Overview
uLearn.lk is operated by uLearn (Private) Limited, a company incorporated in Sri Lanka. We act as a Data Controller in respect of the personal data we collect from users of ulearn.lk and as a Data Processor on behalf of teachers in respect of the student records they upload (attendance, homework, results, class rosters).
Information we collect
We collect the following categories of information:
- Account details — name, email, password (hashed), preferred language, role (Teacher / Student / Platform Admin).
- Profile details — display name, headline, bio, profile + banner photos, contact methods you choose to make public.
- Teacher catalogue — subjects you teach, grades, teaching locations, qualifications, achievements, class-group settings, lesson and resource content you publish.
- Student profile — full name, school, parent contact number, grade level, KYC status.
- KYC documents — selfie + national-identity document images you upload for verification, plus our admin review notes.
- Education records — class enrollments, attendance records, homework submissions, quiz responses, uploaded exam-result evidence.
- Payment metadata— transaction reference, amount, status, purpose (class fee, subscription, ad, etc.) — see “Payment data” below.
- Activity data — connections you make, reviews and reactions you post, posts you bookmark, notifications you receive, ad impressions and clicks.
- Technical data — IP address, browser type, device class, language preference and similar logs needed to operate the service and prevent abuse.
How we use it
- To create and operate your account.
- To match students with teachers (search rankings, suggestions, connections).
- To process payments, payouts, subscriptions, ads and other commerce on the platform.
- To deliver tuition workflow: attendance QR codes, homework, lessons, class chats, notifications, SMS alerts to parents.
- To compute and publish trust signals — quality rankings, review ratings, popularity, retention — that help students choose well.
- To verify identities via KYC and to investigate fraudulent activity, abuse or violation of these terms.
- To send service notifications, reminders, and (only if you opt in) marketing communications.
- To improve the platform through aggregated, de-identified analytics.
KYC & identity verification
To protect students and create accountable rankings, teachers must complete KYC before being publicly listed. Students complete a lighter KYC to connect with teachers. KYC documents (selfie + NIC image) are stored encrypted, accessible only to our trained reviewers, and are never displayed publicly. We delete KYC images once the verification decision is recorded, retaining only the decision and audit metadata.
Payment data
All payments are processed by Stripe (Stripe Payments Europe, Limited). uLearn.lk does not store full card numbers, CVV or PIN. We store only the transaction reference, amount, currency, provider, status, purpose and timestamps. Refer to Stripe’s privacy policy for how they handle your card details.
Education records
Records uploaded by a teacher in the course of teaching (a student’s attendance, homework, exam result) are accessible to (a) the student themselves, (b) the teacher who recorded them, (c) any teacher delegate the teacher has explicitly authorized with the relevant permission, and (d) uLearn.lk admins acting on reports or for security. They are not sold or shared with advertisers.
Students under 18
Many of our students are minors. The minimum age to create a student account is 13. Students under 18 are expected to have parent/guardian consent to use uLearn.lk. We collect parent contact information as part of the student profile so we can reach a guardian where needed. Parents who wish their child’s account to be closed and data deleted can request it from privacy@ulearn.lk.
Data security
We use industry-standard safeguards: HTTPS in transit, encryption at rest, hashed passwords (bcrypt), session cookies with secure flags, principle-of-least-privilege access control, an audit log of admin actions including any “view-as” impersonation for support. No system is perfect; we will notify affected users and, where applicable, regulators of any material data breach as required by law.
Your rights
Under the Personal Data Protection Act you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data erased (subject to legitimate-interest exceptions such as financial-record retention).
- Withdraw consent to optional processing.
- Receive a portable copy of your data in a structured, machine-readable format.
- Lodge a complaint with the Sri Lanka Data Protection Authority.
Most rights can be exercised directly in your account settings. For anything you can’t do yourself, email privacy@ulearn.lk.
Data retention
We keep account data for as long as the account is active. After deletion, financial-transaction metadata is retained for 7 years to comply with Sri Lankan tax and accounting obligations; the rest is purged or anonymized within 90 days.
Changes to this policy
We may update this policy from time to time. We’ll post the new version on this page with a revised “Last updated” date and, for material changes, notify you in-app or by email.
Contact us
Privacy questions: privacy@ulearn.lk. General support: support@ulearn.lk.