Privacy Policy

Introduction

Welcome to English With Anjana ("EWA", "we", "us", or "our"), accessible at englishwithanjana.com. Your privacy is important to us. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights regarding your data.

By using our website, registering an account, or using our services (including the Quiz Hub, TalkMate AI, and class recordings), you consent to the practices described in this policy.

1. Personal Data We Collect

1.1 Information You Provide

When you register for an account or use our services, we collect:

• Full name
• Email address
• Phone number (with country code)
• Password (stored securely as an irreversible hash)
• Date of birth
• Gender
• City and country
• Class type preference (e.g., Group Class, Individual Class, Kids Class, Diploma)

1.2 Information Collected Automatically

When you visit our website, we automatically collect:

• IP address — used for security, rate limiting, and approximate geolocation
• Browser type and device information (from your User-Agent string)
• Pages visited and timestamps
• Country of origin (determined from your IP address via a third-party geolocation service)

1.3 AI Chat Data (TalkMate)

When you use the EWA TalkMate AI chatbot, we collect and store:

• Your chat messages
• The AI's responses
• Your IP address and approximate location at the time of the conversation

1.4 Quiz and Learning Data

When you complete quizzes, we store your scores, answers, completion status, and certificates earned.

1.5 Payment Information

We record payment amounts, dates, and payment types as marked by our administrators. We do not collect or store credit card numbers, bank account details, or any direct financial credentials.

2. How We Use Your Data

• Account management — to create and manage your student account, verify your identity, and communicate with you
• Educational services — to deliver quizzes, track your progress, issue certificates, and provide AI-powered English tutoring
• Communication — to send you OTP codes, registration confirmations, payment receipts, and certificate notifications via email and WhatsApp
• Security — to prevent abuse, enforce rate limits, detect unauthorized access, and maintain audit logs
• Analytics — to understand how our website is used, which pages are popular, and to improve our services
• AI improvement — to monitor and refine the TalkMate AI's teaching patterns and linguistic accuracy

4. Cookies and Local Storage

Cookies

We set a single cookie on your browser:

• ewa_visitor_id — a randomly generated identifier used to track your visits and link your browsing activity to your account. This cookie expires after 30 days.

Local Storage

We use your browser's local storage to keep you logged in and store session preferences. This data stays on your device and is not transmitted to third parties.

5. Data Security

We take the security of your data seriously and implement the following measures:

• Passwords are hashed using bcrypt (industry standard, irreversible)
• Session tokens are hashed with SHA-256 before storage
• All API endpoints are protected by CORS restrictions and security headers
• Rate limiting with progressive cooldowns protects against brute-force attacks
• Admin actions are fully audit-logged with timestamps and IP addresses
• Sensitive files are blocked from public access
• All communications use TLS/HTTPS encryption in transit

6. Data Retention

• Student accounts — retained for as long as the account is active
• Session tokens — expire after 7 days
• OTP codes — expire after 30 minutes and are cleaned up within 24 hours
• Database backups — retained for 30 days, then automatically deleted
• Visit logs and analytics — retained for operational and security purposes
• Chat conversations — retained for service improvement and abuse prevention

7. Account Deletion

You may request deletion of your account by contacting us. When an account is deleted:

• Your account is initially soft-deleted (deactivated but recoverable for a limited period)
• Upon permanent deletion, all personal data including quiz records, certificates, payment records, and OTP codes are permanently removed
• Anonymized audit logs may be retained for security purposes

8. Your Rights

You have the right to:

• Access your personal data through your profile page
• Update your phone number, city, and password through your profile
• Request deletion of your account by contacting us
• Withdraw consent by ceasing to use our services

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of our services after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: registration@englishwithanjana.com

Website: englishwithanjana.com