Privacy Policy

1. Who provides the app

The Academy Operations App is maintained under the Wardana Technologies brand and commercially provided by Anthony Ravin Gunawardana, sole proprietor trading as ARG & Associates, under licence from the brand and intellectual-property owner, Michael Janmaka Abeyweera Gunawardana.

ARG & Associates is responsible for its commercial and technical processing activities. A participating academy may separately act as a data controller for institutional records and user administration under its applicable agreement, policies, and legal obligations.

Privacy and technical requests may be sent to wardanatechnologies@gmail.com.

2. Information we collect

• Account and profile information: name, email address, phone number, role, profile image, learner or staff identifiers, and account status.
• Academic and participation records: enrolments, timetables, attendance, learning progress, quiz and assessment responses, assignment submissions, grades, feedback, surveys, placement activity, and certification records.
• User content: profile and portfolio images, documents, videos, course resources, assignment files, payment proof images, equipment inspection images, marketplace media, and text you submit.
• Operational and transaction records: membership, fees, payment status and references, equipment requests and loans, bookings, support records, marketplace activity, and job applications. The app does not currently process card or bank credentials.
• Security and technical data: authentication sessions, audit events, IP address and request metadata recorded by infrastructure providers, device and app information needed to deliver, secure, and troubleshoot the service.

3. How we use information

• Provide role-based learning, attendance, assessment, certification, equipment, membership, marketplace, and administrative services.
• Authenticate users, protect accounts, enforce permissions, prevent misuse, and maintain audit records.
• Communicate service, learning, scheduling, support, and account-related updates.
• Maintain institutional records, respond to requests, improve reliability, and meet legal or regulatory obligations.

We do not sell personal information and the app does not contain third-party advertising SDKs or behavioral advertising.

4. When information is shared

Information is available only to the user, authorized academy staff, lecturers, administrators, or other participants where the app's workflow requires it. Access is restricted by role and relationship.

We use service providers to operate the platform, including Supabase for authentication, database, file storage, and server functions; Google Play for Android distribution and app integrity; and infrastructure providers used for public support and verification pages. These providers process information only to deliver their services and under their own terms and privacy commitments.

We may disclose information where required by law, to protect users and the service, or during a legitimate organizational transfer with appropriate safeguards.

5. Storage, security, and international processing

Data is protected using HTTPS encryption in transit, authenticated sessions, role-based database controls, private storage for sensitive files, access logging, and other reasonable technical and organizational safeguards. Saved-account switching stores refresh tokens in platform-secure storage and does not store account passwords.

Cloud providers may process or back up information outside Sri Lanka. We take reasonable steps to use reputable providers and appropriate protections. No online system can guarantee absolute security.

6. Retention

We retain information while an account is active and for as long as needed to provide the service, maintain academic and operational integrity, resolve disputes, prevent fraud, and meet legal, financial, safeguarding, or institutional record obligations. Retention periods depend on the type of record. When information is no longer required, it is deleted, anonymized, or access-restricted.

7. Your choices and rights

You may request access, correction, restriction, or deletion of personal information, subject to identity verification and lawful retention obligations. You may also ask questions about how your information is used.

To request account and associated-data deletion, use the dedicated Academy Operations App account deletion page. We aim to acknowledge verified requests promptly and complete eligible deletion within 30 days.

8. Accounts for learners

Accounts are issued or managed through authorized academy processes. The app does not provide public self-registration. The participating academy is responsible for obtaining any consent or authorization required for enrolment, learning records, and images where a learner is under the age of legal majority.

9. Changes and contact

We may update this policy when the app, providers, or legal requirements change. The updated date will appear at the top of this page. Material changes will be communicated through appropriate app or institutional channels.

Contact: wardanatechnologies@gmail.com · Academy Operations App support