Privacy Policy

Senura Prabath Weragala operates CHEM.LK and the Chemistry student LMS at lms.chem.lk. This notice explains information used for our tuition, student accounts, learning resources and support.

• Account and learning: name, verified mobile number and chosen service; examination year and course for class registration; structured postal address and guardian number for online classes or printed tutes; a student-confirmed working backup number for courier delivery; service permissions, account status, access and quiz results. Physical-only, digital-lesson-only and AI-only signup do not require delivery contacts.
• Payments: order details, fee status, amount, bank selected, uploaded payment slip and review history. Slips may contain payer or bank information; upload only what is needed to identify the payment.
• Support: messages and contact details you voluntarily send by phone, WhatsApp or email.
• Technical records: login/session identifiers, security and request logs, and AI usage records such as request time, length and token/cost counts. Hosting and service providers may process IP addresses and device/browser information.

New LMS registration and login use SMS OTP, not email or passwords. Historical email information may remain on older accounts or transaction records. Contact us to ask about correction or removal where appropriate.

We use information to verify and manage student accounts, process enrolment and access, review payments, deliver agreed learning materials, respond to support/refund requests, measure AI allowance use and prevent account sharing or misuse. Postal and guardian details support online tuition and agreed printed-note delivery. A delivery request keeps a copy of the recipient details; approved or dispatched requests retain that copy when the profile changes. The courier receives the recipient address, primary phone and backup phone needed to deliver the requested tutes. We do not sell student personal information.

When you use Chemistry AI, your question, any attached image and relevant recent conversation are processed by OpenAI to generate an answer. Our current chat history stays in page memory and is cleared when the page/account context is reset; this is not a promise that all providers retain no data. Our AI request asks OpenAI not to store the response as an API response object. Provider security/abuse monitoring and retention practices may still apply.

The LMS records usage metadata to manage the allowance. Do not include unnecessary personal or confidential information in questions or photos. AI output can be incorrect; verify important chemistry answers with your teacher.

• Supabase: account authentication, database and file storage, including private payment receipts and protected PDFs.
• Text.lk: SMS verification messages and the destination mobile number.
• OpenAI / ChatGPT Sites and hosting infrastructure: website hosting; OpenAI also processes Chemistry AI requests as described above.
• YouTube and Google Drive: embedded videos and linked learning files. These providers receive the requests needed to display their content. A file deliberately shared through a public Drive link is not protected in the same way as a private LMS file.
• Google Fonts and external image hosts: font or bank-logo requests may disclose ordinary connection information such as IP address.
• WhatsApp, email providers and banks: when you choose those channels for enquiries or payment. If card checkout is enabled later, its payment provider will receive the details needed for that transaction.

Services may process data outside Sri Lanka. Authorized staff can access records needed for their duties. Information may also be disclosed where required by law or necessary to address fraud or security incidents.

Essential browser storage keeps login sessions and interface state. Clearing or blocking it may sign you out or affect functionality. We use access controls and protected storage for restricted records, but no online service can guarantee absolute security. Student accounts allow one active device session at a time; another successful login can end the previous session.

We retain records as needed to supply purchased services, administer accounts, resolve payment disputes and meet applicable record-keeping obligations. We do not promise an automatic deletion date for all records. You may request access, correction or deletion through our contact channels; we verify your identity and explain any records that must be retained. Removing an account may affect access to purchased services, so we will explain that consequence before carrying out the request.

Parents or guardians can contact us about a minor’s account. Provide guardian information only with that person’s knowledge. Updates to this policy will show a revised date on this page.