Your Privacy Matters to Us
This Privacy Policy explains what personal data EWOL EDU collects, why we collect it, how it's used, stored and protected, and the choices and rights you have — including data related to your wallet, payments, and learning activity on our platform.
Introduction
EWOL EDU is an AI-powered Learning Management System operated by EWOL (PVT) LTD ("EWOL EDU", "we", "us", or "our"), registered in Gampaha, Sri Lanka (Business Registration No: PV 00234567). We provide practice exam papers, AI-generated hints, teacher content, a Concept Booster unlimited-practice feature, and a wallet system for Sri Lankan students studying in Sinhala, English, and Tamil.
This Privacy Policy applies to all users of the EWOL EDU website, dashboard, and related services (collectively, the "Platform"), including students, parents viewing shared results, teachers, and question contributors. By creating an account or otherwise using the Platform, you agree to the collection and use of information as described here.
Information We Collect
We collect information in three main ways: information you give us directly, information collected automatically as you use the Platform, and information received from third-party services you choose to connect (such as Google).
Account & Google Sign-In
EWOL EDU supports account creation via email/password and via Sign in with Google (OAuth 2.0). When you use Google Sign-In, Google shares your basic profile information (name, email address, and profile photo) with us, which we use to create or match your EWOL EDU account. We never receive or store your Google password.
Passwords for standard email/password accounts are stored using industry-standard one-way hashing (bcrypt) — EWOL EDU staff cannot view your plain-text password at any time.
Payments & Wallet Data
EWOL EDU uses a prepaid Wallet system (balances shown in LKR and USD) to pay for paper unlocks, AI hints, and Concept Booster questions. All card and payment-method processing is handled by our licensed third-party payment gateways — we do not collect or store your full card number, CVV, or online banking password on our servers.
| Gateway | What They Process | What EWOL EDU Stores |
|---|---|---|
| PayHere (LK) | Card details, Lanka QR, local bank payments | Order ID, amount, transaction status, timestamp |
| PayPal | PayPal balance, linked cards/bank (international) | PayPal order ID, USD amount, capture status |
| Bank Transfer (Withdrawals) | Manual admin-processed payout to your bank | Bank name, branch, account number, account holder name (as entered by you) |
Every top-up, paper purchase, AI hint charge, referral bonus, and withdrawal request is logged in your Transaction History for transparency. Withdrawal requests are subject to a 5% service fee and a minimum withdrawal amount of LKR 1,000.00, and are manually reviewed by an administrator before funds are released to your linked bank account.
Learning & Quiz Activity
To power features like your Dashboard, AI Weakness Insights, study streaks, XP level, and the Activity Calendar, we store the following learning-related data tied to your account:
Cookies & Local Storage
EWOL EDU uses a minimal set of cookies and browser local storage entries, described below, purely to make the Platform function correctly. We do not use third-party advertising or tracking cookies.
| Name | Purpose | Type |
|---|---|---|
| ewol_session | Keeps you securely logged in between page loads | Essential (Session) |
| XSRF-TOKEN | Protects forms and requests from cross-site request forgery | Essential (Session) |
| googtrans | Remembers your chosen translation language (Sinhala / Tamil / English) via Google Translate | Functional |
| ewol_theme (localStorage) | Remembers your Dark / Light mode preference | Functional (Local Storage) |
| ewol_lang_code (localStorage) | Remembers your last selected interface language | Functional (Local Storage) |
| ewol_currency (localStorage) | Remembers whether you prefer to see prices in LKR or USD | Functional (Local Storage) |
You can clear cookies and local storage at any time through your browser settings. Doing so may log you out or reset your saved preferences, but will not affect your saved wallet balance, transaction history, or exam results, which are stored securely on our servers.
How We Use Your Information
Sharing With Third Parties
We share limited data only with the following categories of trusted service providers, strictly to operate the Platform:
Data Security
We apply industry-standard safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:
Data Retention
| Data Type | Retention Period |
|---|---|
| Account profile | Until you request account deletion, or 24 months of account inactivity |
| Transaction & withdrawal records | Minimum 5 years, for financial/accounting compliance purposes |
| Exam results & answers | Retained while your account is active, to power your progress history |
| Support ticket history | 36 months from the date of resolution |
| Paper enrollment access | Per-paper enrollment period as displayed at time of purchase (typically 3–6 months) |
When data is no longer required for these purposes, it is securely deleted or anonymized, except where we are legally required to retain it for longer (e.g. tax and financial records).
Your Rights & Choices
Subject to applicable law, including Sri Lanka's Personal Data Protection Act No. 9 of 2022, you have the following rights regarding your personal data:
To exercise any of these rights, please contact us using the details in Section 17. We will respond to verified requests within 30 days. Note that deleting your account will forfeit any remaining wallet balance and pending withdrawal requests unless resolved beforehand.
Children's Privacy
EWOL EDU is designed for students across primary, secondary, O/Level and A/Level grades in Sri Lanka, some of whom are minors. Where a user is under the age of 18, we recommend that a parent or guardian supervises account creation, wallet top-ups, and withdrawal requests. Wallet top-ups and withdrawals require active parental awareness, as they involve real payment methods.
The Share Results with Parents feature is specifically designed to let students share exam performance with a parent or guardian via WhatsApp, email, or a direct link — without requiring the parent to create an account.
We do not knowingly collect more personal information from children than is necessary to provide the educational service. If you are a parent or guardian and believe your child has provided us with information beyond what is required, please contact us to request its removal.
Referrals, Earnings & Withdrawals
Our Refer & Earn program links your unique referral code to any new user who registers through your link. We store this relationship (referrer and referred user IDs) to correctly credit bonus wallet funds to both parties upon the referred user's first deposit.
Through the Learn-to-Earn feature, questions and model answers you submit for review are stored, reviewed by our academic team, and — if approved — may be published on the Platform (with attribution controlled by our editorial team) to benefit other students. Rejected submissions include an admin note explaining the decision, which is visible only to you.
AI Hints & Translation Features
The AI Hint feature (LKR 5.00 per use) surfaces pre-generated hint content associated with a question; requesting a hint logs the question ID, timestamp, and wallet deduction against your account for billing and progress-tracking purposes.
Content translation into Sinhala (සිංහල) and Tamil (தமிழ்) is powered by the Google Translate widget. When you select a translation language, the relevant page content is sent to Google's translation service to be processed; this is subject to Google's own Privacy Policy. You can switch back to the original language ("Default") at any time.
International Data Transfers
EWOL EDU primarily serves students in Sri Lanka, and our core infrastructure is configured with this in mind. However, some of our service providers — such as PayPal, Google (Sign-In and Translate), and certain cloud hosting or CDN providers — may process data on servers located outside Sri Lanka, including in the United States or the European Union. Where this occurs, those providers are contractually and legally bound to apply appropriate safeguards to protect your personal data in line with applicable data protection standards.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or an in-app announcement banner. We encourage you to review this page periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal data is handled, our team is here to help.