracking Technologies (for improving user experience and analytics)

e) Educational Data

• Course enrolments, assignments, and assessments (to track student progress)

f) EDUS AI (study helper)

• Questions you type or speak, and the photos and PDF files you attach to them
• Pictures you ask EDUS AI to make, and the answers and pictures it gives back
• Your thumbs up or down on an answer, and usage details (when you used it, which helper answered, and the credits used)

3. How We Use Your Data

We process data strictly for educational and operational purposes, including:

• Account Management & Authentication (login, security, and support)
• Educational Services (managing student progress, submissions, and communication)
• EDUS AI (answering the questions you ask the study helper, see section 5)
• Service Optimisation (enhancing app functionality and security)
• Legal Compliance (meeting regulatory requirements and fraud prevention)

We do not sell or use personal data for advertising purposes.

4. Data Sharing & Third Parties

We do not sell your personal data. We share data only with the service providers we need to run the platform:

These providers act as our processors. They may only use the data to provide their service to us, and are bound by contract to protect it to the same standard we do. We also disclose data where required by law.

International transfer. Our cloud infrastructure is located in the United States. Using the service involves transferring your data outside Sri Lanka.

5. EDUS AI

EDUS AI is the optional study helper inside EDUS. Before anyone uses it for the first time, they read and accept its terms in the app, and they accept again whenever the terms change. To answer, EDUS AI sends what you ask to outside AI services: Groq, Cloudflare Workers AI and NVIDIA, listed in section 4.

What is sent

• Your question, and any photo or PDF you attach to it (a PDF is sent as its text).
• Your first name, role (student, tutor or staff), age, grade, medium, syllabus, and the names of your classes and their tutors, so the answer fits your level.
• Earlier messages from the same chat, some in shortened form, so the helper can follow the conversation.
• For a spoken question, the recording, which is turned into text. In the EDUS app, your phone’s own speech service (usually Google’s on Android, Apple’s on iPhone) listens first and may send your voice to that company to write it out; when your phone cannot, the recording comes to EDUS AI instead. On the website, in Tamil and Sinhala, your browser may use its own speech service (for example Google’s, in Chrome) instead.
• For a picture, a description of the picture you asked for.

What is never sent

• Your full name, your student, tutor or staff number, email address, phone number, home address, date of birth, or payment details.

How long it is kept

• Chats, attached photos and files, and pictures EDUS AI makes are deleted from EDUS after 30 days. You can delete a chat, or all your chats, at any time.
• Voice recordings are not stored by EDUS.
• Usage details (who used EDUS AI and when, which helper and AI model answered, and the credits used, never the chat text) are kept for 30 days so EDUS can run the service fairly.
• A record that you accepted the EDUS AI terms, and when, is kept while your account exists.

How the AI services use it

Each service processes what is sent to produce the answer, under its own terms, and may process it outside Sri Lanka, including in the United States. NVIDIA’s free trial terms allow NVIDIA to use what it receives to improve its services, which is one reason EDUS sends as little about you as possible. EDUS does not use your chats to train AI models or for advertising.

Only you can see your chats. EDUS staff can see usage details, but not what was asked or answered. Students under 18 use EDUS AI under the same parental supervision as the rest of EDUS, and EDUS can switch EDUS AI off at any time.

6. Data Security & Retention

We use industry-standard security measures to protect user data from unauthorised access, theft, or misuse.

Security Measures

• Encrypted storage of sensitive data
• Secure authentication protocols
• Regular security audits

Data Retention and Deletion

When an account is deleted, access ends immediately and personal profile data is removed from view within the platform. You can request account deletion at any time by submitting our online form at lms.edustutor.com/delete-request, by emailing hello@edustutor.com, or, in the app, through your account settings.

Some records are retained after deletion where the law requires it. In particular, financial records such as invoices, payments, and receipts are kept for the period required by Sri Lankan tax and accounting law, and a minimal record of academic history may be retained to meet our record keeping obligations. These records are held securely, are no longer shown in your active account, and are used only for legal, tax, and audit purposes.

You can ask us at any time what data we still hold about you, and we will delete anything we are not legally required to keep.

7. User Rights (GDPR & Privacy Compliance)

Users have the following rights under GDPR and applicable App Store Privacy Guidelines:

• Right to Access: request a copy of your personal data.
• Right to Rectification: correct inaccurate or outdated data.
• Right to Deletion: request data or account removal, including through our deletion form at lms.edustutor.com/delete-request.
• Right to Restrict Processing: limit how we use your data.
• Right to Data Portability: transfer your data to another service.

To exercise any of these rights, contact our Data Protection Officer.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Enhance user experience
• Improve app performance
• Analyse service usage

Users can control cookies through their browser settings.

9. Children’s Privacy & Parental Controls

EDUS is an education service used by school students, including children under the age of 13. Protecting them is a core responsibility, and we design the platform to be safe for young learners.

Parental consent and supervision

• Accounts for students under 18 are created and managed under the consent and supervision of a parent or guardian.
• Parents and guardians can review their child’s information, request corrections, and request deletion of the account at any time.
• We collect only the information needed to deliver classes and track academic progress. We do not ask children for information we do not need.

How we keep the experience safe for children

• No open messaging between students. Students cannot send private, one-to-one messages to other students. Communication happens within supervised class groups and with tutors and coordinators for academic support only. Because there is no private student-to-student messaging, there is no unmoderated channel a child could be contacted through.
• Live classes are conducted on approved platforms (Google Meet, Google Classroom) and may be recorded for quality assurance and safeguarding.
• All tutors accept EDUS child-safety standards and are expected to keep communication professional and age-appropriate at all times.
• Anyone can report a concern about a child’s safety or about inappropriate behaviour or content through our Safeguarding Policy, and we act on reports promptly.

No advertising or profiling of children

• We do not show third-party advertising to children.
• We do not use children’s data to build advertising or marketing profiles, and we do not sell it.

If you believe a child has provided us information without the appropriate parental consent, contact us at hello@edustutor.com and we will remove it.

10. App Store & Play Store Privacy Compliance

Per Apple’s App Store Connect and Google’s Play Store Data Safety requirements, we collect and use the following data:

Data Linked to You

• Contact Info (name, email, phone, address): used for app functionality and account management.
• User Content (photos, videos): used for submitting assignments and homework.
• User Content (EDUS AI questions, photos, files and voice): used to answer your questions, and shared with the AI services in section 5.

Data Not Linked to You

• Diagnostics: crash and error reports are collected to keep the app stable. This data is used only to detect and fix technical problems and is not used to track you.

The EDUS mobile app does not include a third-party advertising or behavioural-analytics SDK. We do not use your data to build advertising profiles or to track you across other apps or websites.

11. Updates to This Policy

We may update this Privacy Policy to reflect changes in data practices, legal requirements, or app functionality.

• Updates will be announced on our website and app.
• Continued use of our services after updates implies acceptance.

12. Contact Us

For any privacy-related questions or concerns, contact us:

• Email: hello@edustutor.com
• Phone: +94 70 707 2072

© 2026 EDUS Lanka (PVT) Ltd. All Rights Reserved.