Skip to main content
Data Protection & Privacy Policy

Privacy Policy

EduraCore is committed to protecting the privacy, security, and personal data of our learners, academic students, job candidates, and working professionals. This Privacy Policy details how we collect, handle, protect, and delete your data in full compliance with global standards and the Google API Services User Data Policy.

Last Updated: September 2026•Version 2.0 (Google OAuth & Global Compliance Verified)

For Academic Students

Tailored for school, college, university, and competitive exam candidates.

For Job Seekers & Professionals

Dedicated corporate communication, career drills, and spoken fluency tracks.

1Introduction & Purpose

EduraCore ("EduraCore", "we", "our", or "us"), accessible at https://www.eduracore.com, is an online English language learning platform designed to empower learners with structured grammar, vocabulary mastery, dual-accent phonetics (American & British), Spoken English drills, and AI-assisted educational evaluation. This Privacy Policy describes how we collect, store, utilize, and protect your information when you access our platform or register an account.

2Information We Collect

Information You Provide to Us:
  • •Account Identity: Your full name and email address when you register via standard sign-up or via Google OAuth.
  • •Contact Information: Phone number provided for emergency account recovery and verification.
  • •Security Credentials: Passwords are cryptographically salted and hashed using Bcrypt. We never store plain-text passwords.
  • •Curriculum Preferences: Selected learning track (General, Madrasah, or Professional), accent preference (American or British), and age / date of birth.
Automatically Collected Learning Data:
  • •Learning Progress: Completed lessons, quiz scores, 80% mastery achievements, and spaced-revision intervals.
  • •Streaks & Activity: Daily practice streak counters, active study session timestamps, and badges earned.
  • •Technical Telemetry: Browser type, operating system, IP address, and security logs strictly used for rate limiting and platform stability.

🎤 Voice & Audio Privacy in Spoken English Exercises:

When using our Spoken Voice and Read-Aloud exercises, your voice is converted to text client-side directly within your browser using the standard Web Speech API. We do not record, store, or sell your raw audio files on our servers. Only the resulting text transcript is evaluated for pronunciation, grammar, and fluency feedback.

3How We Use Your Information

  • Account Authentication & Access: Managing user sessions, multi-device safety limits, and providing seamless sign-in.
  • Personalized Curriculum & 80% Mastery: Enforcing prerequisite mastery benchmarks so learners master core topics before advancing.
  • AI Educational Evaluation: Generating actionable grammar corrections, vocabulary suggestions, and constructive speaking feedback.
  • Subscription Management: Verifying premium membership activation, invoice records, and vocabulary bank access.
G

4. Google API Services User Data Policy Compliance

Mandatory Disclosure for Google OAuth Authentication

EduraCore allows users to sign in conveniently and securely using their Google Account via Google OAuth 2.0. Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy , including the Limited Use requirements.

✓ Scopes We Request

We request only standard non-sensitive scopes: openid, profile, and email.

✓ Sole Purpose: Identity & Auth

Google data is used solely to authenticate your identity and display your name and profile avatar on EduraCore.

🚫 Zero Commercial Sale of Data

We never sell, rent, monetize, or broker Google user data to any external parties or data aggregators.

🚫 Zero Advertising & Retargeting

Google user data is never used to build advertising profiles, serve targeted ads, or train external commercial AI models.

5Third-Party Service Providers

To provide a modern, high-speed educational experience, we partner with industry-leading cloud providers under strict data processing agreements:

ProviderFunctionData Shared & Safeguards
Google OAuth 2.0Secure authenticationAuthorized email, name, and profile picture only.
Google Gemini APIEducational feedback & grammar scoreSubmitted writing/speaking text without user identity.
ElevenLabsHigh-fidelity pronunciation audioNo personal data (lesson text content only).
MongoDB AtlasEncrypted cloud database storageEncrypted at rest (AES-256) and in transit (TLS 1.3).
bKash / Nagad / SSLCommerzPremium course payment processingTransaction ID and amount. No card PINs or secrets stored.

6Data Retention & 30-Day Account Deletion Policy

You own your personal data. EduraCore gives every learner full control over their account lifecycle, including transparent data deletion with a 30-day grace period:

The 30-Day Recovery Grace Period

When you initiate account deletion from your Dashboard Settings, your account is immediately scheduled for permanent deletion 30 days from that date. During this 30-day window, your profile is hidden from leaderboards and public rooms. If you change your mind, simply log back in within 30 days and click "Cancel Deletion" to restore your account.

Permanent Purge of Personal Identifiable Information

If the 30-day period expires without a login, our automated system permanently and irreversibly purges your name, email, password hashes, Google OAuth tokens, speech transcripts, and active sessions from our database.

How to Request Immediate Account Deletion:
  • Method 1 (In-App): Navigate to your Student Dashboard → Settings → Danger Zone and click "Request Account Deletion".
  • Method 2 (Email Support): Send an email from your registered address to contact@eduracore.com with the subject line "Account Deletion Request".
  • Method 3 (Revoke Google Permissions): You can revoke EduraCore's access at any time via your Google Account Security Settings.

7Children & Student Safety

EduraCore provides an educational learning space suitable for school and college learners. For students under the age of 18, we strongly advise parental or guardian awareness when creating an account. Our platform maintains a 100% ad-free environment with zero behavioral profiling, tracking cookies, or commercial marketing targeting minors.

8. Data Security & Official Contact

We enforce robust technical and organizational security measures including TLS 1.3 encryption in transit, isolated database environments, rate limiting, bot protection, and strict role-based access control. If you have any inquiries, privacy concerns, or data requests, please contact our official Data Protection and Support team:

Email: contact@eduracore.comDhaka, Bangladesh • Response within 24-48 business hours