What we store.
And what we do not.

• Name — what you enter at signup or from your Telegram profile
• Phone number — required; used as your login identifier and to link your Telegram activity
• Email address — optional; used only for password reset if you provide one
• Grade — the educational level you selected
• Preferred language and UI locale — for interface display
• Password hash — bcrypt-hashed; the plain password is never stored
• Telegram user ID, username, and display name — if you connect via the bot

• Every question you answer, your chosen option, and whether it was correct
• Wrong answers saved to your revision ledger
• Login timestamps and last-active time (for account safety)
• Approximate location based on IP address — country-level only, never city or GPS

• Wallet balance in ETB (integer cents)
• Purchase history — which material you bought, when, and for how much
• Transaction ledger — top-ups, purchases, refunds, with dates and amounts
• Reference notes — e.g. Telebirr receipt numbers that an admin enters when topping up your wallet

We never see or store card numbers, PINs, or banking credentials. Top-ups are recorded manually by admin after you send payment via Telebirr, CBE Birr, or cash.

• Which subjects you are assigned to teach
• Which students are enrolled in your subjects
• Questions and materials you have created (publicly attributed to your account)