Privacy Policy

1. Information we collect

• Account information: full name, email address, and password (hashed).
• Enrollment and payment information: course purchased, order amount, payment method, and — for manual payments — a proof-of-payment file you upload.
• Learning activity: quiz attempts, essay submissions, and lesson progress.
• Certificate information: your printed name and course completion details, for certificate issuance and public verification.
• Technical data: IP address and basic device/browser information, used for security (e.g. rate limiting, fraud prevention).

2. Why we collect it

We process your data to create and manage your account, deliver course content, grade quizzes, process payments, issue and verify certificates, respond to your inquiries, and comply with legal obligations. Our legal bases are your consent (given at sign-up), the performance of our contract with you (enrollment), and our legitimate interest in keeping the platform secure.

3. Who we share it with

We share data only with service providers who help us run Hai Academy, under appropriate confidentiality terms:

• Supabase — hosting for our database, authentication, and file storage.
• Xendit — payment processing for online payments.
• Cloudflare — bot protection (Turnstile) on our forms.
• Sentry — error monitoring, with personal data scrubbed before it reaches us.

A certificate's status, printed name, and course title are visible to anyone who looks it up on our public Verify Certificate page — this is by design, so employers and schools can confirm a certificate is genuine. We never publish your email address or account details there.

4. Your rights

Under the Data Privacy Act of 2012, you have the right to:

• Be informed that your data is being processed.
• Access your personal data that we hold.
• Correct inaccurate or outdated data.
• Object to certain processing of your data.
• Request erasure or blocking of your data, subject to legal retention needs.
• Data portability, where technically feasible.
• File a complaint with the National Privacy Commission.

To exercise any of these rights, contact us at haienglishtraining@gmail.com.

5. Data retention

We keep account and enrollment data for as long as your account is active, and certificate records indefinitely so verification remains possible. You may request account deletion at any time; some records may be retained where required by law (e.g. financial records).

6. Security

We use industry-standard safeguards — encrypted connections, access controls, and row-level security on our database — to protect your data. No system is completely secure, and we encourage you to use a strong, unique password.

7. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with an updated date.

8. Contact us

Questions about this policy or your data? Email us at haienglishtraining@gmail.com.