Privacy Policy

EduBank Ltd. ("EduBank", "we", "us") is registered in Khulna, Bangladesh and operates the EduBank web and mobile applications. EduBank is a wholly-owned product of Texion Technologies Ltd. ("Texion"). This Privacy Policy explains how we handle information about you when you use our platform.

2.1 Information you give us

• Account data: name, email address, phone number, date of birth (for age-gating), gender (for forum routing), the exam(s) you are preparing for and your class / job category.
• Payment data: processed entirely by our payment partners (bKash, SSLCommerz, card networks). We store only the last 4 digits and the transaction reference — never the full card or wallet number.
• Content you create: posts, comments, polls, reports, refund requests, ratings.

2.2 Information we generate as you use EduBank

• MCQ responses, exam scores, time spent on questions, weak-area analytics, streak history.
• Notifications you've opened, sections you've visited, the device + browser you used.
• EduCoin transactions (earned + spent) and your subscription tier.

2.3 Information from third parties

• If you sign in with Google or Facebook, we receive your name, email and avatar from them. Nothing more.
• If a referrer invites you, we record the link between your accounts to honour the referral bonus.

We use your data for one of seven purposes:

• Run the platform — authenticate you, deliver exams, render the Learning Hub.
• Personalise practice — surface weak areas, generate AI question sets, recommend topics.
• Power gamification — calculate EduCoins, streaks, badges, leaderboards.
• Moderate the community — apply word filters, review reports, suspend bad actors.
• Process payments and apply discounts, refunds and free-trial logic.
• Notify you — exam reminders, streak nudges, refund updates (you can opt out of non-essential channels).
• Improve EduBank — measure feature usage and fix bugs (aggregated / anonymised wherever possible).

We never use your data to train external AI models, and we do not sell or rent it.

We share data only in these specific cases:

• Service providers we contractually trust — hosting (AWS Singapore), email delivery, SMS, payment gateways, error monitoring. They process data on our behalf, under data-processing agreements.
• Teachers in Teacher's Space — for any space you enrol in, the teacher sees your name, exam scores in their space, and posts you make in their batch discussion.
• Other students — your username, profile photo, public posts, ranking and badges are visible in community forums.
• Legal compliance — when required by a binding legal order from a competent Bangladeshi authority.
• Texion Technologies — our parent company, strictly for internal administration, security and audit.

We keep account data as long as your account is active. If you delete your account:

• Personal identifiers (name, email, phone) are removed within 30 days.
• Anonymised exam analytics may be retained to improve question quality.
• Payment records are kept for 6 years as required by Bangladesh tax law.

We encrypt data in transit (TLS 1.3) and at rest (AES-256). Access to production data is limited to a small operations team and audited. Passwords are stored using bcrypt with per-user salts. We run quarterly security reviews and respond to disclosed vulnerabilities within 72 hours. We will never ask you for your password in chat or over the phone.

Whatever your country of residence, EduBank gives you these rights:

• Access — request a copy of your data, exported as JSON, within 14 days.
• Correct — edit your profile at any time, or email us for fields you can't change.
• Delete — close your account from Settings → Account → Delete. Irreversible after 14 days.
• Object — turn off marketing notifications without losing account functionality.
• Port — your exam history, badges and EduCoin balance can be exported.

EduBank is built for students from Class 6 upwards. If you are under 13, you need a parent or guardian to create the account and approve subscription payments. We do not knowingly collect data on under-13 users without that consent.

We use:

• Strictly necessary cookies for authentication and CSRF protection. These can't be disabled.
• Preferences for your theme, language, last-visited tab. Optional.
• Analytics via privacy-friendly self-hosted Plausible — no third-party cookies, no cross-site tracking.

Material changes will be announced in-app at least 30 days before they take effect, with a one-paragraph summary of what changed. Minor wording fixes (typos, contact info) take effect immediately.

For any privacy question, exercise of rights, or complaint, write to privacy@edubank.app. We respond within 7 business days. Our Data Protection Officer can also be reached by post at: EduBank Ltd., Khulna Sadar, Khulna 9100, Bangladesh.