At Coursaily, we believe your privacy matters as much as your learning. This Privacy Policy explains clearly what data we collect, why we collect it, how we use it, and the choices you have. We are committed to handling your personal information responsibly and in accordance with applicable Pakistani laws.
Overview
Coursaily ("we," "us," or "our") operates a WhatsApp-based educational platform that delivers AI-powered micro-courses to learners in Pakistan. Our registered business address is 552-1C1 Township, near Butt Chowk, College Road, Lahore, Pakistan.
This Privacy Policy applies to all information collected when you interact with Coursaily through our WhatsApp number (+92 326 4586236), our website at coursaily.com, or any other Coursaily service.
Because we deliver our services through WhatsApp, your use of our platform is also subject to Meta's Privacy Policy and WhatsApp's Privacy Policy. We encourage you to review those policies as well.
By using Coursaily's services, you consent to the collection and use of your information as described in this Privacy Policy.
Data We Collect
We collect the minimum information necessary to provide you with a high-quality learning experience. Here is a complete breakdown of what we collect and why:
| Data Type | What We Collect | Why We Collect It |
|---|---|---|
| Identity Data | Your name (as you provide it or from your WhatsApp profile), WhatsApp phone number | To identify your account, personalise your learning experience, and address you correctly |
| Contact Data | WhatsApp phone number | To deliver course content, send reminders, and communicate with you |
| Learning Data | Course enrolled, day progress, quiz answers, scores, lesson responses, language preference | To track your progress, deliver personalised teaching, calculate scores, and issue completion badges |
| Conversation Data | Messages you send to our WhatsApp bot (last 10 messages retained at any time for AI context) | To provide contextual, personalised AI teaching responses within the current lesson |
| Payment Data | Payment confirmation reference, amount paid, payment method used | To verify enrollment, maintain payment records, and process refunds if applicable |
| Technical Data | Timestamps of interactions, message delivery status, phase and step in course flow | To operate our platform, diagnose issues, and improve service quality |
| Usage Data | Course completion rates, quiz performance, lesson engagement patterns | To improve our courses and AI teaching methodology |
We do not collect sensitive personal data such as national identity card (CNIC) numbers, biometric data, financial account numbers, health information, or precise location data.
How We Use Your Data
We use your personal data only for the purposes for which it was collected or for compatible purposes. Specifically, we use your data to:
- Deliver course content — sending daily lessons, quizzes, badges, and cheat sheets through WhatsApp
- Personalise your learning — adjusting AI teaching responses based on your language preference, progress, and quiz performance
- Track and report progress — maintaining your course progress, calculating quiz scores, and issuing completion certificates
- Send reminders and nudges — automated messages encouraging you to continue your course after periods of inactivity
- Process payments — verifying enrollment fees and maintaining payment records
- Provide customer support — responding to your queries, concerns, and refund requests
- Improve our services — analysing aggregated, anonymised learning data to improve course quality and AI teaching effectiveness
- Comply with legal obligations — maintaining records as required by applicable Pakistani law
- Marketing (with consent) — notifying you of new courses or features. You may opt out at any time
We will never sell your personal data to third parties. We will never use your data for purposes unrelated to our educational services without your explicit consent.
WhatsApp & Meta
Coursaily delivers its services exclusively through Meta's WhatsApp Business Cloud API. This means:
- All messages exchanged between you and Coursaily pass through Meta's WhatsApp infrastructure
- Meta processes message metadata (such as sender, recipient, and timestamp) in accordance with their own privacy policy
- WhatsApp messages on the platform are end-to-end encrypted between your device and WhatsApp's servers
- As a WhatsApp Business API user, we receive and store the content of messages you send to our bot for the purpose of delivering our service
Important: Coursaily is an independent business using WhatsApp's business messaging service. Meta does not control or direct how we use the message content you send to our WhatsApp number. Our use of that content is governed entirely by this Privacy Policy.
Your interaction with WhatsApp itself — including your WhatsApp account, contacts, and any other conversations — is governed by Meta's and WhatsApp's own privacy policies, not this policy.
AI Processing of Your Data
Coursaily uses artificial intelligence (specifically, large language models accessed via OpenRouter) to power our teaching experience. Here is how your data interacts with our AI systems:
- Context window: Your last 10 messages in each lesson are temporarily included in the context sent to our AI model. This allows the AI to provide relevant, contextual teaching responses
- Memory clearing: Your conversation history is automatically cleared at the start of each new day's lesson. No conversation from Day 1 persists into Day 2's AI context
- Student profile: Basic information such as your name, course, current day, step, score, and language preference is included in AI prompts to personalise teaching
- AI provider: We use OpenRouter to access Google's Gemini AI models. Your data is processed by these models in accordance with OpenRouter's and Google's applicable data processing agreements
- No training on your data: We do not authorise our AI providers to use your personal conversations to train their models
AI-generated teaching responses are not stored permanently beyond what is needed to maintain the active conversation window. We retain aggregate, anonymised performance data to improve our course design.
Third Party Services
To deliver our services, we work with the following trusted third-party service providers. Each processes your data only to the extent necessary to provide their service to us:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Meta / WhatsApp | Message delivery infrastructure | Phone number, message content |
| Supabase | Secure database for student profiles and progress | Phone number, name, course data, scores |
| OpenRouter / Google Gemini | AI teaching engine | Lesson context, recent messages, student profile (anonymised) |
| Google Sheets | Course content management and student tracking | Name, phone number, course progress |
| Cloudinary | Storage and delivery of badges and cheat sheets | No personal data — only course media files |
| DigitalOcean | Server hosting for our backend infrastructure | All data processed by our system passes through these servers |
| Payment Processors (JazzCash, EasyPaisa, Safepay) | Processing course enrollment payments | Transaction amount, reference ID. We do not receive or store your wallet PIN or bank credentials |
We require all third-party service providers to maintain appropriate security standards and to process your data only for the specified purpose. We do not share your data with any third party for their own marketing or commercial purposes.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:
- Active student data — retained for the duration of your course enrollment and for 12 months thereafter to support any queries or re-enrollment
- Conversation history — active lesson context is cleared daily. Full conversation logs are retained for 30 days for quality assurance and support purposes, then deleted
- Payment records — retained for 7 years in accordance with Pakistani financial record-keeping requirements
- Completion records — your course completion status and badges earned are retained indefinitely so you can verify your achievement
- Inactive accounts — if you have not interacted with Coursaily for 24 months, we will delete your personal data except for payment records and completion records
You may request deletion of your data at any time — see Your Rights below.
Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your information against unauthorised access, loss, or misuse. These measures include:
- SSL/TLS encryption for all data transmitted to and from our servers
- Secure, access-controlled database infrastructure hosted on DigitalOcean
- Environment variable protection for all API keys and sensitive credentials
- Regular security reviews of our codebase and infrastructure
- Strict access controls — only authorised Coursaily team members can access student data
- No storage of payment credentials — we never store your JazzCash PIN, EasyPaisa password, or bank account details
While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but commit to notifying you promptly if we become aware of a data breach affecting your personal information.
If you suspect any unauthorised access to your Coursaily account, please contact us immediately at hello@coursaily.com.
Your Rights
You have the following rights regarding your personal data. To exercise any of these rights, contact us at hello@coursaily.com or WhatsApp us at +92 326 4586236. We will respond within 14 business days.
Request a copy of the personal data we hold about you
Ask us to correct any inaccurate or incomplete personal data
Request deletion of your personal data, subject to legal retention requirements
Withdraw consent for marketing communications at any time by messaging "STOP"
Request your data in a structured, machine-readable format
Object to processing of your data for marketing or analytics purposes
Exercising your rights is free of charge. We may need to verify your identity before fulfilling certain requests. Deletion of your data will result in loss of access to any active or future courses associated with your account.
Children's Privacy
Coursaily's services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are between 13 and 18 years of age, you must have the consent of a parent or legal guardian to use our services.
If we become aware that we have collected personal data from a child under 13 without verifiable parental consent, we will take steps to delete that information promptly. If you believe we have inadvertently collected data from a child under 13, please contact us immediately at hello@coursaily.com.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify active students via WhatsApp message summarising the key changes
- Where required by law, seek your consent before implementing material changes
We encourage you to review this Privacy Policy periodically. Continued use of our services after the effective date of any changes constitutes your acceptance of the updated policy.
Previous versions of this Privacy Policy are available upon request by emailing hello@coursaily.com.
Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal data, please contact our Privacy team:
- Email: hello@coursaily.com
- Website: coursaily.com
- Address: 552-1C1 Township, near Butt Chowk, College Road, Lahore, Pakistan
We are committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant Pakistani regulatory authority.
This Privacy Policy was last updated on April 13, 2026 and is effective from this date. It supersedes all previous versions of Coursaily's Privacy Policy.