Privacy Policy

Tathirmichil ("we", "us", or "our") is an IBA admission preparation platform operated by Tathir Mohtadi Chowdhury, an individual based in Bangladesh. This Privacy Policy explains how we collect, use, store, and share information when you use our website at tathirmichil.com and related services (collectively, the "Service").

By creating an account or using the Service, you agree to the collection and use of information as described in this policy.

Account information: When you register, we collect your email address and, if you sign up with email and password, a password stored securely by our authentication provider. You may also provide a display name, profile picture, and optional phone number.

Google Sign-In data: If you choose to sign in with Google, we receive your name, email address, and profile picture from your Google account. We access this information only after you authorize it through Google's consent screen.

Learning activity: We collect data related to your use of the platform, including test answers, scores, analytics, practice history, coin balance, and leaderboard display information.

Device information (premium subscribers): For subscribed users, we collect a device identifier, IP address, browser user agent, approximate location (including coordinates derived from IP), and a history of device sync events for audit and account-sharing review.

Payment information: Subscription and book purchases are processed through bKash. We store transaction references, payment status, and subscription details but do not store your bKash PIN or full payment credentials.

Book order information: When you order The IBA Book or other physical products, we collect your name, phone number, email address, and delivery address.

Communications: If you contact us, submit forms, book sessions, or report problems, we collect the information you provide in those submissions.

We use the information we collect to create and maintain your account, authenticate you, and provide access to platform features such as mock tests, classes, study materials, leaderboards, and batch mentoring.

We use learning activity data to track your progress, generate analytics, operate leaderboards, and improve the educational experience.

We use device information to monitor subscription account usage, detect potential unauthorized sharing, and support admin review. Device data does not block premium access automatically.

We use payment and order information to process subscriptions, fulfill book deliveries, and handle billing inquiries.

We may use your email address to send account-related notifications, such as password resets and subscription updates.

When you sign in with Google, we receive your name, email address, and profile picture from Google. We use this information solely to create and maintain your Tathirmichil account, personalize your profile, and provide the Service.

We do not sell, rent, or share your Google user data with third parties for their marketing purposes. Google user data is not used for advertising.

You can revoke Tathirmichil's access to your Google account at any time through your Google Account settings at myaccount.google.com/permissions. Revoking access will not automatically delete your Tathirmichil account; contact us at tathirmichil@gmail.com if you wish to delete your account.

We use cookies and similar technologies to keep you signed in, cache session information for faster page loads, and associate your browser with a stable device identifier for audit logging.

These include authentication session cookies managed by Supabase, a signed profile cache cookie, and device-related cookies used for device identification.

You can control cookies through your browser settings, but disabling essential cookies may prevent you from signing in or accessing certain features.

We use trusted third-party services to operate the platform. These providers process data on our behalf and are bound by their own privacy policies:

Google — OAuth sign-in authentication.

Supabase — user authentication, database storage, and file storage.

Firebase (Google) — real-time leaderboard and coin balance data.

Vercel — website hosting and content delivery.

bKash — payment processing for subscriptions and book orders.

FingerprintJS — device identification for subscribed student device audit and monitoring.

We share only the minimum data necessary for each provider to perform its function. We do not sell your personal information to third parties.

We retain your account information and learning activity for as long as your account is active or as needed to provide the Service.

If you request account deletion, we will delete or anonymize your personal data within a reasonable timeframe, except where retention is required for legal, billing, or dispute-resolution purposes.

Aggregated or de-identified data that cannot reasonably be linked to you may be retained for analytics and platform improvement.

We implement reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), secure authentication, and access controls on our databases.

No method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

You may update your profile information through your account settings.

You may request access to, correction of, or deletion of your personal data by contacting us at tathirmichil@gmail.com.

You may opt out of non-essential communications by contacting us. Account-related notifications may still be sent when necessary.

Michil is designed for students preparing for university admission. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

If you are under 18, you should use the Service with the knowledge and consent of a parent or legal guardian. If you believe we have collected information from a child without appropriate consent, please contact us and we will take steps to delete it.

Your information may be processed and stored on servers located outside Bangladesh, including in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these locations.

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, contact us at tathirmichil@gmail.com.

Operator: Tathir Mohtadi Chowdhury, Tathirmichil, Bangladesh.