Terms, Privacy, Subscription & Security Policies
Last updated: August 2026. These policies explain the operational rules for Universal English Tutor. Replace placeholder business/contact information and obtain legal review for the countries in which you sell before launch.
Free demonstration
Eligible verified users without subscription history may receive a one-time, administrator-configured demonstration. The administrator can change its time and sentence limits. The demonstration requires no payment details and ends when either configured limit is reached.
Two-day paid trial
Eligible registered users may purchase two days of full-access evaluation for ₹19 in India or $2 internationally. Access begins only after payment verification and expires automatically after two days. The trial is not designed to be repeatedly extended through duplicate accounts.
Monthly subscription
Paid learning access is sold on a monthly basis. Current plan scope and price are shown before payment. Access begins only after the payment provider confirms a successful payment. Renewal and cancellation behaviour must follow the payment method and plan presented at checkout.
No-refund policy
Except where a refund is required by applicable law, completed subscription and paid-trial payments are final and non-refundable. No partial refund is provided for unused time. Learners may use the two-day paid trial before choosing a monthly plan. This clause does not remove any non-waivable consumer rights that apply in the customer’s jurisdiction.
Supported browsers and devices
The website is designed to be responsive on Windows, Android, iPhone/iPad and macOS. Current versions of Google Chrome, Mozilla Firefox and Microsoft Edge are recommended. JavaScript, cookies and an internet connection are required for core authenticated features.
Account use and sessions
An account is for the registered learner. The application uses a latest-session policy: when a new successful login creates a new active session, an older session for the same account is rejected. Users must keep credentials confidential and log out on shared devices. No web implementation can reliably identify every physical device in every browser, so this is a session-control security measure rather than a guarantee about physical hardware.
Content protection
Course content, explanations, questions, graphics and other original platform materials may not be copied, republished or redistributed without permission. The website uses deterrents such as disabled copy/print actions and user watermarks on protected pages. A website cannot technically guarantee prevention of operating-system screenshots, screen recording, developer tools or an external camera on every device.
Privacy and data
We may process registration details, account preferences, course progress, subscription/payment references, book orders, security events and technical logs needed to operate and protect the service. Payment card secrets such as CVV, card PIN or banking passwords must not be stored by this application. Payment providers handle payment credentials under their own security obligations.
Security
The platform applies password hashing, CSRF protection, secure session cookies, security headers, rate limiting, server-side authorization, request logging, encrypted learning-content files, database backups and payment verification. Sensitive configuration values belong in environment variables and must never be committed to GitHub. HTTPS must be enabled in production.
Registration generates an account-activation email when SMTP is configured. The activation link verifies ownership of the supplied email address. A verified successful payment generates a payment invoice email. Delivery can depend on the configured mail provider, spam filtering and the accuracy of the user’s email address.
Book orders and backups
Book orders are stored in the primary application database. Production deployments must place application data and backups on persistent storage or an external managed database/backup service.
Acceptable use
Users must not attempt to bypass access controls, share paid accounts, scrape protected course material, interfere with service availability, upload malicious files, probe other accounts or exploit security vulnerabilities.