Data residency + privacy
Where your data lives
Default deployment
Polymath cloud is hosted on Hetzner Falkenstein (Germany). Backups in same region. GDPR-compliant infra.
Pakistan-resident option (institutional)
On request: dedicated tenant hosted in Karachi or Lahore data centre (PTCL CloudConnect, Multinet, Cybernet). All learner data stored in-country. Polymath signs Pakistan DPA. Data does not leave the country without explicit org authorisation.
What we do not store
Full credit card numbers (handled by payment processor). Private chat content (tutor chat is ephemeral after 200 chars + PII redaction). Voice recordings (audio narration is browser-side; we store no audio of the learner).
Minor protection
Children under 13 must use parent account. Parental email required for any account creation under 13. Behavior signals (mood, engagement) shared only with parent + verified-school admins. No advertising. No third-party analytics on under-18 surfaces.
Right to delete
Any learner (or parent for under 13) can request full account + portfolio + chat history deletion via privacy@polymath.pk. We comply within 14 days. Verified-school cohort deletes also supported.
Questions: privacy@polymath.pk