Translating…
EWOL EDU — Sri Lanka's AI-Powered LMS  ·  New Courses Live!  Explore Now →
EWOL (PVT) LTD · Legal

Your Privacy Matters to Us

This Privacy Policy explains what personal data EWOL EDU collects, why we collect it, how it's used, stored and protected, and the choices and rights you have — including data related to your wallet, payments, and learning activity on our platform.

Last Updated: September 10, 2026 Effective Immediately Gampaha, Sri Lanka
In short: we collect the information needed to run your account, process payments through PayHere and PayPal, track your quiz progress so we can show you accurate results and analytics, and keep your wallet balance secure. We never sell your personal data, and payment card details are handled entirely by our licensed payment processors — EWOL EDU never stores your card or bank login credentials.
01

Introduction

Who we are and what this policy covers

EWOL EDU is an AI-powered Learning Management System operated by EWOL (PVT) LTD ("EWOL EDU", "we", "us", or "our"), registered in Gampaha, Sri Lanka (Business Registration No: PV 00234567). We provide practice exam papers, AI-generated hints, teacher content, a Concept Booster unlimited-practice feature, and a wallet system for Sri Lankan students studying in Sinhala, English, and Tamil.

This Privacy Policy applies to all users of the EWOL EDU website, dashboard, and related services (collectively, the "Platform"), including students, parents viewing shared results, teachers, and question contributors. By creating an account or otherwise using the Platform, you agree to the collection and use of information as described here.

If you do not agree with this Privacy Policy, please discontinue use of the Platform. Continued use after changes to this policy are posted constitutes acceptance of the updated terms.
02

Information We Collect

Data provided by you, and data collected automatically

We collect information in three main ways: information you give us directly, information collected automatically as you use the Platform, and information received from third-party services you choose to connect (such as Google).

Information You Provide
Account details — full name, email address, phone number, home address, and profile photo.
Bank / payout details — bank name, branch, account number and account holder name, submitted voluntarily if you request a withdrawal of wallet earnings.
User-generated content — questions you submit through the Learn-to-Earn program, support ticket messages, and any files or screenshots you attach.
Communications — messages you send us via the Support Center, WhatsApp, or email.
Information Collected Automatically
Usage & activity data — pages visited, papers started/completed, hints requested, quiz answers, time spent per question, and login timestamps (used to power your dashboard, streaks, and XP level).
Device & technical data — IP address, browser type and version, operating system, device identifiers, and general location inferred from IP (city/country level only).
Cookies and local storage — including theme preference (dark/light), language preference, and Google Translate session cookies. See Section 6 for details.
03

Account & Google Sign-In

How authentication works on EWOL EDU

EWOL EDU supports account creation via email/password and via Sign in with Google (OAuth 2.0). When you use Google Sign-In, Google shares your basic profile information (name, email address, and profile photo) with us, which we use to create or match your EWOL EDU account. We never receive or store your Google password.

Passwords for standard email/password accounts are stored using industry-standard one-way hashing (bcrypt) — EWOL EDU staff cannot view your plain-text password at any time.

Your Google account credentials are never transmitted to or stored on EWOL EDU servers. Authentication is handled entirely through Google's secure OAuth flow.
04

Payments & Wallet Data

PayHere, PayPal, wallet balance, and withdrawal handling

EWOL EDU uses a prepaid Wallet system (balances shown in LKR and USD) to pay for paper unlocks, AI hints, and Concept Booster questions. All card and payment-method processing is handled by our licensed third-party payment gateways — we do not collect or store your full card number, CVV, or online banking password on our servers.

PCI-DSS Compliant Gateways SSL Encrypted Checkout LKR & USD Supported
Gateway What They Process What EWOL EDU Stores
PayHere (LK) Card details, Lanka QR, local bank payments Order ID, amount, transaction status, timestamp
PayPal PayPal balance, linked cards/bank (international) PayPal order ID, USD amount, capture status
Bank Transfer (Withdrawals) Manual admin-processed payout to your bank Bank name, branch, account number, account holder name (as entered by you)
Transaction & Withdrawal Records

Every top-up, paper purchase, AI hint charge, referral bonus, and withdrawal request is logged in your Transaction History for transparency. Withdrawal requests are subject to a 5% service fee and a minimum withdrawal amount of LKR 1,000.00, and are manually reviewed by an administrator before funds are released to your linked bank account.

Please double-check your bank account details before submitting a withdrawal request. EWOL EDU is not responsible for funds sent to an incorrect account number provided by you.
05

Learning & Quiz Activity

Results, answers, streaks, XP and AI weakness insights

To power features like your Dashboard, AI Weakness Insights, study streaks, XP level, and the Activity Calendar, we store the following learning-related data tied to your account:

Your selected answers for each question in every exam paper you attempt, along with correctness, marks awarded, and time spent per question.
Aggregate accuracy statistics per subject, used to generate personalized weak-topic recommendations.
AI Hint usage — which questions you unlocked hints for, and the associated wallet charge.
Shared results — if you generate a shareable result link for a parent or guardian, that link exposes your score, accuracy, and question-by-question review to anyone with the link, without requiring login.
Shared result links use a unique, hard-to-guess token. Do not share this link publicly if you wish to keep your results private — anyone with the link can view them.
06

Cookies & Local Storage

How we use cookies, localStorage and Google Translate

EWOL EDU uses a minimal set of cookies and browser local storage entries, described below, purely to make the Platform function correctly. We do not use third-party advertising or tracking cookies.

Name Purpose Type
ewol_session Keeps you securely logged in between page loads Essential (Session)
XSRF-TOKEN Protects forms and requests from cross-site request forgery Essential (Session)
googtrans Remembers your chosen translation language (Sinhala / Tamil / English) via Google Translate Functional
ewol_theme (localStorage) Remembers your Dark / Light mode preference Functional (Local Storage)
ewol_lang_code (localStorage) Remembers your last selected interface language Functional (Local Storage)
ewol_currency (localStorage) Remembers whether you prefer to see prices in LKR or USD Functional (Local Storage)

You can clear cookies and local storage at any time through your browser settings. Doing so may log you out or reset your saved preferences, but will not affect your saved wallet balance, transaction history, or exam results, which are stored securely on our servers.

07

How We Use Your Information

The purposes behind every piece of data we collect
Provide & operate the Platform
Create your account, authenticate logins, unlock papers you've purchased, and display your wallet balance, results, and dashboard.
Process payments & payouts
Charge your wallet or process withdrawals, verify transaction signatures from PayHere/PayPal, and prevent fraudulent top-ups.
Personalize your learning experience
Generate AI weakness insights, recommend papers, calculate your XP level and study streak, and surface relevant subjects.
Communicate with you
Respond to support tickets, send transactional emails (e.g. password resets, withdrawal confirmations), and share important service announcements.
Maintain security & prevent abuse
Detect suspicious login activity, prevent multiple-account abuse of referral bonuses, and enforce our Terms of Service.
Improve the Platform
Analyze aggregate, de-identified usage trends (e.g. most popular subjects) to improve course content and platform performance.
08

Sharing With Third Parties

We do not sell your data. Here's who we do share it with, and why
EWOL EDU never sells, rents, or trades your personal data to advertisers or data brokers.

We share limited data only with the following categories of trusted service providers, strictly to operate the Platform:

Payment processors (PayHere, PayPal) — receive the amount to be charged and your name/email to complete a transaction.
Google — for Sign-In authentication and the Google Translate widget used to translate quiz content into Sinhala/Tamil.
Hosting & infrastructure providers — store our application data securely on our behalf under confidentiality obligations.
Legal & regulatory authorities — only where required by Sri Lankan law, a valid court order, or to protect the rights, property, or safety of EWOL EDU, our users, or the public.
Verified teachers — may see aggregate, non-identifying performance statistics for papers they authored (not individual student answers), unless a student explicitly shares a result link.
09

Data Security

How we protect your account and wallet

We apply industry-standard safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:

HTTPS / SSL
All traffic between your browser and EWOL EDU is encrypted in transit.
Hashed Passwords
Passwords are one-way hashed and never stored in plain text.
CSRF Protection
Every form submission is protected with anti-forgery tokens.
Restricted Access
Only authorized EWOL EDU staff can access personal data, on a need-to-know basis.
No Card Storage
Full card numbers are never stored on EWOL EDU servers — handled by licensed gateways only.
Signature Verification
Payment notifications are cryptographically verified (MD5/HMAC) before your wallet is credited.
No method of transmission over the internet is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. Please keep your password confidential and notify us immediately if you suspect unauthorized access to your account.
10

Data Retention

How long we keep different types of data
Data Type Retention Period
Account profileUntil you request account deletion, or 24 months of account inactivity
Transaction & withdrawal recordsMinimum 5 years, for financial/accounting compliance purposes
Exam results & answersRetained while your account is active, to power your progress history
Support ticket history36 months from the date of resolution
Paper enrollment accessPer-paper enrollment period as displayed at time of purchase (typically 3–6 months)

When data is no longer required for these purposes, it is securely deleted or anonymized, except where we are legally required to retain it for longer (e.g. tax and financial records).

11

Your Rights & Choices

You are in control of your personal data

Subject to applicable law, including Sri Lanka's Personal Data Protection Act No. 9 of 2022, you have the following rights regarding your personal data:

Access
Request a copy of the personal data we hold about you.
Correction
Update inaccurate profile, bank, or contact details anytime in your Dashboard.
Deletion
Request permanent deletion of your account and associated personal data.
Objection
Object to certain uses of your data, such as non-essential communications.
Portability
Request an export of your data in a structured, machine-readable format.
Withdraw Consent
Withdraw consent for optional features (e.g. translation) at any time.

To exercise any of these rights, please contact us using the details in Section 17. We will respond to verified requests within 30 days. Note that deleting your account will forfeit any remaining wallet balance and pending withdrawal requests unless resolved beforehand.

12

Children's Privacy

Special protections for younger students

EWOL EDU is designed for students across primary, secondary, O/Level and A/Level grades in Sri Lanka, some of whom are minors. Where a user is under the age of 18, we recommend that a parent or guardian supervises account creation, wallet top-ups, and withdrawal requests. Wallet top-ups and withdrawals require active parental awareness, as they involve real payment methods.

The Share Results with Parents feature is specifically designed to let students share exam performance with a parent or guardian via WhatsApp, email, or a direct link — without requiring the parent to create an account.

We do not knowingly collect more personal information from children than is necessary to provide the educational service. If you are a parent or guardian and believe your child has provided us with information beyond what is required, please contact us to request its removal.

13

Referrals, Earnings & Withdrawals

Referral Program and Learn-to-Earn data

Our Refer & Earn program links your unique referral code to any new user who registers through your link. We store this relationship (referrer and referred user IDs) to correctly credit bonus wallet funds to both parties upon the referred user's first deposit.

Through the Learn-to-Earn feature, questions and model answers you submit for review are stored, reviewed by our academic team, and — if approved — may be published on the Platform (with attribution controlled by our editorial team) to benefit other students. Rejected submissions include an admin note explaining the decision, which is visible only to you.

14

AI Hints & Translation Features

How AI-generated content and Google Translate are used

The AI Hint feature (LKR 5.00 per use) surfaces pre-generated hint content associated with a question; requesting a hint logs the question ID, timestamp, and wallet deduction against your account for billing and progress-tracking purposes.

Content translation into Sinhala (සිංහල) and Tamil (தமிழ்) is powered by the Google Translate widget. When you select a translation language, the relevant page content is sent to Google's translation service to be processed; this is subject to Google's own Privacy Policy. You can switch back to the original language ("Default") at any time.

15

International Data Transfers

Where your data may be processed

EWOL EDU primarily serves students in Sri Lanka, and our core infrastructure is configured with this in mind. However, some of our service providers — such as PayPal, Google (Sign-In and Translate), and certain cloud hosting or CDN providers — may process data on servers located outside Sri Lanka, including in the United States or the European Union. Where this occurs, those providers are contractually and legally bound to apply appropriate safeguards to protect your personal data in line with applicable data protection standards.

16

Changes to This Policy

How we notify you of updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or an in-app announcement banner. We encourage you to review this page periodically.

Questions About Your Privacy?

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal data is handled, our team is here to help.