Privacy Policy
Ulearn Academy respects your privacy. This policy describes how we collect, use, and protect your personal data. Our practices are designed to align with the Personal Data Protection Act (PDPA) of Thailand and with applicable data protection and electronic transaction norms in Myanmar.
Types of personal data we collect
We may collect: (1) Account and profile information — name, email, password (stored in encrypted form), and role (admin, instructor, student). (2) Payment and transaction data — payment method details, top-up and course purchase history. (3) Learning data — course progress, quiz results, certificate records, and interactions with the AI learning assistant. (4) Technical data — IP address, device information, and logs related to authentication and platform use. (5) Communications — support emails and in-platform messages.
Purpose of data processing
We process your data to: provide and operate the LMS; process wallet top-ups and course purchases; issue and verify certificates; deliver email notifications; authenticate users via JWT and secure sessions; improve the platform and the AI assistant; comply with legal obligations; and protect our rights and users' safety.
Legal basis for processing
We process personal data based on your consent where required (e.g. marketing communications) and where necessary for the performance of our contract with you (e.g. account management, payments, course access, certificates). We may also process data where required by law or for our legitimate interests in operating and securing the platform, always in line with PDPA and applicable Myanmar standards.
Data retention
We retain your account and learning data for as long as your account is active and for a reasonable period after closure for legal and operational purposes. Transaction and payment records are retained as required by applicable law. Logs and technical data may be retained for a limited period necessary for security and troubleshooting.
Data storage and security
We use industry-standard measures to protect your data, including encryption of sensitive data, secure hosting, and access controls. Video content is delivered via cloud-hosted streaming; we work with providers that maintain appropriate security standards. We do not sell your personal data.
Third-party services
We may use third parties for: payment processing (e.g. bank transfer handling), cloud storage and video hosting, email delivery, and analytics. These providers process data on our instructions and are expected to protect data in line with their own policies and applicable law. We do not share your data for marketing by third parties without your consent.
Cross-border data transfer
Where we transfer personal data across borders (e.g. to cloud or service providers outside Thailand or Myanmar), we ensure appropriate safeguards are in place as required under the PDPA and applicable norms, and we will inform you where your data may be processed.
Your rights
Under the PDPA and similar principles, you may have the right to: access your personal data; request correction of inaccurate data; request deletion or restriction of processing where applicable; object to certain processing; and withdraw consent where processing is consent-based. To exercise these rights, please contact us using the details below.
Contact for data requests
For requests regarding access to, correction of, or deletion of your personal data, please email support@ulearn-academy.com with the subject "Data Request" and include your registered email and a clear description of your request. We will respond within the timeframe required by applicable law.