Privacy Policy

Effective Date: 28 July 2026

Last Updated: 13 August 2026

Application: Mithra LMS

Owner: Mithra Consulting Services Inc

1. Introduction

Mithra Consulting Services Inc ("we", "our", or "us") values your privacy and is committed to protecting your personal information. This Privacy Policy explains how the Mithra LMS mobile and web applications (the "App") collect, use, store, and protect your information when you use our services.

The App is a learning platform provided to students through their educational institution ("your institute"). By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We collect the following categories of information:

Account information

• Full name
• Email address
• Phone number (if provided)
• Student identifier assigned by your institute
• Institute association

Authentication data

• Password (stored only in encrypted/hashed form; never in plain text)
• Authentication tokens
• Session information

Learning information

• Enrolled courses and test series
• Study material and content access
• Test attempts, scores, and results
• Learning progress and activity history

Device and technical information

• Device model and operating system
• App version
• Device identifiers used for push notifications (if notifications are enabled)
• IP address
• Crash logs and diagnostic information used to detect and fix errors

We do not collect payment or financial information through the mobile App. Enrollment and any associated payments are handled by your institute or through the web platform, not within the mobile App.

3. How We Use Your Information

We use your information to:

• Authenticate you and identify your institute from your email address
• Load your institute's branding and configuration
• Provide access to your enrolled courses, materials, and tests
• Display your learning progress and analytics
• Maintain your session and keep you signed in securely
• Send you notifications related to your learning (if enabled)
• Detect, prevent, and investigate unauthorized access or misuse
• Diagnose and resolve technical issues and improve performance
• Comply with legal obligations

4. Authentication and Security

The App uses secure, industry-standard authentication, including email-based sign-in, automatic identification of your institute, encrypted passwords, and time-limited access tokens. Authentication tokens are stored securely on your device using the operating system's secure storage.

We implement reasonable administrative, technical, and organizational safeguards to protect your information, including encrypted (HTTPS/TLS) communication, secure credential storage, access controls, and regular security updates. No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

5. How We Share Information

We do not sell your personal information.

We share information only in these limited circumstances:

• With your institute, which manages your enrollment and learning records.
• With trusted service providers who support the operation of the App (for example, cloud hosting, notification delivery, and error-monitoring services), who may process information only as necessary to provide those services.
• With legal authorities when required by law or to protect our legal rights.

Trusted third-party services we may use include cloud infrastructure and email delivery providers, application build and delivery services (Expo), push-notification services (Firebase Cloud Messaging, if enabled), and error-monitoring services. These providers process information only to the extent necessary to provide their function.

6. Data Retention

We retain personal information for as long as your account is active and as needed to provide our services, and thereafter only as described below or as required by law.

Authentication tokens remain on your device until you log out, the session expires, the app data is cleared, or your account is deleted.

Certain records are retained after account deletion, as described in Section 7, where retention is required for legal, financial, or security purposes, or where the information has been anonymized so that it no longer identifies you.

7. Account Deletion

You can request deletion of your account directly within the App (app menu → Account → Delete My Account) or by contacting your institute's support.

When you request deletion yourself from within the App:

• Your account is immediately deactivated and you are signed out on all devices.
• Your account enters a 7-day grace period, during which you can restore it by signing back in. This gives you a chance to reverse an accidental request.
• If you do not restore it, your account is permanently anonymized after 7 days: your name, email, phone number, and other identifying details are erased or replaced, and your device/notification identifiers are removed.

Your institute may also schedule deletion of your account on your behalf (for example, if you are no longer enrolled). In that case, restoration is handled by your institute — please contact them if this was done in error.

What is retained after deletion, and why:

• Learning activity in anonymized form — your test attempts, scores, and progress may be retained, unlinked from your identity, so that your institute's aggregate statistics and reporting remain accurate.
• Payment and enrollment records — where these exist, they may be retained by your institute or by us for legal, tax, and financial-compliance purposes.
• Security and audit logs — retained as a record of account activity for security and integrity purposes.

Anonymized and legally required records do not identify you personally. Please also note that residual copies of data may remain in encrypted backups for a limited period until those backups are rotated in the ordinary course, after which they are overwritten.

Following deletion, you are also removed from marketing or promotional communications associated with your account.

8. Children's Privacy

The App is provided to students enrolled through educational institutions and is intended to be used under that arrangement. We do not knowingly collect personal information directly from children outside of this institutional context. If we become aware that information has been collected in a manner inconsistent with applicable law, we will take appropriate steps to address it. Parents or guardians with questions may contact us or the student's institute.

9. App Permissions

The App requests only the permissions it needs to function:

• Internet access — required to connect to our services.
• Notifications (optional) — to deliver learning-related notifications, if you allow them. The App works without this permission.

We request permissions only when they are needed for a feature you use. If future versions of the App introduce features requiring additional permissions, this policy will be updated accordingly.

10. International Data Transfers

Your information may be processed and stored on servers located outside your country. Where this occurs, we take steps to ensure your information is handled in accordance with applicable data-protection laws.

11. Your Rights

Depending on the laws that apply to you, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your personal information
• Request a copy of your personal information
• Withdraw consent where processing is based on consent

You can exercise these rights through the App, through your institute, or by contacting us using the details below. Some rights may be subject to limitations where we are legally required to retain certain information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above, and the latest version will always be available at the link where you found this policy.

13. Contact Us

For privacy-related questions or requests, contact:

Mithra Consulting Services Inc

Email: contact@mithra-consulting.com

Website: https://lms.mithra-consulting.com

By using the Mithra LMS application, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and processing of your information as described above.