Loading…
Legal
This policy explains what information MaheiLambi collects, why it is used, and the choices available to learners and instructors.
Effective date: 22 July 2026
We collect account details such as your name, email address, verified phone number when you choose or are required to add one, profile information, authentication records, course activity, assessment submissions, support messages, and technical information needed to secure and operate the service.
Payment card or bank details are collected and processed by our payment provider. MaheiLambi receives transaction identifiers, payment status, amount, and limited billing information needed for enrollment, receipts, refunds, and fraud prevention.
Questions, replies, code snippets, error messages, screenshots, lesson references, and language preferences submitted to the Doubt Centre are processed to provide learner support and improve course content. A question marked “course” is visible only to enrolled learners and the relevant course team; a question marked “private” is visible only to its author and the course team. Administrators may review reported content for safety and moderation.
Do not include passwords, access keys, payment details, private client code, or unnecessary personal information in a question, reply, error message, or screenshot.
Community discussions use Zulip. When you send a message, the selected Zulip workspace receives your display name, account role, message, channel and topic. Your account email and login credentials are not included in discussion messages. General channels are visible to signed-in MaheiLambi members; course channels require enrollment or course-team access on MaheiLambi. Workspace members may also see messages through Zulip according to that workspace's channel permissions. Messages are retained by Zulip under its workspace settings, and MaheiLambi stores delivery records and followed topics with your account. Removing your MaheiLambi account does not automatically delete messages already sent to Zulip; contact support for help with those messages.
We use infrastructure, database, email, payment, storage, video-delivery, analytics, and secure code-execution providers only as needed to operate MaheiLambi. These providers process information under their own security and privacy obligations.
MaheiLambi records aggregated page visits so administrators can understand which learning pages are useful. We store the page path, external referrer hostname, broad device category, visit count, and a one-way anonymous visitor hash that changes each day. We do not store raw IP addresses, full browser identifiers, query strings, account IDs, or form contents in our site-analytics records. Login, registration, password-reset, verification, and administrator pages are excluded.
We also use Vercel Web Analytics for anonymous page-view reporting. It operates without third-party cookies. MaheiLambi's own aggregated site-analytics records are retained for up to 400 days for trend reporting and operational planning; Vercel retains its separate analytics data according to the active Vercel plan.
Phone verification uses Firebase Authentication. When you request an OTP, Google receives and stores the phone number and related technical information for SMS delivery, verification, and spam or abuse prevention. MaheiLambi stores the verified number and verification time with your account.
JavaScript Playground practice runs in an isolated browser sandbox without uploading code or standard input. For other practice languages, selecting Run opens a notice before any external compiler is loaded. If you choose “Continue to free compiler”, OneCompiler loads inside MaheiLambi and receives the selected language, code and standard input, along with the technical information required to load its editor, under its own privacy terms. MaheiLambi does not send your name, email, account credentials or challenge grades to that embedded editor. You can return to the MaheiLambi editor; changes reported by OneCompiler sync back while it is open. Avoid including secrets or private data in practice code. The optional “Open full IDE” link opens OneCompiler in another tab. Playground runs are not saved as course submissions or attached to an account. Graded course challenges use the configured secure code-execution provider and continue to record results, attempts, and progress with your account; embedded compiler messages never count as assessment results.
MaheiCoins and reward requests are linked to your student account. We record coin activity, reward choices, request status and fulfilment details. Digital rewards do not require a postal address. For a physical reward, we collect the recipient name, delivery phone and Indian postal address only when you request it. Delivery and private access details are encrypted in storage and available only to the requesting student and authorised administrators. MaheiLambi may share the delivery details with a courier to fulfil your request.
Pending or approved reward requests must be resolved before an account is removed. On deletion or anonymisation, private delivery and access details are removed from closed requests and the requests are detached from the account. Rejected and cancelled requests lose their delivery details immediately. Coins are learning rewards with no cash value; they cannot be bought or transferred. A keyed hash of the verified signup email is retained for the lifetime of the signup bonus programme, including after account deletion, solely to prevent the same email receiving the welcome bonus again. The separate claim record does not contain the raw email address or an account identifier.
We retain information only as long as needed for the purposes above, including required financial and audit records. We use access controls, encrypted connections, managed sessions, signed downloads, and isolated code execution, but no online service can guarantee absolute security.
You may request access, correction, a portable copy, or deletion of eligible personal information, and may withdraw optional communications. Some records may be retained where required for legal, accounting, fraud-prevention, payment, dispute, or security purposes. When deletion is restricted, we remove sign-in methods and anonymise eligible profile and learning data.
MaheiLambi is not directed to children who cannot lawfully consent to an online learning account. Service providers may process information outside your state or country with safeguards appropriate to their role.
Send privacy complaints to the contact below with the subject “Privacy grievance.” We will acknowledge the request, verify identity where necessary, and explain the resolution or any legally required retention.
Signed payment webhook bodies are processed in memory. Stored webhook records contain a redacted diagnostic copy with contact, card, bank, UPI, token, address and authorization fields removed, and are deleted after 90 days. Security and administrator audit records are retained for 730 days, then deleted automatically, unless a longer period is required for an active legal or security investigation.
The data controller and service operator is MaheiLambi, Imphal, Manipur 795001, India. For a privacy request, email support@maheilambi.in with the subject “Privacy request.”