This Privacy Policy explains how ACT (the "Platform") collects, uses, shares and protects personal data. It is written to align with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines and its implementing rules.
1. Who is responsible for your data
The Platform is operated for educational use by your course instructor and institution. For privacy questions, requests or complaints, contact rondinabrybry1@gmail.com.
2. What we collect
Account data
- Email address
- Password (stored only as a salted hash — never in readable form)
- Role (student, teacher or administrator)
- Email verification status
Student profile data
Students are required to complete a profile before most features unlock. This includes:
- Student ID number
- Full name — last, first, middle name and suffix
- Age and birthdate
- Academic details — program, subject, year level and section
Coursework data
- Activity, quiz, assignment, project and exam submissions
- Scores, letter grades, instructor feedback and AI-generated draft feedback
- Submission timestamps, including whether a submission was late
- Discussion posts and replies
- SQL queries you run in the practice terminals, and the contents of your personal practice databases
Technical and security data
- IP address and browser user-agent string
- Login and session timestamps
- Audit logs recording administrative actions — who did what, to which record, when, and from which IP address
- Delivery status of notification emails sent to you
3. Why we collect it
| Purpose | Data used |
|---|---|
| Creating and securing your account | Email, password hash, role, verification status |
| Identifying you and matching work to the right student record | Name, student ID, program, year level, section |
| Delivering coursework and recording grades | Submissions, scores, feedback, timestamps |
| Notifying you about new or graded activities | Email address |
| Preventing abuse, investigating incidents and meeting audit obligations | IP address, user agent, audit logs |
We process this data to deliver the education you or your institution have enrolled in, to comply with school record-keeping requirements, and for the legitimate interest of keeping the Platform secure.
Note on address and birthdate. These are collected because the institution uses them for student records. If your institution does not require them for your course, ask your administrator — they can be left out of the record rather than collected by default.
4. Who we share it with
We do not sell your personal data and we do not use it for advertising. Data is shared only in these situations:
- Your instructors and administrators can see your profile, submissions, grades and activity within their courses.
- Other students can see your name and any content you post in discussions. They cannot see your submissions, grades, address or contact details.
Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Google (Gemini API) | AI-assisted grading of activity submissions | The text of your submission and the related activity prompt |
| Email delivery provider | Sending activity notifications, password resets and verification links | Your email address and the message content |
Please read this carefully: when an activity is graded with AI assistance, the text of your submission is transmitted to Google's Gemini API, a service outside the Republic of the Philippines, and is processed under Google's own terms. Your name, student ID, address and contact details are not sent — only the submission text and the activity prompt. Do not include personal information about yourself or anyone else in the body of a submission.
We may also disclose data where required by law, court order or a lawful request from a public authority.
5. How long we keep it
- Academic records — submissions, scores and feedback are retained for as long as your institution's records-retention policy requires, which is normally beyond the end of the course.
- Account and profile data — kept while your account is active, and after closure only as needed to support the academic record.
- Practice databases and SQL terminal contents — treated as temporary and may be reset or deleted at the end of a term.
- Audit and security logs — retained for a limited period for security investigation, then deleted.
6. How we protect it
- Passwords are stored as salted hashes, never in readable form.
- Access is restricted by role — students cannot reach teacher or administrator functions.
- Students can only access activities and discussions belonging to their own program.
- Administrative actions are recorded in an audit log.
- Submitted rich text is sanitised before it is stored or displayed.
No system is perfectly secure. If we discover a breach that puts your personal data at serious risk, we will notify you and the National Privacy Commission as required by law.
7. Your rights
Under the Data Privacy Act of 2012, you have the right to:
- Be informed about how your personal data is processed.
- Access the personal data we hold about you.
- Correct inaccurate or outdated data — much of your profile you can edit yourself.
- Object to processing, or request erasure or blocking of data that is outdated, unnecessary or unlawfully obtained.
- Data portability — receive a copy of your data in a usable format.
- Damages — claim compensation for harm caused by inaccurate, incomplete or unlawfully obtained data.
- Complain to the National Privacy Commission if you believe your rights have been violated.
To exercise any of these, email rondinabrybry1@gmail.com. Note that requests to erase academic records may be refused where the institution is legally required to retain them; we will explain the reason if that happens.
8. Cookies and sessions
The Platform sets a session cookie to keep you logged in and a CSRF token cookie to protect forms from cross-site request forgery. If you choose "remember me" at login, a longer-lived cookie is set. These are required for the Platform to work — we do not use advertising or cross-site tracking cookies. Clearing cookies logs you out.
9. Children's data
The Platform is intended for enrolled students. Where a student is a minor, processing is carried out under the authority of the school and, where required, with the consent of a parent or guardian.
10. Changes to this policy
If this policy changes, the "last updated" date at the top of this page changes with it. Material changes will be announced in the app or by email.
11. Contact
Privacy questions, access requests and complaints: rondinabrybry1@gmail.com.
You may also contact the National Privacy Commission of the Philippines at privacy.gov.ph.