Legal
Privacy Policy.
Last Updated: July 26, 2026
Welcome to EDUS Online Tuition. This Privacy Policy explains how we collect, use, maintain, and disclose information gathered from students, parents, teachers, and administrators (collectively referred to as “Users”) when they interact with our website (https://edustutor.com), mobile applications for iOS and Android (“App”), and online learning services conducted via Google Meet and Google Classroom (“Services”).
By using our Site, App, or Services, you consent to the data practices described in this policy.
1. Contact Information
- Organization: EDUS Lanka (PVT) Ltd.
- Registration Number: PV 00232840
- Registered Address: No. 95, K.K.S Road, Jaffna, Sri Lanka.
- Contact Number: +94 70 707 2072
- Data Protection Officer Email: hello@edustutor.com
For any privacy-related inquiries, contact our Data Protection Officer (DPO).
2. Data We Collect
We collect and process data necessary for enrollment, participation, and management of our online tuition services. This includes:
a) Contact & Identity Information
- Name (required for enrollment and account creation)
- Email Address (used for login, authentication, and communication)
- Phone Number (used for login, security, and communication)
- Date of Birth (used to confirm the student’s grade level and age-appropriate access)
- Physical Address (optional, used for personalised services)
- Other Contact Information (for verification between students, parents, and teachers)
b) User Content
- Photos & Videos (used for submitting assignments, homework, and projects)
- Files & Documents (assignments, homework, and study materials you upload)
- Chat Messages (messages sent within class groups and to tutors or coordinators for academic support)
- Voice Recordings (audio you submit for spoken assignments, or captured within a recorded live class)
c) Payment Information
- Payment & Transaction Records (invoices, amounts, dates, and payment status). Card details are entered directly with our payment provider PayHere and are never stored by EDUS.
d) Technical Data
- IP Address (for security, fraud detection, and analytics)
- Device Information (for performance optimisation)
- Crash & Diagnostic Data (to detect and fix app errors)
- Cookies & Tracking Technologies (for improving user experience and analytics)
e) Educational Data
- Course enrolments, assignments, and assessments (to track student progress)
3. How We Use Your Data
We process data strictly for educational and operational purposes, including:
- Account Management & Authentication (login, security, and support)
- Educational Services (managing student progress, submissions, and communication)
- Service Optimisation (enhancing app functionality and security)
- Legal Compliance (meeting regulatory requirements and fraud prevention)
We do not sell or use personal data for advertising purposes.
4. Data Sharing & Third Parties
We do not sell your personal data. We share data only with the service providers we need to run the platform:
| Provider | Purpose | Data shared |
|---|---|---|
| Google (Classroom, Meet) | Delivering live classes | Name, email, class participation |
| PayHere (Sri Lanka) | Processing tuition payments | Payment and transaction details. Card details are entered directly with PayHere and are never stored by EDUS. |
| Amazon Web Services | Cloud hosting and file storage | All service data, stored in the United States |
| Firebase Cloud Messaging (Google) | Push notifications | Device notification token |
| Amazon SES | Sending service emails | Email address and delivery status |
These providers act as our processors. They may only use the data to provide their service to us, and are bound by contract to protect it to the same standard we do. We also disclose data where required by law.
International transfer. Our cloud infrastructure is located in the United States. Using the service involves transferring your data outside Sri Lanka.
5. Data Security & Retention
We use industry-standard security measures to protect user data from unauthorised access, theft, or misuse.
Security Measures
- Encrypted storage of sensitive data
- Secure authentication protocols
- Regular security audits
Data Retention and Deletion
When an account is deleted, access ends immediately and personal profile data is removed from view within the platform. You can request account deletion at any time by submitting our online form at lms.edustutor.com/delete-request, by emailing hello@edustutor.com, or, in the app, through your account settings.
Some records are retained after deletion where the law requires it. In particular, financial records such as invoices, payments, and receipts are kept for the period required by Sri Lankan tax and accounting law, and a minimal record of academic history may be retained to meet our record keeping obligations. These records are held securely, are no longer shown in your active account, and are used only for legal, tax, and audit purposes.
You can ask us at any time what data we still hold about you, and we will delete anything we are not legally required to keep.
6. User Rights (GDPR & Privacy Compliance)
Users have the following rights under GDPR and applicable App Store Privacy Guidelines:
- Right to Access: request a copy of your personal data.
- Right to Rectification: correct inaccurate or outdated data.
- Right to Deletion: request data or account removal, including through our deletion form at lms.edustutor.com/delete-request.
- Right to Restrict Processing: limit how we use your data.
- Right to Data Portability: transfer your data to another service.
To exercise any of these rights, contact our Data Protection Officer.
7. Cookies & Tracking Technologies
We use cookies and similar technologies to:
- Enhance user experience
- Improve app performance
- Analyse service usage
Users can control cookies through their browser settings.
8. Children’s Privacy & Parental Controls
EDUS is an education service used by school students, including children under the age of 13. Protecting them is a core responsibility, and we design the platform to be safe for young learners.
Parental consent and supervision
- Accounts for students under 18 are created and managed under the consent and supervision of a parent or guardian.
- Parents and guardians can review their child’s information, request corrections, and request deletion of the account at any time.
- We collect only the information needed to deliver classes and track academic progress. We do not ask children for information we do not need.
How we keep the experience safe for children
- No open messaging between students. Students cannot send private, one-to-one messages to other students. Communication happens within supervised class groups and with tutors and coordinators for academic support only. Because there is no private student-to-student messaging, there is no unmoderated channel a child could be contacted through.
- Live classes are conducted on approved platforms (Google Meet, Google Classroom) and may be recorded for quality assurance and safeguarding.
- All tutors accept EDUS child-safety standards and are expected to keep communication professional and age-appropriate at all times.
- Anyone can report a concern about a child’s safety or about inappropriate behaviour or content through our Safeguarding Policy, and we act on reports promptly.
No advertising or profiling of children
- We do not show third-party advertising to children.
- We do not use children’s data to build advertising or marketing profiles, and we do not sell it.
If you believe a child has provided us information without the appropriate parental consent, contact us at hello@edustutor.com and we will remove it.
9. App Store & Play Store Privacy Compliance
Per Apple’s App Store Connect and Google’s Play Store Data Safety requirements, we collect and use the following data:
Data Linked to You
- Contact Info (name, email, phone, address): used for app functionality and account management.
- User Content (photos, videos): used for submitting assignments and homework.
Data Not Linked to You
- Diagnostics: crash and error reports are collected to keep the app stable. This data is used only to detect and fix technical problems and is not used to track you.
The EDUS mobile app does not include a third-party advertising or behavioural-analytics SDK. We do not use your data to build advertising profiles or to track you across other apps or websites.
10. Updates to This Policy
We may update this Privacy Policy to reflect changes in data practices, legal requirements, or app functionality.
- Updates will be announced on our website and app.
- Continued use of our services after updates implies acceptance.
11. Contact Us
For any privacy-related questions or concerns, contact us:
- Email: hello@edustutor.com
- Phone: +94 70 707 2072
© 2026 EDUS Lanka (PVT) Ltd. All Rights Reserved.
