Your privacy is our priority

This Policy applies to all users of the Platform, including students, educators and visitors, and governs personal information collected through the Platform, our communications and our payment and service partners. This Policy is published in accordance with the Information Technology Act, 2000, the rules framed thereunder, and the Digital Personal Data Protection Act, 2023, and constitutes an electronic record; it does not require a physical or digital signature.

We collect the following categories of information when you register for, access or use the Platform:

• Identity & contact data — full name, email address, telephone number, profile photograph and account role (student or faculty).
• Academic & usage data — courses enrolled, lesson and video progress, assessment results, certificates earned, study-material downloads and interaction logs.
• Transaction data — order identifiers, invoice details, billing information, tax (GST) particulars and transaction history. Payment card and banking credentials are collected and processed directly by our authorised payment gateway partners; we do not store complete card numbers, CVV or banking passwords on our servers.
• Communications — messages exchanged through the Platform's in-app chat. Private conversations are protected with end-to-end encryption (AES-256); their content is not accessible to us in readable form.
• Technical data — device type, operating system, browser type, IP address, application version, crash logs and diagnostic information collected automatically for security and service reliability.

We process personal information for the following purposes:

• To create, verify and administer user accounts and provide the services you request.
• To process orders, payments, invoices and refunds, and to maintain statutory financial records.
• To personalise the learning experience, including progress restoration and course recommendations.
• To send transactional communications such as enrolment confirmations, payment receipts, course updates and service notifications.
• To monitor, audit and improve Platform performance, prevent fraud and abuse, and enforce our Terms & Conditions.
• To comply with applicable laws, regulations, legal processes and lawful requests from public authorities.

All payments on the Platform are processed through reputed, PCI-DSS compliant third-party payment gateways authorised by the Reserve Bank of India. When you make a payment, your card, UPI or banking details are transmitted directly to the payment gateway over encrypted channels and are governed by the payment gateway's own privacy policy and terms. We receive only limited transaction confirmation data (such as order reference, amount, status and masked payment identifiers) necessary to fulfil your order, issue invoices and handle refunds.

The Platform uses cookies and similar technologies to maintain secure sessions, remember preferences and analyse usage patterns. You may configure your browser to refuse cookies or to alert you when cookies are being placed; however, certain features of the Platform may not function correctly without them. We do not use cookies to collect sensitive personal data.

We do not sell, rent or trade personal information. We disclose information only in the following circumstances:

• Service providers — to hosting, cloud-infrastructure, payment-processing, communication and analytics partners engaged under written agreements that impose confidentiality and data-protection obligations.
• Educators & institutions — enrolment and progress data relating to a course is visible to the educator or institution offering that course, solely for academic administration.
• Legal & regulatory — where disclosure is required by law, court order or governmental authority, or where necessary to protect the rights, property or safety of Learninough, our users or the public.
• Business transfers — in connection with a merger, acquisition or restructuring, subject to this Policy continuing to apply to the transferred information.

We implement reasonable security practices and procedures as mandated under applicable law, including:

• Encryption of data in transit using TLS and encryption of sensitive data at rest.
• Client-side AES-256-GCM end-to-end encryption for private chat communications.
• Role-based access controls, authentication safeguards and periodic access reviews.
• Industry-standard infrastructure hardening, backup and incident-response procedures.

While we follow commercially reasonable standards to protect personal information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Personal information is retained for as long as your account remains active or as necessary to provide the services, and thereafter for such period as is required to comply with statutory obligations (including tax and accounting laws), resolve disputes and enforce agreements. Upon expiry of the applicable retention period, information is securely deleted or irreversibly anonymised.

Subject to applicable law, you have the right to:

• Access and obtain a copy of your personal information.
• Correct inaccurate or incomplete personal information.
• Request erasure of your personal information, subject to legal retention requirements.
• Withdraw consent to processing, where processing is based on consent (this may limit your ability to use the Platform).
• Opt out of promotional communications at any time.

Requests may be submitted in writing to the contact details set out below and will be addressed within the timelines prescribed by applicable law.

The Platform is intended for use by persons who are competent to contract under applicable law. Where a user is below 18 years of age, the Platform must be used only with the involvement and verifiable consent of a parent, legal guardian or educational institution. We do not knowingly collect personal information from minors without such consent, and we will delete any such information promptly upon becoming aware of it.

The Platform may contain links to third-party websites, applications or services (including payment gateways) that are not operated by us. We are not responsible for the privacy practices or content of such third parties, and we encourage you to review their privacy policies before providing any personal information.

We may revise this Privacy Policy from time to time to reflect changes in law, technology or our practices. The revised Policy will be published on this page with an updated “Last updated” date, and material changes will be notified through the Platform or by email. Your continued use of the Platform after such publication constitutes acceptance of the revised Policy.

In accordance with the Information Technology Act, 2000 and the rules made thereunder, any grievance or complaint regarding the processing of personal information may be addressed to our Grievance Officer:

• Entity: Learninough
• Address: Kozhikode, Kerala, India
• Email: learninough@gmail.com
• Phone: +91 99958 38964

Grievances will be acknowledged within 48 hours and resolved within the timelines prescribed under applicable law.