This Privacy Policy explains how mzerone ("we", "us"), the operator of TeachMe, collects, uses and protects your personal data. We handle personal data in line with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka ("PDPA"). For the purposes of the PDPA, mzerone is the data controller.
1. Data we collect
- Account data: name, email address, mobile number, role, password (stored hashed) and language preference.
- Teacher verification (KYC): identity documents, qualifications and bank account details used for verification and payouts.
- Payment data: payment references, amounts, and bank deposit slips. Card details are handled by our payment partners, not stored by us.
- Usage data: enrolments, attendance, submissions, quiz results and activity needed to operate the service.
2. How we use your data
- To create and operate your account and deliver classes.
- To verify teacher identity and process payments and payouts.
- To send service messages such as verification codes and notices.
- To maintain security, prevent abuse, and comply with the law.
3. Legal basis
We process personal data to perform our contract with you, with your consent (which you may withdraw), to meet legal obligations, and for our legitimate interests in running and securing the platform.
4. Sharing
We do not sell your personal data. We share it only with service providers who help us run TeachMe — including payment processors, cloud hosting and database providers, file storage, and email delivery — under appropriate safeguards, and with authorities where required by law. Some of these providers may process data on servers located outside Sri Lanka; where that happens we take steps to ensure an appropriate level of protection.
5. Retention
We keep personal data for as long as your account is active and as needed to provide the service, then for any period required to meet legal, accounting or dispute-resolution obligations, after which it is deleted or anonymised.
6. Security
We use technical and organisational measures — including encryption in transit, hashed passwords, access controls and gated file delivery — to protect your data. No system is perfectly secure, so we cannot guarantee absolute security.
7. Your rights under the PDPA
Subject to the PDPA, you may request access to your personal data, ask us to correct or complete it, withdraw consent, object to certain processing, or request erasure. To exercise these rights, contact us at support@mzerone.lk. You also have the right to complain to the Data Protection Authority of Sri Lanka.
8. Children
Where a student is under 18, a parent or guardian must provide consent and oversee the account. If you believe a child has given us data without such consent, contact us and we will address it.
9. Cookies
We use a small number of essential cookies — for your login session and language preference. We do not use them for advertising.
10. Changes and contact
We may update this Policy and will notify material changes through the platform. For any privacy question or request, contact support@mzerone.lk.