Privacy Policy

1. What we collect

• Google account details when you sign in with Google: your name, email address and profile picture.
• What you tell us: questionnaire answers (such as your class, board and preferred language) and, if you share it, a WhatsApp number.
• Learning activity: lessons opened, practice answers, assessment results, mistakes, and the questions you ask your subject guide along with its replies.
• Payment information: the plan you chose, the amount, payment status, the receipt screenshot you upload, and the transaction ID and sender name shown in the payment notification our bank or wallet sends us. We never see or store your PIN, password or card number.
• Posts you send to the Boring Wall: your words, the first name, year and city you choose to show, and any link to your own social media post. They are public only after we approve them, and only if you tick the consent box.
• Basic usage data: pages visited, buttons used, the link or campaign that brought you here, and a random ID stored in your browser so we can count visits without knowing who you are.

2. Why we use it

• To create and secure your account.
• To personalise your learning: your language, your weak spots, and what to practise next.
• To track your progress and show it to you.
• To confirm your payment and open your plan.
• To improve our lessons, practice questions and tutor — for example, by finding explanations that confuse many students.
• To contact you about your account or payment (for example, a confirmation email).

3. Who processes it for us

We use a small number of service providers. They process data only to provide their service to us.

• Supabase — sign-in, database and file storage (including receipt screenshots).
• Google — “Sign in with Google”, and the email account where our bank and wallet send payment notifications and from which we send confirmation emails.
• A technology provider that runs our automated study guide. We send your question and the relevant lesson text, not your name or email.
• Payment providers — the bank or wallet you pay from, and the one that receives your payment (currently NayaPay and Meezan Bank). Their own privacy policies apply to the payment itself.
• Website hosting — the service that delivers these web pages to your browser.

4. We don't sell your data

We do not sell, rent or trade your personal information, and we don't show you third-party ads. We share data only with the providers above, or when the law requires it.

5. How long we keep it

• Account and learning data: while your account is open. When you ask us to delete your account, we delete it within 30 days.
• Payment records (amount, date, status, reference): kept for at least six years, the period Pakistani tax rules require for financial records, even after the account is deleted.
• Receipt screenshots: up to 12 months after the payment, then deleted.
• Usage data without your name: may be kept longer to understand how the site is used.

6. Your choices and deleting your data

You can ask to see, correct or delete your data at any time. Email kaleemullahkalyar@gmail.com from the email address you signed in with, and write “Delete my account” (or what you need). We reply within 7 days.

You can also sign out at any time, and you can remove our access from your Google account settings.

7. Younger students and parents

The Boring Education is made for school and college students, so many of our students are under 18. We encourage every student to show the site to a parent or guardian — especially before paying — and to learn with them in the loop. If you are under 13, a parent or guardian should set up and look after your account. Parents and guardians can contact us at any time to see or delete their child's data.

We collect only what we need, never ask for photos or school ID, and keep examples and tutor conversations respectful and age-appropriate.

8. Security

Your data is stored with access rules so that each student can see only their own records. Receipts are kept in private storage. No system is perfectly secure, so if we ever discover a breach that affects you, we will tell you.

9. Changes and contact

If we change this policy, we will update the date at the top and, for important changes, tell you by email or on the site. Questions? Email kaleemullahkalyar@gmail.com.