Privacy Policy

This Privacy Policy explains how Chiyali Technology Pvt. Ltd. ("Chiyali", "we", "us") collects, uses, shares and protects personal information when you use https://chiyali.com (the "Platform"). We handle personal information in accordance with the Individual Privacy Act, 2075 (2018) of Nepal and its regulations, and we keep electronic records in accordance with the Electronic Transactions Act, 2063 (2008).

Chiyali Technology Pvt. Ltd. is the party responsible for your personal information. Registered office: Lalitpur Metropolitan City, Ward No. 22, Lalitpur, Nepal. Company registration: Registration in progress. Contact: legal@chiyali.com.

1. Information we collect

When you create an account

• From Google sign-in (or GitHub, where offered): your name, email address, profile picture and the account identifier the provider gives us, along with the sign-in tokens the provider issues so we can keep you signed in. We never receive your Google password.
• Session information: when you sign in we record the IP address and browser/device description (user agent) of the session, to keep your account secure.

If you become an instructor

• Your public profile: handle, display name, biography and profile image.
• Your mobile phone number, which we verify by sending a one-time code by SMS. We store only a one-way hash of the code, never the code itself.
• The bank or wallet details you enter when you request a payout, kept with that payout request.

When you buy a course

• Purchase details: the course, price, any discount code used, the payment method (eSewa, Khalti or Fonepay) and the date.
• Payment references returned by the payment gateway — transaction and reference numbers, payment status, and the gateway's response as sent to us. We do not receive or store your wallet PIN, password, or full card details; you enter those only on the gateway's own page.
• Invoice details: your name and email address as they appear on the invoice we issue.

When you learn and take part

• Course progress: which lessons you have completed, and certificates issued to you (with your name as it was when the certificate was issued).
• Content you post: reviews, questions and replies on lessons, support tickets, reports about content, and your wishlist.

Cookies and similar technologies

• A session cookie that keeps you signed in.
• A referral cookie that records which instructor's link brought you to the Platform, kept for 30 days, so that instructor can be credited if you buy their course.
• Your light/dark theme preference, stored in your browser.

We do not use advertising cookies or sell data to advertisers.

2. Why we use it

• To create and secure your account and keep you signed in.
• To sell you courses, confirm payments with the payment gateway, give you access, issue invoices, and handle refunds.
• To run the instructor programme: verify instructors' phone numbers, calculate earnings, and pay instructors.
• To track your progress, issue certificates, and let anyone you share a certificate with verify that it is genuine.
• To send service emails — invoices, replies to your questions, and support responses. We do not send marketing email without your consent.
• To prevent fraud and abuse, enforce our Terms of Service and Content Policy, and comply with the law, including tax and accounting obligations.

3. What others can see

• Instructor profiles, published courses, and instructor replies are public.
• Instructors can see the name of each person who bought their course on their sales page, and the name of anyone who asks a question or leaves a review on it.
• Anyone who has a certificate's verification code or QR code can see the certificate holder's name, the course, and the issue date. You choose whom to share it with.

4. Who we share it with

We share personal information only with service providers who process it for us, under their own security and confidentiality obligations, and only as needed for the purpose described:

Some of these providers process data outside Nepal. We also disclose information when required by Nepali law, a court order, or a competent authority, and to protect the rights and safety of our users and the Platform. We do not sell personal information.

5. How long we keep it

• Account and profile information: for as long as your account is open, and deleted or anonymised after you ask us to close it, except as below.
• Purchase, payment, invoice, refund and payout records: for as long as Nepal's tax and accounting laws require, even after your account is closed.
• Sign-in sessions expire automatically; phone verification codes expire after ten minutes.
• Certificates remain verifiable after they are issued unless revoked, so that a certificate you have shared keeps working.

6. How we protect it

Connections to the Platform are encrypted (HTTPS). Course files are stored privately and served through short-lived links. Access to administrative functions is restricted to authorised staff, and payment confirmations are checked directly with the payment gateway. No system is perfectly secure; if we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

7. Your rights

Subject to the Individual Privacy Act, 2075 and other applicable law, you may ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is inaccurate or incomplete;
• delete your information or close your account (we will keep records we are legally required to keep, as described in section 5);
• stop a particular use of your information, where the law allows.

Send requests to legal@chiyali.com from the email address on your account. We may need to confirm your identity before acting, and we will respond within a reasonable time.

8. Children

The Platform is intended for adults. Under our Terms of Service, people under 18 may use it only with the involvement and consent of a parent or guardian, and may not become instructors.

9. Changes to this policy

We may update this policy. The date at the top shows when it last changed. We will tell you about material changes on the Platform or by email before they take effect.

10. Contact

Questions or complaints about privacy: legal@chiyali.com, or Chiyali Technology Pvt. Ltd., Lalitpur Metropolitan City, Ward No. 22, Lalitpur, Nepal. See also our contact page.