Privacy Policy

Last updated: 2 May 2026

LaoEdTech ("we", "us") provides a learning management platform used by schools in Laos. This policy explains what information we collect, why we collect it, and what you can do about it. It applies to laoedtech.com, portal.laoedtech.com, canvas.laoedtech.com, and the LaoEdTech Student and LaoEdTech Teacher mobile apps.

TL;DR We collect what's needed to run your school's classes — names, emails, course work, grades, attendance. We don't sell anything to advertisers. Your data lives in Singapore. Your school controls who sees what.

1. Who is responsible for your data

Your school is the data controller for student and teacher records. LaoEdTech operates the technology platform on behalf of your school. If you're a student or teacher, your school's administrator decides who can access your data within the school. If you have questions about how your school uses the platform, contact your school directly. If you have questions about the platform itself, contact us at [email protected].

2. What we collect

Information you give us

• Account: name, email address, school, role (student / teacher / admin), and a password (hashed before storage)
• Profile: avatar image, time zone, language preference (optional)
• Coursework: assignments, submissions, grades, comments, attendance records, course messages, calendar events. This is content you or your teachers/students create as part of normal class activity
• Files: photos, audio recordings, PDFs, and other files you upload as part of an assignment or message
• Support: if you email or message us, we keep that record so we can answer you

Information we collect automatically

• Device & technical: IP address, device type (iOS / Android / web), operating system version, app version, anonymized crash reports (via Firebase Crashlytics)
• Usage: pages visited, features used, login times — used to keep the service working and to spot bugs

What we do NOT collect

• Your precise location (we never request GPS or location permissions)
• Health, fitness, financial, or biometric data
• Browsing history outside our apps and sites
• Third-party advertising or tracking identifiers — we run no advertising networks

3. How we use your data

• Provide the platform — sign you in, show your courses, deliver assignments, calculate grades, sync messages
• Communicate with you — send password resets, course notifications (only if you opted in)
• Improve the platform — fix bugs, prioritize new features based on aggregate usage
• Comply with legal requirements — Lao law, requests from authorities with proper authority

We do not sell your data. We do not use your coursework, messages, or grades for marketing. We do not share student data with advertisers.

4. How long we keep it

• Active accounts: for as long as your school subscribes to LaoEdTech
• Inactive accounts: deleted 12 months after the last sign-in
• School backups: kept up to 30 days for restoring after accidental deletions
• Crash logs: 90 days, then deleted

You can request earlier deletion — see "Your rights" below.

5. Where your data lives

Servers are operated in Singapore (DigitalOcean SGP1 datacenter). Email delivery is handled by Brevo (Sendinblue), a French company with EU-based servers. Crash reporting uses Firebase Crashlytics (Google Cloud). We chose providers that comply with international data protection standards (GDPR, SOC 2).

6. Who we share it with

• Your school: teachers, principals, and IT admins at your school can see your account and coursework — that's the point of the platform
• Service providers: Brevo (transactional emails only), Firebase (crash analytics — no personal data), DigitalOcean (hosting). Each has signed a data processing agreement with us
• Legal: if Lao law or a valid court order requires us to disclose information

We never share your data with marketers, advertisers, or data brokers.

7. Your rights

You can:

• Access a copy of your data — request via [email protected]
• Correct your data — through your profile settings or by emailing us
• Delete your account — in your profile settings or by emailing us. Note: if you're enrolled in active courses, your school may need to authorize deletion of grade records first
• Export your data — request via email; we'll send a JSON archive within 30 days
• Withdraw consent for optional notifications — in your profile settings
• Lodge a complaint with a data protection authority in your country

8. Children's privacy

LaoEdTech is used by students of all ages, including those under 13. Schools obtain parental consent for student accounts as part of normal school enrollment. We do not knowingly collect data from anyone under 13 outside the school context. If you believe a child has signed up directly without school consent, email [email protected] and we'll delete the account.

9. Security

Data in transit is encrypted using TLS 1.2 or higher. Passwords are hashed with bcrypt. Database backups are encrypted at rest. We restrict employee access to production data to a small, audited group. We disclose any security incident affecting your data to your school within 72 hours of confirmation.

10. Changes to this policy

We'll post any changes here and update the "Last updated" date at the top. Material changes will be announced to school administrators via email. Continued use of the platform after a change means you accept the updated policy.

11. Contact

LaoEdTech Co Ltd
Vientiane, Lao PDR
Privacy: [email protected]
Support: [email protected]