Privacy Policy

1. Information We Collect

• Account data — name and email address (to create and identify your account).
• Profile data — language level, profile photo, and bio (to personalise your experience).
• Learning data — course enrollments, video completion records, quiz scores, XP, badges, and streaks (to track your progress and award achievements).
• Payment confirmation — for Myanmar bank/wallet payments we receive a screenshot of your transfer receipt. For international card payments processed by Paddle, we receive a transaction reference and subscription status only — your card details are handled entirely by Paddle and never reach our servers.
• Audio recordings — if you use the AI Speaking Practice feature, short audio clips are processed to provide pronunciation and fluency feedback. Recordings are not stored after analysis.
• Usage data — pages visited, features used, device type, and browser, collected via Google Analytics (anonymised).
• Push notification token — if you enable browser notifications, we store your push subscription endpoint to deliver course and streak reminders.

2. How We Use Your Information

• Deliver and improve the platform features you use.
• Track your learning progress, award XP, badges, and completion certificates.
• Send you relevant notifications — streak reminders, course updates, and lesson nudges.
• Process enrollment payments and verify subscription status.
• Detect abuse, fraud, and violations of our Terms of Service.
• Improve the platform using aggregate, anonymised analytics data.

We never sell your personal data to any third party.

3. Data Storage & Security

Your data is stored on cloud servers (AWS). We use industry-standard encryption for passwords (bcrypt) and HTTPS for all data in transit. Access tokens expire after 180 days. File uploads (profile photos, pay-slip screenshots) are stored in AWS S3 with private access controls.

4. Sharing Your Information

• Schools / educators — when you enroll in a course, the school can see your name and enrollment status so they can teach you. Schools cannot see your email address.
• Paddle — our payment processor for international card payments. Paddle acts as Merchant of Record. See Paddle's Privacy Policy.
• Google Analytics — anonymised usage data to understand platform performance. No personally identifiable information is shared.
• Firebase — used for Google sign-in. Firebase receives your Google account ID and email during the OAuth flow.

We do not share your personal information with any other third parties.

5. Your Rights

• Access — request a copy of the data we hold about you.
• Correction — update your name, photo, or profile info at any time from your Settings page.
• Deletion — delete your account from Settings. We remove your personal data within 30 days. Anonymised learning records (e.g., aggregate course completion counts) may be retained.
• Portability — contact us to receive your data in a machine-readable format.
• Opt-out of push notifications — disable at any time from Settings → Notifications.

To exercise any right, email us at academic.sakar@gmail.com.

6. Cookies

• Session cookies — keep you logged in (essential, cannot be disabled).
• Preference cookies — remember your dark/light mode setting.
• Analytics cookies — Google Analytics (anonymised). You can opt out via our cookie consent banner or your browser's privacy settings.

7. Children

Sakar is intended for users who are at least 18 years old. We do not knowingly collect personal information from children under 18. If you believe a child has provided us data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via an in-app notification or email at least 14 days before the changes take effect. Continued use of Sakar after the effective date constitutes acceptance of the updated policy.

9. Contact

Questions about your privacy? Contact us at academic.sakar@gmail.com or via the Support page.