Data Security & Privacy Policy

We respect your personal privacy and are committed to a transparent relationship with our users. This policy outlines our data practices so that you can make informed decisions about your personal information. We process your data only for lawful purposes and only to the extent necessary to provide our services.

The legal bases on which we process your personal data include: (a) your consent, where explicitly given; (b) performance of a contract to which you are party; (c) compliance with a legal obligation applicable to us under Bangladeshi law; and (d) our legitimate interests in operating and improving the Platform, where these do not override your rights.

We collect different categories of data at different stages of your interaction with the Platform. We apply the principle of data minimisation — nothing beyond what is necessary for each specific purpose is collected at any given stage.

2a. Data Collected at Registration

The following information is required during the account creation process. This data is essential both to establish your account securely and to personalise your learning experience from the moment you sign up:

• Full Name — to identify your account and personalise your in-platform experience.
• Mobile Number — used as your primary login credential and for account verification via OTP.
• Password — stored in hashed, non-reversible form. We never store your plain-text password.
• Current Class / Grade — to align content, question banks, and performance benchmarks with your academic level from the outset.
• Educational Institution — to customize platform resources and recommendations relevant to your school or college.
• Academic Version — (e.g., Bangla Medium or English Medium) to serve the correct syllabus and study materials.
• Academic Group / Department — (e.g., Science, Arts, or Commerce) to filter and surface subject-specific content relevant to your curriculum.

2b. Optional Profile Settings Data

The following data may be provided voluntarily within your Account Settings after registration. None of it is required to use the core Platform, and you may add, update, or remove it at any time:

• Target Public Examination Year — to personalise your preparation timeline and countdown features.
• Date of Birth — optional profile enrichment.
• Gender Identity — optional profile enrichment.
• Personal Biography (Bio) — optional profile enrichment.
• Profile Picture — optional profile enrichment.

2c. Data Collected at Point of Purchase or Physical Delivery

The following data is collected only when you initiate a purchase or request the physical delivery of a product (such as printed books or learning kits). It is not collected during registration or stored in your general profile unless you explicitly choose to save it:

• Guardian / Parental Details — including guardian name, relationship to the student, and contact mobile number. Collected to support student safety and facilitate parental awareness where the purchaser or recipient is a minor. Guardians whose data is provided are deemed to have consented to its use for this limited purpose.
• Shipping Address — including recipient name, primary and alternative contact numbers, district, thana, post code, road/floor/holding details, and full current address. Collected solely to fulfil physical delivery and is not used for any other purpose.

When you use the Platform, the following data is collected automatically to ensure functionality, security, and a personalised experience:

• Session Management: We use cookies and session tokens to keep you securely logged in across sessions. Please refer to Section 4 for full details of our Cookie Policy.
• Performance and Progress Tracking: We record your quiz answers, model test scores, time spent per question, and overall academic progress. This data powers your performance reports, analytics dashboard, and personalised recommendations.
• Device and Technical Information: We automatically collect your IP address, browser type, operating system, and unique device identifiers. This data is used to optimise the Platform layout, detect unauthorised multi-device use, and maintain platform security.
• Usage Patterns and Analytics: We track navigation patterns — such as the features you visit most frequently — to identify bugs and improve the overall user experience.
• Personalisation Data: Study goal preferences and subject selections you set on your dashboard are used to surface relevant question banks and highlight target areas in your preparation plan.

We use the following categories of cookies on the Platform:

• Essential / Strictly Necessary Cookies — required for login sessions and core Platform functionality. These cannot be disabled without breaking core features of the Platform.
• Functional Cookies — used to remember your preferences, such as language settings and subject filters, to personalise your experience across sessions.
• Analytics / Performance Cookies — collect aggregated, anonymised data about how users navigate the Platform. Used for bug detection and user experience improvement.

By continuing to use the Platform, you consent to our use of Essential cookies. You may manage or disable Functional and Analytics cookies through your browser or device settings.

Data we collect is used strictly for the following purposes:

• Delivering, maintaining, and improving our study materials, performance reports, and Platform features.
• Personalising your dashboard, question recommendations, and academic preparation progress tracking.
• Verifying transactions and activating premium digital content securely.
• Communicating important updates, system alerts, educational content, or support responses to your registered mobile number.
• Detecting and preventing fraudulent, unauthorised, or abusive use of the Platform.
• Fulfilling legal and regulatory obligations applicable to us under Bangladeshi law.

Your personal data is never sold, rented, or traded to third parties for marketing or commercial purposes. Disclosure occurs only in the following specific circumstances:

SMS and Notification Service Providers: We share your registered mobile number with REVE SMS solely to deliver OTPs, system alerts, and educational notifications on our behalf.

Hosting and Infrastructure Providers: Our Platform is hosted on infrastructure provided by DigitalOcean. Access to your data by infrastructure providers is limited to what is technically necessary and is governed by data processing agreements.

Legal Requirements: We may disclose your information if required to do so by the laws of Bangladesh, or in response to a valid and lawful request by a competent public authority, court, or law enforcement agency, to the extent required and permitted by applicable law.

Praxix Academy primarily stores and processes your data on servers located within Bangladesh. Where any data is transferred to or processed by a service provider located outside Bangladesh — for example, DigitalOcean, a cloud hosting provider located in Colorado, United States — we ensure that such transfers are conducted under appropriate contractual safeguards, including data processing agreements that require the recipient to protect your data to a standard equivalent to applicable Bangladeshi law.

We implement the following technical and organisational measures to protect your data from unauthorised access, alteration, disclosure, or destruction:

• All communication between your device and our servers is encrypted using TLS (Transport Layer Security).
• Passwords are stored using a one-way cryptographic hash and are never retained in plain text.
• Access to personal data within our organisation is restricted on a strict need-to-know basis.
• We conduct periodic security reviews of our systems and infrastructure.

While we strive for the highest security standards, no method of internet transmission or electronic storage is 100% secure. We encourage you to use a strong, unique password and to notify us immediately at praxix.academy@gmail.com if you suspect any unauthorised access to your account.

Data Breach Notification: In the event of a personal data breach that is likely to result in a risk to your rights or interests, we will notify affected users within 72 hours of becoming aware of the breach, via your registered mobile number or email address, and will report to the relevant Bangladeshi authority as required by applicable law.

As a user of our Platform, you have the following rights in relation to your personal data:

• Right of Access — you may request a copy of the personal data we hold about you.
• Right to Rectification — you may request correction of inaccurate or incomplete data. Most profile data can be updated directly within your Account Settings.
• Right to Erasure — you may request deletion of your account and associated personal data, subject to our statutory retention obligations described in Section 10.
• Right to Object — you may object to processing based on our legitimate interest, including non-essential analytics tracking.
• Right to Restriction — you may request that we limit how we use your data in certain circumstances.
• Right to Data Portability — you may request a copy of your data in a structured, machine-readable format.

To exercise any of the above rights, please contact our Privacy Team at praxix.academy@gmail.com. We will respond within 30 business days of receiving your verified request.

We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account credentials and profile data — retained for the duration of your active account, plus a 15-day grace period following account deletion.
• Performance and progress records — retained for the duration of your active account, plus 15 days following deletion.
• Shipping address data — deleted upon successful delivery confirmation, unless you have explicitly saved it to your account.
• Server and access logs — retained for 90 days.
• Cookie and analytics data — retained for 13 months from the date of collection.

After the relevant retention period has elapsed, data is securely deleted or irreversibly anonymised. Please note that certain data — particularly transaction and payment records — may be required by law to be retained for a specified period notwithstanding any account deletion request.

Inactive Accounts: Accounts that have not been accessed for 1 year will be considered inactive. We will notify you via your registered mobile number before taking any action. After a further 30-day notice period with no response, the account may be permanently deleted in accordance with this Policy.

You may delete your account at any time via the “Delete Account” option in your Account Settings. The following process applies:

• Instant Deletion: upon initiating deletion, your account and all associated personal data (subject to the statutory retention exceptions in Section 10) will be immediately and permanently removed from our active systems.
• Irrevocable Action: this process is entirely irreversible. Once initiated, your data cannot be recovered, and logging back in will not restore your full profile, history, or active subscriptions.

The Platform is rated 3+ and is intended for users aged 3 and above. Users under the age of 18 are considered minors under Bangladeshi law. The following additional safeguards apply to the collection and handling of minors’ data:

• Minors must have verifiable parental or guardian consent before registering for an account or making any purchase on the Platform.
• Parents and guardians are encouraged to supervise the registration process and to review any optional profile information provided by a minor in Account Settings.
• If we become aware that a minor has provided personal data without appropriate parental or guardian consent, we will promptly delete that data. To report such a concern, please contact praxix.academy@gmail.com.
• We do not knowingly use a minor's data for profiling, targeted advertising, or any purpose beyond delivering the educational service.

Praxix Academy reserves the right to amend this Policy at any time. Where changes are material, we will provide at least 14 days prior notice via your registered mobile number or through a prominent notice on the Platform. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.