Effective Date: April 1, 2026
1. Introduction
This Privacy Policy explains how EduAlly collects, uses, stores, protects, and
manages personal information when you use the platform.
EduAlly is an educational web application developed as a thesis project. This
Privacy Policy is intended to follow the principles of transparency, legitimate
purpose, and proportionality under the Philippine Data Privacy Act of 2012
(Republic Act No. 10173) and its applicable regulations.
2. Information We Collect
Depending on how you use EduAlly, the platform may collect or process the following
categories of information:
2.1 Account Information
- Email address.
- Username.
- First name and last name.
- Profile picture or avatar.
- Authentication and account-security information.
- Email-verification status.
- Account creation information.
2.2 Academic or Profile Information
- Student ID or other applicable identification information.
- Program or course.
- Year level.
- Department or organizational information, where applicable.
- User role within EduAlly.
2.3 Learning Activity
- Learning materials accessed through the platform.
- Personal learning materials uploaded by the user.
- Highlighted text.
- Personal annotations.
- AI-generated explanations associated with highlights.
- AI conversation history and messages.
2.4 Forum Information
- Forum posts.
- Replies.
- Upvotes.
- Reports submitted by users.
- Information associated with reported content.
2.5 Notification Information
If you enable browser notifications, EduAlly may store browser-generated push
subscription information required to deliver notifications.
2.6 Technical Information
Depending on the hosting and server configuration, EduAlly may process technical
information necessary to operate, secure, and troubleshoot the platform, such as
IP address, browser information, device information, operating system information,
access timestamps, and technical or security logs.
3. How We Use Your Information
EduAlly may process personal information for the following purposes:
- Create and manage user accounts.
- Authenticate users and protect account security.
- Verify user email addresses.
- Provide role-based access to platform features.
- Provide learning materials and educational resources.
- Store highlights and personal annotations.
- Provide AI-assisted educational features.
- Maintain AI conversation history.
- Operate discussion forums and moderation features.
- Process content reports.
- Deliver browser notifications when enabled.
- Maintain platform security and prevent misuse.
- Troubleshoot technical problems.
- Maintain and evaluate the thesis project.
4. AI Processing
EduAlly provides AI-assisted learning features. When you submit a question to
the AI feature, the question and relevant conversation information may be
processed through the third-party AI service used by EduAlly.
EduAlly currently uses OpenAI's API for AI-assisted responses. AI-related
information may therefore be transmitted to OpenAI for processing as necessary
to provide the requested AI functionality.
Users should not submit passwords, authentication codes, government identification
numbers, financial information, confidential institutional information, or other
unnecessary sensitive information to the AI feature.
5. User-Generated Content
Information that you voluntarily submit to EduAlly may be stored by the platform.
This may include forum posts, replies, personal annotations, uploaded materials,
AI questions, and AI conversation messages.
Users should consider the sensitivity of information before submitting content
to the platform.
6. Sharing of Personal Information
EduAlly does not sell personal information. Personal information may be disclosed
or made accessible only when reasonably necessary for legitimate platform purposes.
6.1 Service Providers
EduAlly may use third-party service providers to support platform functionality,
including AI processing, hosting, email delivery, and notification services.
6.2 Authorized Administrators
Authorized EduAlly administrators may access information when necessary to manage
the platform, maintain security, moderate content, investigate reports, or
troubleshoot technical issues.
6.3 Legal Requirements
Personal information may be disclosed when required or permitted by applicable
laws, regulations, court orders, or lawful government requests.
7. Data Privacy Principles
EduAlly follows the principles of transparency, legitimate purpose, and proportionality
in processing personal information.
EduAlly aims to collect and process only information that is reasonably necessary
for declared and legitimate educational, operational, security, and administrative
purposes.
8. Data Retention
EduAlly retains personal information only for as long as reasonably necessary for
the purposes for which it was collected, unless a longer retention period is
required or permitted by applicable law.
When personal information is no longer necessary, EduAlly may delete, anonymize,
or otherwise securely dispose of the information when reasonably practicable.
9. Data Security
EduAlly implements reasonable organizational, physical, and technical safeguards
appropriate to the nature of the personal information being processed.
- Authentication and access controls.
- Password protection.
- Role-based permissions.
- Security and session protections.
- Database access controls.
- Two-factor authentication where enabled.
- Secure server configuration where applicable.
However, no internet-based system can guarantee absolute security. Users are
responsible for protecting their account credentials and avoiding unnecessary
disclosure of sensitive information.
10. Your Data Privacy Rights
Subject to applicable laws and reasonable limitations, users may have the right to:
- Be informed about the processing of their personal information.
- Request access to their personal information.
- Request correction of inaccurate or incomplete information.
- Object to certain forms of processing.
- Withdraw consent where consent is the applicable legal basis.
- Request deletion or blocking where legally applicable.
- Lodge a complaint regarding privacy concerns.
- Exercise other rights provided under applicable Philippine privacy laws.
11. Withdrawal of Consent
Where processing is based on consent, you may withdraw your consent subject to
applicable legal and technical limitations. Withdrawal of consent does not
necessarily invalidate processing that was lawfully performed before the withdrawal.
12. Cookies and Browser Storage
EduAlly may use cookies and browser storage mechanisms that are necessary for
authentication, session management, security, user preferences, and application
functionality.
Disabling certain browser technologies may affect the functionality of the platform.
13. Children's Privacy
EduAlly is intended for authorized educational users. The platform does not
intentionally request unnecessary personal information from children.
If a parent, guardian, school administrator, or authorized representative believes
that personal information has been collected improperly, they may contact the
EduAlly project administrator.
14. Third-Party Services
EduAlly may use third-party services to provide or support certain features,
including AI processing, hosting infrastructure, email services, and browser
notification services.
Third-party providers may have their own privacy policies and terms governing
their processing of information.
15. International Data Processing
Some third-party service providers used by EduAlly may process information outside
the Philippines. Where personal information is transferred to another jurisdiction,
appropriate safeguards should be applied as required by applicable Philippine
privacy laws and regulations.
16. Data Breaches and Security Incidents
EduAlly will take reasonable steps to investigate and respond to suspected
personal-data breaches or security incidents. Where notification is required
under applicable law or regulations, affected parties and the appropriate
authorities may be notified in accordance with applicable requirements.
17. Changes to this Privacy Policy
EduAlly may update this Privacy Policy when necessary due to changes in platform
functionality, data-processing practices, security requirements, third-party
services, or applicable laws.
When a material change is made, the policy version will be updated.
Users may be required to review and accept the updated version before continuing
to use the service.
18. Contact
For privacy questions, requests, complaints, or concerns, users may contact the
EduAlly project administrator through the contact information provided within
the application.
19. Philippine Data Privacy Authority
Users may seek assistance from the National Privacy Commission of the Philippines
regarding concerns involving the protection of personal information under the
Data Privacy Act of 2012.