Privacy Policy
Last updated: August 2026
1. Who we are
LearnExa is an online tutoring marketplace operating in Pakistan that connects students and parents with independent tutors. This policy explains what personal data we handle when you use learnexa.org, and what choices you have. It applies to every account type: student, parent/guardian, tutor and administrator.
2. Information you give us
Account details such as name, email address, phone number, city, gender and preferred language. Profile content such as your bio, photo, subjects, availability, hourly rate and a short intro video. Tutor verification material such as CNIC front and back images, a selfie and degree or experience certificates. Payment information such as the method you choose, the transaction ID or reference you submit, and the payment screenshot you upload. Content you create such as messages, attachments, whiteboard drawings, reviews, dispute descriptions, support requests and quiz or test answers.
3. Information collected automatically
Basic technical data needed to run and secure the service: IP-derived request metadata, browser and device type, timestamps of sign-in and key actions, error reports, and session activity such as when you join or leave a class. We store your language and theme choice, and your sign-in session, in your browser. We do not run advertising or cross-site tracking networks.
4. How we use your information
To create and secure your account and keep you signed in. To show tutor profiles to students and match learners with suitable tutors. To run bookings, live classes, group classes, whiteboards and messaging. To process payments, hold funds in escrow, calculate earnings and handle withdrawals. To verify tutor identity and qualifications. To detect fraud, impersonation, abuse and attempts to move payments off-platform. To send transactional email and in-app notifications. To operate rewards, referrals, quizzes, tests, certificates and leaderboards. To provide customer support and resolve disputes. To understand aggregate usage and improve the product.
5. Legal bases for processing
We process data to perform the contract you enter into when you use LearnExa (bookings, payments, classes), to meet our legitimate interests in keeping the platform safe and functional (fraud prevention, security logging, dispute review), to comply with legal obligations that apply to us, and on the basis of your consent where consent is required — for example when you upload optional profile media or opt in to non-essential email. You can withdraw consent at any time without affecting processing that already happened.
6. Identity verification documents
CNIC images, selfies and certificates are uploaded to private storage that is not publicly readable. Access is limited to the LearnExa review team through short-lived signed links, and these files are never shown to students or other tutors. They are used only to confirm identity and eligibility to teach, and to investigate fraud or impersonation reports.
7. Messages, attachments and safety scanning
Messages and uploaded files exchanged on LearnExa are automatically checked for personal contact details such as phone numbers, WhatsApp links, emails and social handles, because taking sessions and payments off-platform removes escrow protection for both sides. Content that fails this check is not delivered and the sender is told why. Automated checks may be reviewed by our team when a report or dispute is raised.
8. Children and guardians
LearnExa is intended for users aged 13 and over. Learners under 18 should use the platform with a parent or guardian's involvement, and a guardian can link to a student account to see progress, attendance and session reports. If you believe a child has created an account without appropriate consent, contact us and we will review and, where required, remove the account and its data.
9. Who we share data with
We share only what a service needs to function: our hosting, database, storage and authentication provider; our email delivery provider for transactional messages; our live video and classroom infrastructure provider; and the payment or crypto verification services used to confirm a transaction. We may share limited data with the other party to a booking (for example a tutor sees the student's first name and booking details). We may disclose information where we are legally required to, or where it is necessary to investigate fraud, abuse or a safety risk. We do not sell personal data and we do not share it with advertisers.
10. International transfers
Our infrastructure providers may store or process data on servers outside Pakistan. Where that happens, we rely on the provider's contractual data-protection commitments and use encrypted connections for data in transit.
11. How long we keep data
Account and profile data is kept while your account is active. Session, payment, escrow and dispute records are kept after a booking ends because they are needed for accounting, refunds and dispute history. Verification documents are kept while your tutor account is verified, and are removed on request once verification is no longer needed or the account is closed. Messages are retained so both sides keep a record of what was agreed. When you ask us to delete your account we remove or anonymise personal data that we are not required to keep for financial or legal reasons.
12. Security
Access to data is controlled by per-user database rules so an account can only read its own records and the public parts of others. Verification documents and whiteboard files are stored in private buckets served through expiring links. Admin access is restricted to specific accounts and protected by an additional password and PIN step. Traffic is served over HTTPS. No online service can promise perfect security, so please use a strong unique password and tell us immediately if you think your account has been accessed by someone else.
13. Your rights and choices
You can view and edit most of your information from your profile page, replace or remove your photo and intro video, change your language and theme, unsubscribe from non-essential emails, and ask for a copy of your data or for your account to be deleted. Contact us through the Contact page and we will respond by email. If you are unhappy with our response you may raise the matter with the relevant data protection authority in your jurisdiction.
14. Changes to this policy
We update this policy as the platform changes. The date at the top of this page shows the current version, and material changes will be announced in-app or by email. Continuing to use LearnExa after an update means you accept the revised policy.
15. Contact
Questions, data requests or privacy concerns can be sent through the LearnExa Contact page. We aim to reply by email within a few working days.