Privacy Policy Statement
Code Recall collects and processes learning and account data only for account access, progress tracking, learner support, platform security, and system improvement.
Personal Data We Process
Depending on how you use the system, Code Recall may process:
- Name, email address, login provider, profile photo, and account verification status.
- XP, level, subject progress, quiz/pre-test/post-test results, certificates, badges, and study history.
- Contact messages, support replies, feedback notes, and admin review records.
- Role/access records, security profile status, Firebase 2FA verification status, and audit logs.
Purpose of Processing
- To create and protect user accounts.
- To save learning progress, achievements, and assessment results.
- To let admins and super admins monitor learner support needs.
- To respond to messages submitted through Contact Us.
- To detect unauthorized access, role bypass attempts, and other security events.
Access and Sharing
Learners can access their own profile and progress. Admins and super admins may access learner records only for system administration, learner support, role management, security, and educational monitoring. Firebase and Supabase may process data as platform service providers that host authentication, database, storage, or content services.
Retention and Security
Data is retained while the account or pilot system remains active, unless deletion is requested and no legitimate operational, security, or legal reason requires continued retention. Code Recall uses Firebase Authentication, Firestore security rules, role-based access controls, multi-factor authentication for privileged accounts, and audit logging.
Your Data Privacy Rights
Under the Philippine Data Privacy Act, users may request information about processing, access to personal data, correction of inaccurate data, deletion or blocking where applicable, objection to processing where allowed, data portability, and assistance with privacy concerns or complaints.
Important Note
This statement is a system-level privacy notice for the Code Recall prototype. For formal deployment, the institution or organization operating the system should review it with its designated privacy officer or legal adviser.