Privacy policy

1. Data we collect

Depending on which Services you use, we may collect:

• School and organisation accounts: the name, email, role and school or organisation of teachers, tutors and administrators.
• Student accounts: usually created by a school or centre, with the student's display name, grade and class. Students log in with a QR card and do not need an email address.
• Parent accounts: the parent's name, phone number and email, and the link to their child's account.
• Learning records: answers, answer times, working written in the app, game progress and rewards.
• Sign-in data: if you sign in with Google, Apple or Facebook, the account ID, name and email that platform provides.
• Device and connection data: device model, operating system and version, app version, language setting, IP address, sign-in times and error logs.
• Payment records: for subscriptions through the App Store or Google Play we receive the transaction record (product, amount, date, order number). We never receive your card number.
• Forms and enquiries: the name, role, school or organisation, phone and email you give on this website or at events.
• Competitions and events: data you provide when entering a competition, survey or event, and competition results.

2. How we use data

• To create and manage accounts and run the app, teacher platform and parent platform.
• To adjust question difficulty to each student and use AI to analyse working and find the cause of mistakes.
• To prepare learning and impact reports for teachers, organisations and parents.
• To answer enquiries and arrange trials, demos, training and competitions.
• To verify payments, keep the system secure, prevent abuse and fraud, and fix errors.
• To improve our courses and Services with de-identified statistics.
• To send product news to people who signed up for it. You can ask us to stop at any time.

The Bright Mage Academy app shows no advertising. Students' learning data is never used for advertising and never sold to anyone.

3. Disclosure and transfer

A student's learning records are shown only to the teachers and tutors of that student's school or centre, and to parents who have linked to the student's account.

We use service providers to process data on our behalf, including cloud hosting, game back-end, account sign-in, app analytics and crash reporting, AI analysis, and email and SMS delivery. They may use the data only on our instructions and to provide the Services.

We may disclose data where the law requires it, in response to a court order or a lawful request from law enforcement, or to protect the rights and safety of users, the public or Bright. If Bright is merged, acquired or transfers its business, data may move with the business and remain protected by this policy.

Our servers and service providers may be located outside Hong Kong. Wherever data is processed, we take reasonable steps to protect it to a standard similar to this policy.

4. Children's privacy

Most Bright Mage Academy users are primary school students. When a school or centre creates student accounts, it should obtain parent or guardian consent in line with its own policies. Children who download the app themselves should use it with a parent's or guardian's consent and guidance.

We collect only the student data needed to provide the Services, and student accounts need no email or phone number. If a parent or guardian finds that their child gave us personal data without consent, please contact us and we will delete it.

5. Security

We protect data with encrypted transmission, access controls and account verification, and only staff who need access have it. No data sent or stored over the internet can be guaranteed to be completely secure.

6. Cookies and website analytics

This website uses cookie-free analytics to count visits and improve the site; it does not track individuals or serve advertising. The teacher and parent platforms use essential cookies to keep you signed in. You can refuse cookies in your browser settings, but some features may then stop working.

7. Retention, access, correction and deletion

We keep data only as long as needed for the purpose it was collected for, unless the law requires otherwise. Data we no longer need is deleted or de-identified.

You have the right to access and correct the personal data we hold about you, and you can ask us to delete your account or personal data. Requests about a student account can come from a parent, guardian or the student's school or centre. Contact us as set out below; to protect your data we may first need to verify your identity. We may charge a reasonable fee for a data access request as the law allows.

Even after an account is deleted, we may keep some records where the law requires it, or to resolve disputes and keep the Services secure.

8. Changes to this policy

We may update this policy from time to time and will post the new version and its date on this page. For significant changes we will tell affected users in the Services or by email.

9. Contact us

For questions about this policy or your personal data, or to exercise the rights above, contact our Data Protection Officer:

Email: info@bright-edtech.comBright Education Technology LimitedRoom 20, Smart-Space 3C, Units 901–903, Level 9, Core C, Cyberport 3, Hong Kong