AcademlyHome

Privacy policy

Version of: [DD.MM.YYYY]

This policy explains how [LEGAL ENTITY NAME] (“we”) processes personal data in the Academly service and on academly.uz. It is made under the Law of the Republic of Uzbekistan “On personal data” (No. ZRU-547). The Uzbek version prevails in case of discrepancy.

1. Whose data and who is responsible

1.1. A learning center (the Customer) enters data of its students, parents and staff into the Service and is the owner (operator) of that data. Obtaining consent to process it is the center’s duty.

1.2. We act on the center’s instructions as a processor of that data, only to provide the Service.

1.3. For website requests and the account data of Service Users, we are the operator.

2. What data is collected

2.1. Students: full name, phone (optional), date of birth (optional), group and study history, attendance, payments, discounts, debts, freeze periods, notes by center staff.

2.2. Parents: full name, phone, Telegram chat ID (when connected to the bot), message language.

2.3. Staff (director, administrator, teacher): full name, phone, login, password (only as an encrypted hash; the password itself is never stored), position and permissions, Telegram ID and username (when connected), payroll data.

2.4. Technical data: sign-in sessions (IP address, browser type, time), a log of actions involving money and permissions (who, when, what).

2.5. Website requests: name, center name, phone, comment, IP address.

3. Purposes

3.1. Providing the Service: billing, attendance, payroll, reports.

3.2. Sending parents messages on the center’s behalf via Telegram: attendance, payment reminders, receipts, announcements.

3.3. Security: verifying sign-ins, detecting suspicious activity, keeping an action history.

3.4. Technical support and replies to website requests.

3.5. We do not use data for advertising and do not sell it.

4. Storage and security

4.1. All data is stored on servers located in the Republic of Uzbekistan.

4.2. Each center’s data is isolated at the database level: staff of one center cannot see another center’s data.

4.3. The connection to the website is encrypted (HTTPS). Passwords are stored only as hashes. Each staff member sees only what their permissions allow.

4.4. Backups are made daily and kept for a limited time.

5. Third parties

5.1. Telegram: messages to parents and staff are sent through the center’s Telegram bot. Only the message text and the recipient’s chat ID are passed to Telegram.

5.2. Hosting provider: [PROVIDER NAME], Republic of Uzbekistan.

5.3. Data is disclosed to public authorities only in the cases and manner set by law.

6. Retention

6.1. Data is kept while the center uses the Service.

6.2. After a center is closed its data is deleted completely within [30] days, except records the law requires to keep. Data in backups disappears when they expire (14 days).

6.3. Website requests are kept for [12] months.

7. Cookies and browser storage

7.1. A protected cookie keeps you signed in (JavaScript cannot read it).

7.2. The language choice is kept in a cookie; light/dark mode and view settings in browser storage (localStorage).

7.3. We use no advertising or tracking cookies.

8. Rights of data subjects

8.1. Everyone may learn what data is held about them, ask for it to be corrected or deleted, and withdraw consent.

8.2. Students and parents first contact their learning center with such requests. A parent may disconnect from the Telegram bot at any time (/unlink).

8.3. Other requests: [E-MAIL], [PHONE]. We reply within the time set by law.

9. Changes

9.1. This policy may be updated. Centers are told about significant changes in advance; the current version is always published on this page.