This policy explains what information the English Genius website and learning app collect, why, and how we protect it. Many of our users are children, so we collect as little as possible and never sell or share it for advertising. It follows the Personal Data Protection Act, No. 9 of 2022, of Sri Lanka.
1. What we collect
- Account details: the student’s name, username, grade, and the password we set when making the account (the password is stored only in scrambled, “hashed” form by our login provider). Parents’ or schools’ phone numbers and names when they contact us to join.
- Learning progress: lessons finished, game scores, stars, gems, Power Points, exam paper answers and marks, settings (such as language and theme) and the hero the student designed, so progress is the same on every device.
- Last seen: the time a student last used the app, so teachers can see who is active.
- Hero chat: messages a student types to their hero are sent to an AI service only to write the reply. We do not keep a copy of the conversation on our servers.
- Payments: the amount, date and the receipt you send us. We never ask for card numbers.
2. Microphone and camera
Speaking games use the microphone only while the student presses the speak button. Speech is turned into text by the student’s own web browser (in Google Chrome this uses Google’s speech service). The camera is used only to scan the QR code on a student ID card; the picture is read on the device and never saved or sent. We do not record or store audio or images. Both need the browser’s permission and can be switched off at any time.
3. Why we use it
To run the student’s lessons and games, save their progress, show progress to their parent or teacher, keep accounts secure, answer questions, and improve the service. We do not show adverts and we do not sell or rent personal information.
4. Who processes it
We use trusted providers to run the service: Google Firebase (login and database), Cloudflare (website hosting, security, privacy-friendly visit counts without cookies, and AI helpers for the hero chat, word meanings and voices; if we switch it on, the hero chat may instead use Anthropic’s Claude AI) Their servers may be outside Sri Lanka; they process data only to provide their service to us. Teachers and school staff we approve can see students’ names, grades and progress to manage their accounts.
5. Storage on the device
The app keeps the student signed in and saves progress in the browser’s local storage. The public website does not use advertising or tracking cookies.
6. How long we keep it
While the account is active. When an account ends, we delete its data within 12 months, or within 14 days if a parent, guardian or school asks.
7. Your rights
A parent, guardian or school (or an adult student) can ask to see the data we hold, correct it, delete it, or withdraw consent. Contact us below; we reply within 14 days.
8. Security
All connections use HTTPS. Database rules let each student read only their own records and the lessons they were given. Only English Genius and approved teachers can manage accounts.
9. Changes
If we change this policy we update the date below and, for important changes, tell parents and schools.
10. Contact
- Business: English Genius, Sri Lanka
- Email: w.v.k.kalhara@gmail.com
- Phone / WhatsApp: 072 399 3300