Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information. If you sign in with Google, we receive your name, email address, and profile picture from Google so we can create and identify your account.
• Learning progress. Quiz results, XP, streaks, flashcard mastery, badges, and study activity, so your progress can be saved and synced across devices.
• Optional information. If provided, a parent/guardian email for progress reports, and a display name or school name.
• Local device storage. When you are not signed in, study progress is stored only in your browser's local storage on your own device.

2. Why we use Google Sign-In

We use Google Sign-In only to authenticate your account and securely save your learning progress. We do not request unnecessary Google data, and we do not use your Google account information for advertising. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

3. How we use your information

• To create and secure your account.
• To save and sync your quiz results, XP, streaks, and study progress across devices.
• To show you a leaderboard rank.
• To generate optional parent/guardian progress reports, when configured.
• To operate, maintain, and improve the Service.

4. How we store and protect your information

Account and progress data is stored using Supabase, our database and authentication provider, with industry-standard encryption in transit (HTTPS/TLS). We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us (see Section 8).

5. Children's privacy

AcadeMY is built for secondary school students. We collect the minimum information necessary to provide the Service, do not sell personal data, and do not show behavioural advertising to students. Parents or guardians who believe their child has provided information that should be removed may contact us at any time using the details in Section 8.

6. Data sharing

We do not sell your personal information. We share data only with service providers that help us run AcadeMY (such as Supabase for authentication and data storage), bound by their own confidentiality and security obligations, or when required by law.

7. Your choices

• You can use AcadeMY without signing in; progress is then kept only on your device.
• You can sign out at any time from the sidebar.
• You can request access to, correction of, or deletion of your data by contacting us.

8. Contact us

Questions about this Privacy Policy or your data can be sent to support@myacademy.my. See our Contact page for more details.

9. Changes

We may update this Privacy Policy from time to time. Changes take effect when posted on this page, and the effective date above will be updated accordingly.