Privacy Policy
Effective and last updated:
This notice explains how Global Self-Healthcare Education & Research Trust (GSHER) handles personal information through learn.globalselfhealthcare.org and its installed browser app. It covers learners, applicants, faculty and visitors. Other websites and services linked from the Academy have their own privacy notices.
Privacy contact: Dr. Biswajit Mohapatra, Chairman, GSHER · bmdoc1@gmail.com.
1. Information collected
- Account information: your name or display name, email address and sign-in account identifier supplied through Sign in with ChatGPT, together with your Academy role and account status. GSHER does not ask you to enter your ChatGPT password into an Academy form.
- Enrolment information: the programme you request, optional phone number, learning goals or background notes you provide, application status, batch assignment and administrator review details.
- Payment references: the payment ID or reference you submit, payment-verification status and related correspondence. Payments take place on Razorpay. Academy forms do not request card numbers, CVVs, UPI PINs or bank passwords. GSHER may review transaction details in its merchant records to verify payment.
- Learning records: lesson completion, verified learning hours, module-test answers, scores and attempt history, assignment text and uploaded files, submission times, faculty marks and feedback.
- Communications and technical records: messages you send to GSHER and service logs used for operation, security and troubleshooting. Hosting and authentication services may record IP addresses, browser information, requested pages, request times and errors.
Public guides and sample lessons can be read without enrolling. Information required for an account or application is needed to provide that feature; optional fields may be left blank.
2. How information is used
GSHER uses this information to identify accounts, review applications and payment references, grant appropriate course access, deliver lessons and resources, record progress, assess coursework, provide feedback and support, maintain academic and transaction records, and investigate security or technical problems. Faculty and administrator actions may be recorded in an audit history.
An enrolment request is not a subscription to marketing messages. Any separate newsletter signup should explain its own purpose and provide its own choice.
3. Who can access information
GSHER administrators manage accounts, enrolments, payment verification and academic records. Faculty assigned to a programme can access the learner information and coursework needed for teaching, assessment and support. Learners access their own permitted records. Assignment submissions and test attempts are not published as public course content.
Public sample materials are different: resources that faculty attach to the first two lessons of a first module can be available to all visitors. Faculty should publish only material they are authorised to share. Do not include private learner or patient information in public lesson resources.
Information may also be handled by service providers necessary to operate the Academy, or disclosed when legally required or necessary to investigate misuse, protect people or resolve a dispute. The Academy does not currently include advertising pixels or behavioural advertising features.
4. Sign-in, hosting and external services
The Academy uses ChatGPT Sites and OpenAI sign-in, with Cloudflare hosting, database and file-storage services. These providers process information for authentication, hosting, delivery and security under their applicable terms and privacy notices. Their infrastructure may process information outside your country.
Razorpay processes payments on its own service. Opening an email link uses your chosen email service. Embedded YouTube videos and external learning links may send technical information to their providers when loaded or opened. GSHER does not control those providers’ independent processing.
Read the providers’ notices: OpenAI · Cloudflare · Razorpay · Google / YouTube.
5. Cookies, browser storage and the installed app
Authentication and hosting providers may use cookies or similar technologies for sign-in, security and service operation. Embedded services may use their own technologies. Browser settings can restrict these, but doing so may affect sign-in or playback.
The Academy’s browser app caches basic public interface files and an offline help page. Its offline cache does not store private lessons, payment records, identity information or assignments. Files you deliberately download remain on your device until you remove them. Signing out or uninstalling the app does not itself delete server-side learning records.
6. Retention and security
Records are retained according to their purpose, including course delivery, academic history, payment reconciliation, support, security and applicable record-keeping obligations. Different records may need different retention periods; this notice does not promise a fixed automatic deletion date. Contact GSHER to ask what is retained and request removal of information that is no longer needed. Some records may need to be retained for a documented reason.
The Academy uses HTTPS and account- and role-based access controls. No online system can guarantee complete security. Keep your sign-in account and downloaded files secure, and report suspected unauthorised access to the privacy contact.
7. Your choices and privacy requests
You may ask GSHER about information associated with your account, request access or correction, request account closure or deletion, raise a privacy complaint, or withdraw permission for optional information or communications. GSHER will review requests in line with applicable requirements and explain any information that must be retained. Removing information required for enrolment or assessment may affect those services.
Email bmdoc1@gmail.com from your registered address, with the subject GSHER Academy privacy request. Explain your request and identify the relevant programme. GSHER may need to verify your identity before disclosing or changing account information. Do not email passwords, payment security codes or unnecessary identity documents.
8. Children and sensitive information
The Academy’s current self-healthcare courses are intended for adult learners. A parent, guardian or institution should contact GSHER before arranging access for someone under 18. If you believe a child has submitted personal information without appropriate involvement, contact GSHER for review.
The Academy provides education, not a patient-record or emergency service. Do not upload identifiable patient records, another person’s private information, or unnecessary medical, financial or identity documents in learning goals, assignments or enquiries. Contact GSHER if sensitive information has been shared by mistake.
9. Changes to this notice
Updates will be published at this URL with a revised date. Check this page when using a new Academy feature. For questions about this notice or a privacy concern, contact GSHER using the address above.