Privacy Policy

Effective date: September 3, 2026

This Privacy Policy explains how විදු අරණ (Vidu Arana) collects, uses, and shares information when you use our mobile application. We handle personal data responsibly under applicable Sri Lankan law and the requirements of the Google Play Store and Apple App Store. This app does not show advertisements to students or teachers.

1. Identity and contact details

This policy applies to the Vidu Arana mobile app.

• App name: Vidu Arana (විදු අරණ)
• Company: VIDU ARANA (PVT) LTD
• Address: No 142/1, B.O.P 316, Lankapura, Thalpotha, Polonnaruwa
• Contact email: viduaranaofficial@gmail.com
• Telephone: +94 7676 74 490
• Effective date: September 3, 2026

2. Exact types of data collected

We collect only the information needed to run the app. The types of data are listed below.

Device identifiers are used only so the app can send notifications to your phone. We do not use them for advertising or to track you across other apps.

Information you provide

• Email address
• Password (for email registration). Passwords are stored hashed by our authentication service and are not readable by us
• Google account identifiers and email, if you choose Google Sign-In
• Full name
• Phone / contact number
• Account role (student or teacher)
• Preferred language
• Teacher qualification and biography (optional)
• Teacher profile photos you upload

Device and technical information

We collect a small set of technical details so the app can work on your phone. We do not use this information for advertising or tracking you across other apps.

• Push notification token: a token created by the device so we can send class and account notifications to this phone. It is collected only if you allow notifications.
• Device identifier: Android ID on Android, or Identifier for Vendor (IDFV) on iOS. We use it only to recognise this device for push delivery and to turn notifications on or off for that device. This is not an Advertising ID (GAID / IDFA). We do not collect Advertising ID.
• Device platform: whether you are using Android or iOS, so we can send the correct type of notification.
• App version: so we can support the version you are running.
• IP address: our cloud providers may process your IP address automatically when the app connects to our servers. We do not use IP address for advertising.
• Crash and diagnostic data: in production builds, Firebase Crashlytics may collect crash logs, device model, OS version, and app version so we can find and fix stability problems. This is not used for advertising.

Class and learning information

• Classes you create or join, including class name, subject, grade, schedule, and similar class details
• Class meeting location published by the teacher (address and map coordinates), so students can find the class
• Current location: collected only when a user opens the class map. We use it at that moment to measure how far they are from the class and to show directions. We do not collect location in the background, and we do not use location for advertising
• Join requests, including the name and contact number a student submits
• Notices and schedules
• Learning materials and homework files, plus related file details
• Feedback and ratings
• Classes a student saves

Support information

• Problem category, title, and description
• Optional contact email
• Your role, app version, and platform

Payment information (teachers only)

• We do not collect, see, or store card numbers, CVV, card expiry dates, or cardholder names in our database.
• If a teacher pays for a subscription, card details are entered on the payment provider (PayHere) only. That provider processes the payment.
• In our database we keep only subscription plan and status, and payment order identifiers and amounts needed to show plan status in the app.
• We may send the teacher's name, email, and phone to the payment provider to complete checkout. We do not store card details from that checkout.

Permissions we may request

• Camera and photos / media library: for a teacher profile picture only
• Location while using the app: only when the class map is opened, to show distance and directions from the user's current location to the class. We do not use background location
• Notifications: for class and account push alerts

Permissions we do not request

• Contacts
• Microphone
• Background location
• Advertising ID (IDFA / GAID)

3. Third-party services and SDKs

Vidu Arana uses third-party companies so we can operate the app. Under Google Play rules, data handled by third-party code in our app is treated as data we are responsible for.

We name the companies that process data for us. We do not describe the internal design of our systems.

These companies act as our service providers. They handle information on our behalf. We do not sell your personal information to them.

This app does not play or display ads for students or teachers. We do not use advertising networks in this app.

Service providers we use

• Google hosts our backend, database, file storage, and cloud infrastructure, and processes this data on our behalf. Google Privacy Policy
• Google Sign-In, if you choose to sign in with a Google account. Google Privacy Policy
• Expo, for the app platform and push-notification delivery. Expo Privacy Policy
• Google Maps, for maps and directions to class meeting points. Google Privacy Policy
• Firebase Crashlytics (Google), for crash and stability diagnostics in production builds. Firebase Privacy Policy
• PayHere, only if a teacher pays for a subscription. Card details are entered on PayHere, not in our app database. PayHere Privacy Policy

What we do not use

• Advertising SDKs. This app does not show ads to students or teachers
• Separate marketing or product-analytics SDKs in the production app

4. Data usage and purpose

We use the information described above for the following purposes.

• User authentication and account management, including email verification and Google Sign-In
• App functionality, including class discovery and joining, notices, schedules, materials, homework, feedback, and teacher class management
• Personalization, including role-based features and language preference
• Push notifications and in-app inbox delivery
• Maps and directions. When a user opens the class map, we use their current location only at that time to show distance and the route to the class
• Support and problem reports
• Crash diagnosis and app stability improvements
• Teacher subscriptions. Every teacher receives a one-month free trial with limited access when they create an account, so they can understand the app and its teaching features. After the trial, paid plans may apply. We do not collect card details in our database
• Security, fraud prevention, and operating the service on our cloud infrastructure

5. How we share information

We share information only in the situations listed below.

• With other users as needed for the product. For example, teachers see student join details for their classes, and students see teacher and class information that teachers publish
• With the service providers listed in Section 3, who process data on our behalf so we can run our backend, database, cloud infrastructure, maps, push notifications, and payments
• When required by law, or to protect the rights, safety, and integrity of users and the service
• We do not sell your personal information, and we do not share it with third parties for advertising. This app does not show ads to students or teachers

6. Data security and encryption

We protect personal data with industry-standard safeguards appropriate to the nature of the information.

• Data is encrypted in transit using HTTPS / TLS when communicated with our servers and cloud infrastructure
• We use access controls on our cloud backend
• Authentication session material is stored in secure on-device storage where available
• No method of transmission or storage is completely secure, so we cannot guarantee absolute security

7. User rights and account deletion

You can update certain profile details in the app. You can also manage language, appearance, and device notification permissions.

If you have created an account, you can delete it in the app. Open Settings, then Delete account. Review the explanation and confirm. We will delete your login account and associated personal profile data as described below.

You can also request account deletion on the web. Open Request account deletion, email us from the address linked to your account, and we will contact you to confirm before deleting your account.

What we remove or anonymize when you delete your account

• Your login account
• User and profile records in our database
• Device and push tokens, and notification preferences
• Saved classes
• Teacher profile images in our storage
• Membership and join-request records tied to your account, where applicable

What may be retained

• Teacher-owned classes are marked so the teacher account is no longer active for those classes
• Some payment or transaction records may be kept in anonymized or limited form for legal, accounting, or fraud-prevention purposes

8. Children’s privacy (COPPA)

Vidu Arana is an education platform for students and teachers. It is not primarily directed at children under 13. Students may use the app with appropriate parental or guardian guidance.

We do not knowingly collect personal data from children under 13 without appropriate parental or guardian consent or guidance. If you believe a child has provided personal data improperly, contact us at viduaranaofficial@gmail.com so we can take appropriate action.

9. Data retention

We keep personal data for as long as your account is active, and as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.

After you delete your account, we delete or anonymize personal data as described in Section 7, except where retention is required by law or for legitimate security or financial reasons.

10. International processing

Your information may be processed on servers located outside Sri Lanka. Our cloud infrastructure is hosted by Google. Where we do so, we take steps designed to protect your information consistently with this Policy.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The Effective date at the top will change when we do. Continued use of the app after an update means you acknowledge the revised Policy.

12. Contact

For privacy questions or requests, email viduaranaofficial@gmail.com. You can also use Report a problem in Settings and mention that your message relates to privacy.