🔒 Legal

Privacy Policy

We are committed to protecting your personal information and your right to privacy. Please read this policy carefully.

📅 Last Updated: February 22, 2026
📖 Reading Time: ~8 minutes
🌍 Applies to: All ScholarX users
📋

Information We Collect

When you use ScholarX, we collect certain information to provide you with a personalised, AI-powered learning experience. We collect only what is necessary to operate our platform and improve your education journey.

Information You Provide Directly

  • Account registration details — full name, email address, and password
  • Profile information — grade level, school name, and subject preferences
  • Communication data — messages sent to teachers, support tickets, and feedback forms
  • Payment information — processed securely via third-party payment processors (we never store card numbers)

Information Collected Automatically

  • Usage data — pages visited, courses accessed, time spent on lessons, and test results
  • Device information — browser type, operating system, IP address, and device identifiers
  • Learning analytics — quiz performance, areas of difficulty, and progress metrics used to personalise your AI learning path
  • Log data — error reports, crash logs, and performance data to improve platform stability
ℹ️

We do not collect sensitive personal data such as national identity numbers, biometric data, or health information. All data collection is limited to what is strictly necessary for educational purposes.

⚙️

How We Use Your Data

ScholarX uses your data solely to provide, maintain, and improve our educational services. We are committed to never misusing your information for commercial advertising or selling it to third parties.

Purpose Data Used Legal Basis
Account creation & authentication Name, email, password Contract performance
AI-personalised learning paths Test scores, usage patterns Legitimate interest
Teacher–student matching Subject preferences, grade level Contract performance
Platform improvement & analytics Anonymised usage data Legitimate interest
Customer support communications Contact details, messages Legitimate interest
Legal compliance & fraud prevention IP address, device data Legal obligation
🤝

Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We share data only in the limited circumstances described below, and only with parties that meet our strict data protection standards.

When We May Share Your Data

  • With your teachers: Your name, grade level, and learning progress are shared with your enrolled teachers to facilitate personalised instruction.
  • With your school/institution: If you are enrolled through a school account, basic performance data may be shared with designated school administrators.
  • With service providers: We use trusted third-party providers for cloud hosting (AWS), payment processing (Stripe), and email delivery. All providers are bound by data processing agreements.
  • For legal compliance: We may disclose data when required by Pakistani law or a valid court order.
⚠️

We never share your personal data with advertisers or marketing companies. ScholarX products are completely ad-free and your data is never used for targeted advertising.

🍪

Cookies & Tracking Technologies

ScholarX uses cookies and similar technologies to keep you logged in, remember your preferences, and understand how our platform is being used so we can improve it for everyone.

Types of Cookies We Use

  • Essential cookies: Required for the platform to function — login sessions, security tokens, and user preferences. Cannot be disabled.
  • Analytics cookies: Help us understand how students and teachers use ScholarX (e.g., which features are most popular). Data is fully anonymised.
  • Functional cookies: Remember your settings such as language, dark mode preference, and last-visited course.

We do not use advertising cookies or third-party tracking pixels. You can manage cookie preferences in your browser settings at any time. Disabling analytics cookies will not affect your ability to use ScholarX.

🛡️

Data Security

Protecting your data is our top priority. We implement industry-standard technical and organisational measures to safeguard your personal information against unauthorised access, alteration, disclosure, or destruction.

Our Security Measures

  • All data transmitted between your browser and our servers is encrypted using TLS 1.3 (HTTPS)
  • Passwords are hashed using bcrypt with a minimum cost factor of 12 — we never store plain-text passwords
  • Our databases are encrypted at rest using AES-256 encryption
  • Access to personal data is restricted to authorised personnel on a strict need-to-know basis
  • We conduct regular security audits and vulnerability assessments
  • Two-factor authentication (2FA) is available and strongly encouraged for all accounts

In the event of a data breach that affects your rights and freedoms, we will notify you within 72 hours of becoming aware of the incident, in accordance with applicable data protection laws.

🔐

Your data is stored on secure servers located in Pakistan and the EU. We retain your personal data only for as long as necessary to provide our services. Upon account deletion, your data is permanently removed within 30 days.

⚖️

Your Rights

You have meaningful control over your personal data. Under applicable data protection laws, you have the following rights which you can exercise at any time by contacting our Data Protection Officer.

👁️
Right to Access
Request a copy of all personal data we hold about you at any time.
✏️
Right to Rectification
Correct any inaccurate or incomplete personal data in your profile.
🗑️
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
⏸️
Right to Restrict
Ask us to pause processing your data while a dispute is resolved.
📦
Data Portability
Receive your data in a structured, machine-readable format (JSON/CSV).
🚫
Right to Object
Object to processing based on legitimate interests at any time.

To exercise any of these rights, email us at privacy@scholarx.pk. We will respond within 30 days. There is no fee for exercising your rights.

🧒

Children's Privacy

ScholarX is designed for students in Grade 9–12, which may include users under the age of 18. We take the privacy and safety of young users extremely seriously and have implemented additional safeguards to protect them.

  • Students under 13 years of age must have parental or guardian consent before creating an account.
  • We do not knowingly collect personal data from children under 13 without verified parental consent.
  • School accounts enrolled by institutions take responsibility for obtaining appropriate consent from students and parents.
  • Parents or guardians may contact us at any time to review, modify, or delete their child's account and associated data.
  • Students under 18 cannot make purchases — all transactions require an adult account holder.
⚠️

If you believe a child has provided personal data without appropriate consent, please contact us immediately at privacy@scholarx.pk and we will take prompt action to remove the information.

✉️

Contact & Policy Updates

If you have any questions, concerns, or requests regarding this Privacy Policy or how ScholarX handles your personal data, please don't hesitate to get in touch with our team.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you via email and display a prominent notice on our platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page indicates when this policy was most recently revised. We encourage you to review this policy periodically to stay informed about how we protect your data.

📜

By continuing to use ScholarX after policy updates take effect, you agree to the revised Privacy Policy. If you disagree with any changes, you have the right to close your account and request deletion of your data.

🔒 Privacy Questions?

Still Have Concerns?

Our Data Protection Officer is here to help. We take every privacy query seriously and respond within 30 days.