PassMark Sri Lanka ("PassMark", "we", "us", or "our") operates the passmark.lk website and mobile-friendly web application (the "Service"), an O/L exam preparation platform for students in Sri Lanka. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
1. Information We Collect
We collect the following categories of information when you use the Service:
- Account information: your name, mobile number (used for OTP login), grade, medium of instruction, and selected subjects.
- Usage data: quiz attempts, answers, scores, study streaks, and time spent practising, which we use to power your dashboard, progress tracking, and Daily Quiz features.
- Payment data: when you purchase PassMark Pro or an elective subject, payment is processed by our payment partner, PayHere (Pvt) Ltd. We do not store your card number, CVV, or bank credentials on our servers — PayHere handles that directly and shares with us only the transaction status, amount, and a payment reference.
- Parent/guardian contact (optional): if you enable weekly progress reports, we collect a parent or guardian's phone number to send WhatsApp/SMS summaries.
- Technical data: device type, browser, and basic diagnostic logs used to keep the Service secure and working correctly.
2. How We Use Your Information
- To create and manage your student account and authenticate you via OTP.
- To personalise quiz content by grade, medium, and subject.
- To track your progress, streaks, and performance analytics.
- To process payments and manage your PassMark Pro or elective-subject access.
- To send you service-related SMS/WhatsApp notifications (e.g. OTP codes, payment confirmations, refund status updates).
- To improve the Service, fix bugs, and develop new features such as the Daily Quiz.
3. Sharing of Information
We do not sell your personal information. We share data only with:
- PayHere (Pvt) Ltd — to process payments securely on our behalf.
- SMS/WhatsApp delivery providers — to send OTP codes and account notifications.
- Legal authorities — only if required by Sri Lankan law or a valid legal request.
4. Data Retention
We retain your account and quiz-history data for as long as your account is active, so you can track long-term progress. You may request deletion of your account and associated data at any time by contacting us (see Section 7).
5. Data Security
We use industry-standard measures, including encrypted connections (HTTPS) and hashed session tokens, to protect your data. No online service can guarantee absolute security, but we take reasonable steps to safeguard your information from unauthorised access.
6. Children's Privacy
PassMark is designed for O/L students, many of whom are minors. We collect only the minimum information required to provide the Service (name, phone number, grade, and subjects) and encourage parents/guardians to be involved in their child's account, including via the optional parent report feature.
7. Your Rights & Contact
You can review or update most of your account details from your Profile page at any time. To request a copy of your data, ask a question about this policy, or request account deletion, contact us at support@passmark.lk.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.