This Privacy Policy describes how EduPack ("we," "us," or "our") collects, uses, and shares information about you when you use our course authoring platform and related services. By using EduPack, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Account Information
When you register for an EduPack account, we collect:
- Name and email address
- Password (stored as a salted hash — we never store plaintext passwords)
- Role and institutional affiliation (if provided)
- Profile photo (if uploaded)
Course and Content Data
When you use EduPack to author courses, we store:
- Course titles, descriptions, and structure (modules, pages, quizzes)
- Content you upload — text, video, audio, PDF, and image files
- Quiz questions, answer choices, and settings
- Export package metadata (version, file size, timestamps, password hashes)
Learner Sync Data
When a learner submits a completed offline package, we receive and store:
- Learner name (as entered in the package)
- Lesson completion records and timestamps
- Quiz attempt scores and submission times
- Package integrity signature (HMAC validation result)
- IP address of the sync request
Usage Data
We automatically collect certain technical information when you use the platform, including browser type, operating system, pages visited, and timestamps of actions. This data is used solely for platform improvement and security monitoring.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the EduPack platform
- Authenticate users and manage account access
- Process and store course content and learner submissions
- Detect and flag tampered offline packages
- Send transactional emails (account confirmation, password reset)
- Respond to support requests and inquiries
- Monitor platform security and prevent abuse
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
3. Data Storage and Security
All data is stored on servers located in the Philippines. We implement industry-standard security measures including:
- TLS encryption for all data in transit
- Bcrypt hashing for stored passwords
- HMAC integrity signatures for exported packages
- Role-based access controls limiting data access to authorized personnel
- Regular security audits and dependency updates
While we take reasonable precautions, no system is 100% secure. We encourage users to use strong, unique passwords and to notify us immediately of any suspected unauthorized access.
4. Data Sharing
We do not share your personal data with third parties except in the following limited circumstances:
- Within your institution: Administrators at your institution may view learner sync records for courses they manage.
- Service providers: We may use trusted third-party services (email delivery, hosting) who process data strictly on our behalf under data processing agreements.
- Legal obligations: We may disclose information if required by law or to protect the rights, property, or safety of EduPack, our users, or the public.
5. Cookies and Local Storage
EduPack uses session cookies to maintain your authenticated session. These are HTTP-only, secure cookies that expire after 8 hours of inactivity. We do not use third-party tracking cookies or advertising cookies.
The offline export packages use browser-local IndexedDB and WebAssembly (SQL.js) storage to persist learner progress entirely on the learner's device. No data is transmitted until the learner explicitly submits their package.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us at support@edupack.io. Learner sync records linked to courses you own will be anonymized upon account deletion.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate information
- Request deletion of your account and data
- Export your course content and data
To exercise any of these rights, contact us at support@edupack.io.
8. Children's Privacy
EduPack is intended for use by educators and adult learners at academic institutions. We do not knowingly collect personal information from individuals under the age of 13. If you believe a minor has provided us with personal data, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email and update the "Last Updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the revised policy.
10. Contact Us
For any privacy-related questions or requests, please contact us at:
- 📧 support@edupack.io
- 📍 Philippines