Privacy Policy

Version 2026-10-03 · Effective 2026-10-03

This Privacy Policy explains how MeroSir ("MeroSir", "we", "us", "our") collects, uses, shares, and protects information when you use the MeroSir website, mobile app, and related services (together, the "Platform"). By creating an account or otherwise using the Platform, you agree to the practices described here.

1. Who We Are

MeroSir is operated by Sunil Kumar Yadav, Nepal ("MeroSir", "we", "us"). For any question about this Policy or your personal data, contact us at support@merosir.com.

2. Information We Collect

2.1 Information you give us

  • Account details: full name, email address, phone number, password, and the role you register as (student, teacher, or organization).
  • Profile details: profile photo, bio, education level and faculty, institution/school, province, district, and home town, date of birth, and any social media links you choose to add.
  • Location: if you allow location access, the app reads your device's position only while you are using it, to show teachers and institutes near you. The position is sent to our server to run that search. It is saved to your profile only if you choose to save a location. We do not track your location in the background and we do not share your current position with other users. If you use the location picker (for example, to set your institution's location), we store the coordinates and address you select, and they may be shown publicly on your profile.
  • Publisher verification documents: if you apply to monetize content, we collect a copy of your citizenship document (front and back) and, optionally, a college ID and supporting documents, solely to verify your identity before approving publisher access. Only platform staff reviewing your application can access these files, and they are permanently deleted if you delete your account (see Section 6).
  • Payment and wallet information: wallet top-up and transaction records, subscription and purchase history, and payout details for publishers. We do not store your eSewa/Khalti account credentials — those are handled directly by the payment provider.
  • Content you create: question sets, resources, community posts, reviews, and any other content you upload or publish.
  • Communications: messages you send us through the contact form or support channels.

2.2 Information collected automatically

  • Verification data: one-time codes (OTPs) sent to your email or phone to verify your identity, and the timestamps/IP address associated with each request (used for fraud and abuse prevention).
  • Usage and activity data: test attempts and scores, resource downloads, course progress and certificates, tournament participation, and similar activity needed to operate the Platform's features.
  • Device information: if you allow notifications in the mobile app, a push-notification token (an identifier for your app installation) together with your device platform (Android or iOS) and the delivery service it belongs to; and standard technical data such as IP address and browser/app version. See Section 4A.

3. How We Use Your Information

We use the information above to:

  • Create and secure your account, and verify your identity via OTP.
  • Provide the Platform's features: tests, resources, courses, Kids Zone activities, wallet and payments, subscriptions, community features, and the in-app and push notifications you have chosen to receive (see Section 4A).
  • Process payments and payouts, and prevent fraud.
  • Review publisher applications and verify submitted identity documents.
  • Show your public profile and content to other users according to the visibility settings you choose.
  • Respond to support requests and enforce our Terms and Conditions and Community Guidelines.
  • Improve and maintain the Platform.

4. How We Share Your Information

  • Payment providers: when you top up your wallet or make a payment, the relevant details are shared with eSewa or Khalti (or, for offline payments, verified manually with the reference you provide) to complete the transaction.
  • Email and SMS delivery: we use email and SMS delivery partners solely to send OTP codes, account notices, and notifications you've opted into.
  • Push notification delivery services: to deliver push notifications to your phone we pass the push token and the notification content to Expo (the Expo push notification service), Google (Firebase Cloud Messaging, for Android devices) and Apple (Apple Push Notification service, for iPhones). They act as service providers that deliver the message on our behalf. See Section 4A.
  • Other users, based on your settings: your public profile fields, and any content you publish, are visible to other users according to the visibility and sharing toggles you control (for example, whether your email or phone is shown on your public profile).
  • Organizations and teachers you interact with: if you enroll with an organization or teacher, they can see your enrollment status and the test/course activity our dashboards show them for managing that relationship. They cannot see your private account details (like your login email or phone) unless you've separately chosen to share them.
  • Legal and safety: we may disclose information if required by law, or to protect the rights, property, or safety of MeroSir, our users, or the public.
  • We do not sell your personal information to third parties.

4A. Push Notifications

If you allow notifications, the MeroSir mobile app can send push notifications to your device. In-app notifications inside the Platform are separate and are not affected by this setting.

What we send, and your choices

  • Notifications are things like reminders before a scheduled test or tournament starts, wallet and payment updates, results, subscription notices, and replies or mentions in community discussions. Promotional notifications are off unless you turn them on.
  • You are asked for permission before notifications are shown (on Android 13 and later and on iOS). You can turn notifications off at any time in your device's settings.
  • In the app you can choose which categories you receive, and the times you want test reminders, under Profile → Notification Settings.
  • A push notification contains a title, a short message and a link to the relevant screen. The message text can include names or excerpts of content related to you (for example, who replied to your discussion). Depending on your device's lock-screen settings it may be visible without unlocking your phone.

What we collect to do this

  • A push token that identifies your app installation, your device platform (Android or iOS), and which delivery service the token belongs to. We link it to your account so notifications reach the right person.
  • We use this only to deliver notifications. We do not use it for advertising, and we do not use it to track you across other apps or websites.

Who delivers them

Delivering a push notification requires passing the push token and the notification content to a delivery service: Expo (Expo push notification service), Google (Firebase Cloud Messaging, Android) and Apple (Apple Push Notification service, iOS). They process this information to deliver the message for us. We use Firebase Cloud Messaging only for delivering notifications — not for analytics or advertising.

How long we keep it

  • Your push token is removed when you log out on that device and when you delete your account. We also stop using a token when the delivery service tells us it is no longer valid (for example, the app was uninstalled).
  • A short log of which test and tournament reminders have already been sent is kept for about 30 days after the event, only to avoid sending the same reminder twice.

5. Data Retention

We keep your information for as long as your account is active and as needed to provide the Platform. Financial records (wallet transactions, purchases, subscriptions, and payout records) are retained for as long as required for accounting, tax, and fraud-prevention purposes, even after an account is deleted. Publisher verification documents (citizenship/ID scans and supporting files) are kept only while your account and application are active, and are permanently deleted if you delete your account — see Section 6 for what specifically happens when you delete your account.

6. Account Deletion & What Happens to Your Data

You can request permanent deletion of your MeroSir account at any time. If you are the primary owner of an organization, you'll need to transfer ownership to another administrator first (see below) — once that's done, or if you don't own an organization, deletion proceeds immediately.

How to delete your account

  • In the mobile app: Profile → Delete Account → confirm with your password.
  • On the web: from your account dashboard (Profile → Delete Account), or from merosir.com/delete-account if you no longer have the app installed or cannot log in — this path verifies your identity via a one-time code sent to your registered email instead of a password.

What happens when you delete your account

This takes effect immediately in our production systems. We:

  • Deactivate your account and end all active sessions on every device.
  • Anonymize your personally identifiable information — your name, email address, and phone number are overwritten and can no longer be linked back to you.
  • Permanently delete any publisher verification documents you submitted (citizenship or ID scans, college ID, supporting documents).
  • Cancel any active subscription.
  • Make your public profile, reviews, and posts no longer visible to other users.

What we retain, and why

We do not delete records we are required to keep for financial, tax, or fraud-prevention purposes — for example, completed transaction history, wallet ledger entries, and payout records tied to your account. These records are retained in the anonymized form described above (no longer linked to your name, email, or phone number) and are kept only as long as applicable financial record-keeping obligations require.

If you are the primary owner of an organization on MeroSir, you must transfer ownership to another administrator before your account can be deleted, so the organization and its members are not left without an owner. This is the only precondition on deleting your account — it is not a way to refuse or indefinitely delay a deletion request.

7. Your Rights

Subject to applicable law, you can:

  • Access and update most of your profile information directly from your account settings.
  • Control what parts of your public profile are visible to others.
  • Request a copy of the personal information we hold about you by contacting us.
  • Delete your account at any time, as described in Section 6.

8. Children's Privacy

MeroSir's Kids Zone activities are designed to be used by a child under the supervision of, and through, a parent's, teacher's, or school's own MeroSir account. We do not knowingly create separate accounts for, or directly collect personal information from, children as independent account holders.

9. Security

We use industry-standard measures — including encrypted connections, hashed passwords, and OTP-based verification for sensitive actions — to protect your information. No method of transmission or storage is ever 100% secure, but we work to protect your data and to respond quickly to any issue.

10. Cookies

Our website uses a small number of cookies and local storage entries to remember your language preference and session. See our Cookies Policy for details.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Effective Date" above and, where appropriate, notify you in the app or by email.

12. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at support@merosir.com.