Privacy Policy

EliteBase is an online learning platform operated by AI ELITE MASTERY SDN BHD (1590951-D) ("we", "us", "our"), a company incorporated in Malaysia with its registered business address at Suite 11.01 Level 11, South Wing, Menara OBYU, 4 Jalan PJU8/8A, Damansara Perdana, 47820 Petaling Jaya, Selangor, Malaysia.

This Privacy Policy explains how we collect, use, disclose and protect your personal data when you use the EliteBase website, web app and installable app (the "Service"). We process personal data in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA") and other applicable laws.

Account data: your name, email address, password (stored only as a secure hash), phone number (optional), profile photo and bio.

Google sign-in data: if you sign in with Google, we receive your name, email address and profile photo from Google. We do not receive your Google password.

Learning data: your onboarding answers, learning goals, course and lesson progress, homework, attendance at live sessions, streaks, notes and posts you make in the community feed.

Transaction data: records of purchases, invoices and payment status. Card and bank details are entered on and processed by our third-party payment providers; we do not store full card numbers.

Referral data: affiliate or referral codes used when you signed up and related referral rewards.

Technical data: device and browser type, IP address, log data, and cookies or similar technologies needed to keep you signed in and to keep the Service secure.

Communications: messages you send us and your email preferences.

To create and manage your account, verify your identity and provide access to courses, live classes, the library and community features.

To personalise your learning path, track progress and show recommendations.

To process payments, issue invoices and manage subscriptions, programmes and refunds.

To send service emails such as account approval, password reset, class reminders and receipts, and — where permitted — updates about our programmes. You can opt out of marketing emails at any time.

To operate referral and affiliate programmes.

To maintain the security of the Service, prevent fraud and abuse, and comply with legal obligations.

To improve the Service, including generating translations, summaries or images with AI tools for course content. We do not use your personal data to train third-party AI models.

We do not sell your personal data. We share it only with service providers who process it on our behalf and under appropriate confidentiality obligations, including: cloud hosting and database providers; file storage and content delivery (e.g. Cloudflare); email delivery (e.g. Resend); Google (sign-in); payment gateways; and AI service providers used to generate course content.

Coaches and administrators of the Service can see the information needed to support your learning, such as your name, progress and homework.

We may disclose personal data where required by law, court order or a government authority, or to protect our rights, users or the public.

If our business is reorganised, merged or sold, personal data may be transferred to the successor entity subject to this Policy.

Some of our service providers store or process data outside Malaysia. Where this happens, we take reasonable steps to ensure your personal data receives a level of protection comparable to that required under the PDPA.

We keep your personal data for as long as your account is active and as needed to provide the Service, and thereafter for as long as required for legal, accounting, tax or dispute-resolution purposes. When data is no longer needed we delete or anonymise it.

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), hashed passwords, access controls and restricted administrator access. No system is completely secure, so please keep your password confidential and tell us promptly if you suspect unauthorised access to your account.

We use essential cookies and local storage to keep you signed in, remember your language and theme, and secure the Service. The installable app may store content on your device so pages load faster. You can clear these through your browser settings, but parts of the Service may stop working.

Subject to the PDPA, you may request access to and correction of your personal data, withdraw consent, or limit processing (including for direct marketing). You can update most details yourself in Profile. For other requests, email us at the address below. We may need to verify your identity and may charge a fee permitted by law for access requests.

If you withdraw consent or ask us to delete your data, we may be unable to continue providing the Service to you.

The Service is not intended for children under 18 without the consent and supervision of a parent or guardian.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date, and where changes are significant we will notify you by email or in the Service.