Trust, Privacy & Security

This page is maintained by Grand Online Academy to answer common security and privacy questions about our learning platform. It describes practices currently enabled in the app and is not an independent certification.

Account & Authentication

Students sign in with an email address and a password. Passwords are never stored by the application; authentication is handled by our managed backend provider.

Administrative dashboards are restricted to accounts that have been explicitly granted an admin role.

Data We Collect

When a student registers we collect: full name, email, phone, city, and country. As students use the platform we also store course enrollments, quiz scores, and payment records created by an administrator.

We do not use this data for advertising and we do not sell it to third parties.

How Your Data Is Protected

Database tables enforce row-level access controls so that each student can only see their own profile, enrollments, payments, and quiz results. Administrators can access aggregated records for management purposes.

Quiz results are scored on our server — not in the browser — so scores cannot be modified by the student.

Shared Responsibility

Grand Online Academy is responsible for the application logic, access controls, and educational content. Our hosting and database provider is responsible for the underlying infrastructure security. Students are responsible for keeping their account password confidential.

Data Retention & Requests

Account and learning records are retained while a student account is active. Students who want their account deleted or a copy of their personal data can contact us using the address below.

Reporting a Security Issue

If you believe you have found a security vulnerability, please contact the academy administration directly so we can investigate. Please do not disclose the issue publicly until we have had an opportunity to respond.