Privacy Policy

1. What this policy covers

This policy explains what information EnglishBD collects, how we use it, and the choices you have. It covers the public website (englishbd.com), the learner app on the web (app.englishbd.com) and the EnglishBD Android app.

The public website — articles, dictionary, model answers, directory — can be read without an account.

2. Information we collect

Account information: when you create an account we collect the details you provide, such as your name and email address.

Learning data: your lesson progress, practice attempts, answers you submit for grading, plans, points, hearts, streaks and settings, so the platform can personalise your learning and let you pick up where you left off.

Purchase records: if you subscribe to EnglishBD Super, we record that the subscription exists and when it runs to. We do not receive your card, bKash or bank details for it — see section 5.

Prize payout details: only if you win a weekly leaderboard prize and choose to claim it. See section 5.

Referral information: if you were invited, we record who invited you and how the invitation reached us (a link, a code you typed, or a stored referral). We use it to credit the right person and to spot fake sign-ups; it is not used for advertising.

Technical data: basic device and usage information (such as browser type and pages visited) used to keep the service secure and improve it.

3. How we use your information

To provide and improve the learning service, personalise your daily plan, and keep your progress safe.

To communicate with you about your account and important service changes.

To keep the platform secure, to prevent abuse, and to check that leaderboard prizes are earned honestly.

We do not sell your personal data. We do not show your personal learning data to other users.

4. What other learners can see

The leaderboard shows your display name and your score for the week. Nothing else about you appears there — not your email address, not your payout details, not what you got wrong.

If someone invited you, their referral page shows them your display name and how far you have got — never your email address or phone number. The same applies the other way round for people you invite.

If you would rather not appear under your own name, change your display name in your profile.

5. Payments and prize payouts

We never see or store your card number, your bKash PIN, or any password for a payment method. Subscriptions bought in the Android app are processed by Google Play: Google takes the payment and tells us only that a purchase happened and whether it is still active.

If you win a weekly prize and claim it, you give us a payout account — the provider (bKash, Nagad, Rocket or a bank), the account number and the account name. We use it to pay you and for nothing else. It is never shown to other learners, never used for advertising, and is deliberately kept out of our application logs and error messages; only the people who actually process a payout can see it.

Where we have paid a prize or recorded a purchase, we keep the minimum record of that transaction that accounting requires, separately from your learning account — including after you delete the account.

6. Teacher & institution directory

Institution pages in our public directory carry publicly available facts (name, type, district, founding year). Teacher profiles are created only through a claim/opt-in process by the teacher themselves, or are clearly marked sample profiles. If a page about you or your institution needs correction or removal, contact us and we will act on it.

6b. Teacher verification documents

To teach on EnglishBD, a teacher applies and is verified by us. Verification asks for a photo of a government photo ID (NID, passport or driving licence), a selfie taken at the time, and — for the qualifications shown on a profile — a certificate or transcript. This applies only to people applying to teach. Learners and guardians are never asked for any of it.

These documents are used for one purpose: deciding whether to approve that application, and re-checking it if a safety report is made. They are never shown to learners or guardians, never published on a profile, never used for advertising, and never given to another company except where the law requires it.

They are stored separately from everything else on the platform, on a private disk that the public web server does not serve. They cannot be reached by a link, and only a reviewer signed in to the admin, and the teacher who uploaded them, can open them.

They are deleted 30 days after a decision — approval or rejection — and the profile keeps only the outcome (verified, and which tier), never the document. A teacher can withdraw an application before it is decided and the documents are deleted at once. A teacher who leaves the platform can ask for the same, and their profile stops being verified.

What stays after that is the fact of the check, not the evidence for it: that this person was verified, on what date, and by which tier. That is what a parent is being told when a profile says Verified.

7. AI-assisted features

Some features can be AI-assisted — for example explaining why an answer was wrong. Where such a feature is switched on for your account, the text of your question or answer and the lesson context it belongs to are processed to produce a response.

By design, we look in our own knowledge base and cache first, so many requests are answered from content we already hold and never leave our servers at all. Where an external AI provider is used, it processes the request on our behalf and is not permitted to use it for its own purposes.

8. Service providers

EnglishBD runs on servers we operate ourselves, in a data centre we rent. The site is no longer hosted on Vercel.

We use Supabase for the database, sign-in and file storage; Google for Play billing, AdMob, AdSense, Google Analytics, Google Tag Manager, Firebase Analytics and Firebase Cloud Messaging (push notifications); Meta (Facebook) for advertising measurement; and our own mail server for account and support email.

These providers process data on our behalf under their own security obligations; they are not permitted to use your data for their own purposes.

9. Advertising, analytics & cookies

The public website (articles, dictionary and directory pages) may show advertising served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.

Google’s use of advertising cookies enables it and its partners to serve ads based on your visits to this site and/or other sites on the Internet. You can opt out of personalised advertising by visiting Google’s Ads Settings (adssettings.google.com) or aboutads.info.

We use Google Analytics to understand how the site is used (pages visited, approximate location, device type). Google Analytics uses cookies and similar identifiers; you can opt out with the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).

We load these measurement tags through Google Tag Manager. Tag Manager is a loader rather than a service that collects anything itself: it holds no data about you and sets no cookie of its own. What it loads is what this section lists, and if we ever add anything else this policy is updated in the same change.

When we advertise EnglishBD on Facebook or Instagram, we use the Meta Pixel on this website and Meta's SDK in the mobile app to measure whether an advertisement led to a visit, a sign-up or a subscription. This tells us which advertising is worth paying for; it involves cookies and, in the app, the device advertising identifier. We do not send Meta your name, your email address, your phone number, or anything about your lessons, answers or progress. You can limit this on the web through your browser's cookie settings, and on Android through Settings → Privacy → Ads (“Delete advertising ID”).

In the mobile app we use Firebase Analytics to see how the app is used — which screens are opened, how many lessons are started and finished, which class a learner picked, and how many people are using the app at a given moment. This is what tells us which parts of the app are worth building next.

Firebase Analytics does NOT take your device's advertising ID. It can, by default, and we have switched that off in the app itself, along with the settings that would pass advertising signals on to Google Ads. That means no demographics and no advertising audiences are built from app behaviour. Children use this app, and the advertising ID is declared for one purpose only — the non-personalised ads described below — not for measurement.

What Firebase Analytics receives is the screen, the event, and figures like how many questions were answered correctly. It does not receive your name, your email address, your phone number, anything you typed into a lesson, or anything you asked the AI tutor.

Advertising never appears inside an active lesson session, and the core learning experience remains free.

10. The EnglishBD mobile app

The Android app collects the same account information as the website: your email address and password (managed by our authentication provider, Supabase), your chosen display name, and your learning activity (lessons started and completed, answers you submit for grading, points, hearts and streaks). This is what makes your progress appear on every device you sign in on.

If you sign in with Google, we receive the name and email address on that Google account. We do not receive your Google password, and we do not get access to anything else in your Google account.

The app shows advertising served by Google AdMob: an optional rewarded ad that restores a heart, and an occasional full-screen ad after a completed lesson — never inside an active lesson. AdMob may use your device’s advertising ID; we request non-personalised ads. You can reset or delete your advertising ID in your device’s Google settings.

If you enable notifications, the app schedules daily study reminders on your device and registers a Firebase Cloud Messaging token with us so we can send occasional learning reminders (for example when you have been away a few days). Turning notifications off in the app stops both.

The app stores content you have viewed (lessons, dictionary entries, articles) on your device so it loads instantly and works on weak connections. The app does not access your microphone, camera, contacts, location or files.

11. Data retention & deletion

We keep your account data while your account is active. You can permanently delete your account and all associated data yourself at any time: in the app under Profile → Account → Delete account (which opens a confirmation screen), or on the web at app.englishbd.com/account. Step-by-step instructions live at englishbd.com/account-deletion. Deletion is immediate and irreversible — it removes your login, profile, learning progress, points/streaks and notification registrations from the live service.

Two things survive deletion, and only these: the accounting record of any payment or prize described in section 5, and a Google Play subscription, which is Google’s to cancel and keeps renewing until you cancel it in the Play Store.

12. Children

EnglishBD is designed for general audiences, including school learners. If you are under the age of majority, please use the service with a parent’s or guardian’s knowledge. We do not knowingly collect more information from children than the service requires.

13. Changes to this policy

As the platform grows we may update this policy. We will post updates on this page with a new “last updated” date, and highlight significant changes on the site.

14. Contact

Questions, corrections or deletion requests: email support@englishbd.com, or use the contact page. We aim to respond within a few working days.