Privacy Policy
Last updated: 12 November 2026
This policy explains what information EZPZ collects, why, who receives it, how long we keep it, and the choices you have.
1. Who is responsible
EZPZ (EzPz Academy, ezpzacademy.com) is run by Md Tanvir Alam (CTO and Founder) and Minhaz Fahim (Co-founder), in Dhaka, Bangladesh. For anything about your information, contact Md Tanvir Alam at [email protected].
2. What we collect
- Account details: your name, your mobile number or email address, and your password. The password is stored only in scrambled (hashed) form.
- Profile and settings: your role, exam goals, language and the settings you choose.
- Study activity: your answers, practice, tests and results, review progress, saved items, and reports you send about a question.
- AI Mentor: the questions and messages you send, the images you attach, the replies, and how much of your AI allowance you use.
- Payments: the plan, amount, date, status and transaction ID of each payment, and for a manual bKash payment the number you sent from. You enter card and wallet details on PayStation's page, not on ours.
- Teachers, batches and tests: the batches, tests and rooms you create or join, their results, and the material teachers upload.
- Messages to us: what you write through Help and contact or Contact us is emailed to our team; it is not stored in the app.
- Technical data: your IP address, device and browser details, and security signals, used to keep EZPZ safe and to stop abuse. If you turn on notifications, the push address of that device.
3. How we use it
We use your information only to run EZPZ: to create your account and sign you in, give you the study tools and plan you chose, take payments and keep their records, answer AI Mentor requests and mark written answers, send codes, account messages and the reminders you turn on, fix problems, and protect EZPZ against fraud and misuse.
- We never use student data to train AI models.
- We never sell your information.
- We show no ads.
4. Offers by SMS or email
We may send you offers by SMS or email. To stop them, contact us at [email protected] or on WhatsApp. Messages about your account, payments and security still come.
5. Services that receive data
Other companies run parts of EZPZ for us. Each receives only what it needs for its job.
- AI: Google (Gemini, through Google Cloud Vertex AI) and OpenAI. They receive your AI Mentor messages and images, answers to be marked, the question content, and teachers' material for the slide decks, sheets and tests they make.
- Email: Resend delivers our emails (your email address and the message).
- SMS: BDBulkSMS, in Bangladesh, delivers our SMS (your mobile number and the message).
- Payments: PayStation processes online payments. bKash carries manual payments you send.
- Servers: DigitalOcean hosts our servers and stores our data in Singapore.
- Security and delivery: Cloudflare carries traffic to our website and runs the bot check on sign-in, sign-up and password reset.
- Password check: when you set a password, the first 5 characters of a scrambled form of it are checked against Have I Been Pwned's list of leaked passwords. Your password itself is never sent.
- Notifications: if you turn them on, notifications reach your device through your browser's push service (for example Google, Apple or Mozilla).
Some of these services are outside Bangladesh. Data sent to them is protected by their own terms and by our using them only to run EZPZ.
Teachers see the results and answer sheets of students in their batches and tests, and a Room host sees those of its participants. We disclose information when the law requires it.
6. The WhatsApp support group
We run a WhatsApp group where offline mentors help students. Joining is optional. In the group, members can see each other's phone numbers. WhatsApp is run by Meta under its own terms.
7. Cookies and storage in your browser
A sign-in cookie keeps you signed in; EZPZ cannot work without it. We also keep small settings in your browser, such as your theme and the answers of a test in progress, so a page reload does not lose them. We use no advertising cookies. Cloudflare may set its own cookie to run the bot check.
8. Security
Connections to EZPZ are encrypted, and passwords are stored only in scrambled form. No system is perfectly safe, so please use a password you do not use anywhere else.
9. How long we keep it, and deleting your account
- We keep your information securely, also after an account is deleted (below).
- Images attached to the AI Mentor are deleted after 24 hours.
- A student can delete their account from Sign-in and security. Deleting your account closes it at once and signs you out everywhere. For 30 days you can contact us to restore it. After that it is closed for good and cannot be restored. Your data is kept securely and is no longer shown or used in the service, and your phone number and email can be used for a new account.
- Teachers can ask us to close their account through Contact us.
10. Your rights
You can ask to see the information we hold about you or to correct it, and you can delete your account as described above. Write to [email protected]. We answer within 30 days. You can change your profile and settings yourself in your account.
11. Students under 18
If you are under 18, you confirm that a parent or guardian agrees to you using EZPZ and to any payment (see our Terms of Use).
12. Changes to this policy
We may update this policy. The date at the top shows the latest version. If a change is significant, we tell you in the app or by email.
13. Contact
Privacy questions and requests: Md Tanvir Alam, [email protected]. Other ways to reach us are on Contact us.