Effecti ve date: 2025 August 01
Last updated: 2025 August 01
Controller: Learnerr (Pvt) Ltd. (“Learnerr”, “we”, “us”, “our”)
Contact: hello@learnerr.io
This Privacy Policy explains what personal data we collect when you use Learnerr (our LMS combined with video-conferencing), why we collect it, how we use and share it, how long we keep it, the rights you have over your data, and how to contact us. This is a template tailored to the Terms you provided and Sri Lanka’s PDPA; it is not legal advice. Please review with your legal counsel before publishing.
1. Scope
This Policy applies to personal data collected: (a) via our website and platform at https://learnerr.io and related subdomains; (b) during registration and use of the Learnerr LMS and video-conferencing features; and (c) through customer support and communications. It covers all account holders, students, teachers/instructors, and administrators.
2. Personal data we collect
We collect the following categories of personal data:
Account & identity data
Full name, email address, username, profile photo, organization name, job title.
Contact data
Phone number, postal address (if provided), support correspondence.
Account credentials
Hashed passwords, password reset tokens.
Payment & billing data
Billing name, billing address, payment instrument details as required by our payment processor (we do not store full card data ourselves; processed by PayHere or chosen provider).
Service usage & content
Course enrollments, course progress, test scores, assignment submissions, uploaded files (documents, videos, presentations, images), chat messages, and any recordings of live classes you create or are included in.
Technical & device data
IP address, device and browser type, device identifiers, operating system, connection data, crash reports, and log data.
Communications & metadata
Messages sent through platform messaging, email headers, timestamps, meeting metadata (participants, join/leave times).
Analytics & cookies
Usage analytics, performance metrics, cookies and similar technologies.
Sensitive data
We do not intentionally collect special categories of sensitive personal data (race, health, religion, etc.). If you submit such data in course materials, you consent to its processing for the purpose submitted; avoid uploading sensitive personal data unless necessary and permitted.
3. How we collect data
Directly from you: when you register, create or update your profile, upload course materials, join or record live sessions, communicate with support, or make payments.
Automatically: via cookies, logs, analytics, and when you use the platform.
From third parties: payment processors, identity providers (if you sign in with third-party accounts), and integrations (e.g., email service providers).
4. Purposes of processing & legal bases
We process your personal data to:
Provide and operate the Service (account setup, course delivery, video conferencing, streaming). (Performance of contract / necessary for service provision.)
Billing & fraud prevention (process payments, invoices, detect abuse). (Performance of contract / legal compliance / legitimate interests.)
Support & communications (respond to inquiries, send administrative notices). (Performance of contract / legitimate interests.)
Platform improvements & analytics (product analytics, quality assurance, troubleshooting). (Legitimate interests.)
Security & safety (protect accounts, enforce Terms, prevent abuse). (Legitimate interests.)
Legal compliance (retain records to satisfy tax, accounting, or legal obligations). (Legal obligations.)
Marketing (optional) — only where you have consent or where permitted by law; you can opt out. (Consent / legitimate interests depending on jurisdiction.)
5. Recordings & user-generated content
Live sessions can be recorded. Recordings and uploaded course materials are stored so courses can be replayed or accessed by permitted users (e.g., instructor and enrolled students).
By uploading or recording content, you grant Learnerr a worldwide, royalty-free license to host, stream, display, reproduce, and distribute that content for the purpose of providing the Service.
Instructors/administrators may have the ability to download, share, or delete recordings as permitted by their account role. Users should avoid uploading content that violates privacy or intellectual property rights of others.
6. Sharing & third-party processors
We may share personal data with:
Service providers who perform services on our behalf (payment processors such as PayHere; hosting and cloud infrastructure; email delivery services; analytics providers; content delivery networks; video-streaming or conferencing infrastructure providers).
Integrations requested or enabled by you (e.g., third-party apps or LTI integrations).
Legal & compliance: when required by law, court order, or to respond to legal process.
Business transfers: in connection with a sale, merger, reorganization, or asset transfer (with notice to users where required).
We require all processors to apply appropriate technical and organizational measures and only process data per our instructions.
7. International transfers
Learnerr may transfer or store data in countries other than your home country. Where data is transferred cross-border, we implement appropriate safeguards required by applicable law (standard contractual clauses, encryption, or other measures) to protect your data.
8. Cookies & tracking
We use cookies and similar technologies for functional, analytical, and (with your consent) advertising purposes. You can manage cookie preferences via your browser settings and any in-platform preferences we provide.
9. Data retention
We retain personal data only as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Specific examples:
Account data: retained while account is active and for a reasonable period after deactivation for backup, legal, or accounting purposes.
Payment records: retained as required to comply with financial and tax laws.
Course content & recordings: retained while the course is active or as controlled by the instructor/organization; deletions requested by users or admins will be honored subject to backups and legal obligations.
10. Security
We implement industry-standard measures to protect personal data (encryption in transit, access controls, regular backups, security reviews). While we strive to protect data, no system is completely secure—if a data breach occurs we will notify affected individuals and regulators as required by law.
11. Your rights
Subject to applicable law, you may have the right to:
Access the personal data we hold about you.
Request correction or completion of inaccurate or incomplete data.
Request deletion of your data (subject to legal and contractual exceptions).
Request portability of data you provided.
Object to or restrict certain processing (e.g., direct marketing).
Withdraw consent where processing is based on consent (withdrawal won’t affect processing already carried out).
To exercise rights, contact us at hello@learnerr.io. We may require verification to protect your data.
12. Children’s privacy
Our Service is intended for users aged 18 and over. We do not knowingly collect personal data from children under the age of 18. If you believe we have collected data from a minor, contact us and we will take steps to remove it.
13. Data breach notification
Where required by law, we will notify regulators and affected individuals of a personal data breach without undue delay and in accordance with applicable legal requirements.
14. Changes to this Policy
We may update this Policy to reflect changes in practices or legal requirements. For material changes, we will notify you by email or via the platform at least thirty (30) days before the change takes effect.
15. Contact & Data Protection Officer
For privacy inquiries, data subject requests, or concerns, contact: hello@learnerr.io.
If you have a designated Data Protection Officer (DPO) or privacy lead, please add their name and contact here: <DPO name & email>.
16. How to request deletion, export, or support
Data export: Request a copy of your data by emailing hello@learnerr.io. Provide your account email and the format you prefer (e.g., CSV, JSON).
Account deletion: Log into account settings → Delete account, or request deletion via hello@learnerr.io. Deletion requests are processed within a reasonable time but may be subject to retention obligations.
Support & disputes: Contact support at hello@learnerr.io; unresolved disputes will be handled per our Terms (governing law: Sri Lanka).
17. Legal & jurisdictional notice
This Policy is subject to the laws of Sri Lanka where applicable. If you are located in another jurisdiction (e.g., the EU), you may have additional rights under your local laws which we will respect as applicable.