Privacy notice
Version 1 · updated Nov 02, 2026 10:55 PM · issued under the Data Privacy Act of 2012 (Republic Act No. 10173)
In short
- [School or company legal name] decides how your information in KampusDigi is used. KampusDigi runs the system for them.
- We keep only what is needed for teaching, learning and training: your account, your coursework and grades, and basic sign-in records.
- No advertising, no tracking cookies, and your information is never sold.
- You can ask to see, correct, or delete your information. Contact the Data Protection Officer below.
Buod sa Filipino
- Ang [pangalan ng paaralan o kumpanya] ang nagpapasya kung paano gagamitin ang iyong impormasyon sa KampusDigi. Ang KampusDigi ang nagpapatakbo ng sistema para sa kanila.
- Kinokolekta lang namin ang kailangan sa pagtuturo at pag-aaral: ang iyong account, mga gawa at marka, at mga tala ng pag-sign in.
- Walang advertising, walang tracking cookies, at hindi ibinebenta ang iyong impormasyon.
- Maaari mong hilingin na makita, itama, o burahin ang iyong impormasyon. Makipag-ugnayan sa Data Protection Officer sa ibaba.
- Para sa mga mag-aaral na wala pang 18 taong gulang, kailangan ang pahintulot ng magulang o tagapag-alaga, na kinukuha ng paaralan.
1. Who is responsible for your information
The Personal Information Controller is [School or company legal name], [address]. It enrolls you, decides what courses you take, and decides how your records are used.
KampusDigi is the Personal Information Processor. It runs the learning portal on the school's instructions and does not use your information for its own purposes.
2. What we collect
| Kind | Examples | Where it comes from |
|---|---|---|
| Account | Name, email address, role (student, teacher, manager, admin), school, grade level, section or department, Learner Reference Number (LRN) for K-12 learners | Your school or company, usually from enrollment or HR records |
| Learning records | Courses and classes, lesson progress, assignments and the files you submit, quiz answers and scores, grades, teacher feedback, comments, course ratings, certificates | You and your teachers, while you use KampusDigi |
| Sign-in and security | Password (stored only as a one-way hash), sign-in times, IP address, a log of important actions such as grade changes | Created automatically when you use KampusDigi |
| Google sign-in | Your Google email and name, only if you choose "Sign in with Google". We never see your Google password. | |
| Parent or guardian | For learners under 18: the parent or guardian's name, relationship, and the date consent was given | The school's enrollment forms |
We do not collect sensitive personal information such as health, religion or government ID numbers other than the LRN. Please do not put such information in submissions or comments unless your teacher asks for it.
3. Why we use it
- To run your classes and training: give you course material, collect and grade your work, issue certificates, and send reminders and notifications.
- To let your teachers, managers and school administrators follow progress and report on it, as part of education or employment.
- To keep the portal secure: confirm who you are, stop misuse, and investigate problems.
- To meet legal duties, such as keeping school records required by DepEd, CHED or labor rules.
The legal basis is the school's or employer's contract with you and its legitimate interest in educating or training you (RA 10173 Section 12), and your consent where required. For learners under 18, consent is given by a parent or guardian through the school.
4. Who can see it
- Your teachers see your work and grades in the courses they teach. Classmates see your name and anything you post in class discussions or comments, never your grades.
- Managers (company training) see progress and completion for the groups they manage.
- School administrators can see all records, to run the school.
- Service providers that help run the portal, under agreements that limit their use to that purpose:
- Cloudflare: all traffic passes through its network for security and speed, including the "I'm not a robot" check on the sign-in page.
- Google: only if you sign in with Google.
- Anthropic (Claude AI): when a teacher uses AI tools, course documents and lesson text are sent to draft lessons or translate them, and anonymous course feedback is sent to summarise it. Names, emails and grades are never sent. Anthropic does not use this data to train its models.
We share information with government agencies only when the law requires it.
5. Where it is stored
KampusDigi runs on a dedicated server in Edison, New Jersey, USA, so your information is stored outside the Philippines. [School or company legal name] stays responsible for it under RA 10173 Section 21 and requires the same level of protection as Philippine law.
6. How we protect it
- All connections are encrypted (HTTPS). Passwords and session keys are stored only as one-way hashes.
- Each person only sees what their role needs. Important actions are written to a log that cannot be edited.
- The database is backed up every day. Access to the server is limited to named administrators using security keys.
- If a breach puts your information at risk, we will tell you and the National Privacy Commission as the law requires (within 72 hours of discovery).
7. How long we keep it
- While you are enrolled or employed, your account and records stay active.
- After you leave, your account is disabled. Your records are kept for 5 years so certificates can be verified and records can be requested, then deleted or anonymised.
- Records the law requires the school to keep longer (for example, permanent academic records) are kept as the law requires.
- Sign-in and security logs are kept for the same period. Read notifications are removed after 180 days.
- Erasure happens automatically. The school may hold a record longer only when it is needed for a dispute or legal claim.
8. Cookies and saved files on your device
KampusDigi uses one cookie, which keeps you signed in. It is needed for the portal to work. There are no advertising or analytics cookies. To load faster on slow connections, your browser keeps copies of images and course files you have opened. They are removed when you sign out.
9. Your rights
Under RA 10173 you have the right to:
- be informed about how your information is used (this notice);
- access your information and get a copy of it;
- correct information that is wrong or out of date;
- object to processing, and withdraw consent where processing is based on consent;
- have your information erased or blocked when it is no longer needed or was unlawfully processed;
- data portability: get your information in a format you can use elsewhere;
- be compensated for damage caused by inaccurate or unlawfully used information; and
- file a complaint with the National Privacy Commission (privacy.gov.ph).
You can download a copy of your information at any time from your Profile page (Download my data). For other requests, contact the Data Protection Officer below.
Parents or guardians may exercise these rights for learners under 18. Some requests can be limited by law. For example, the school may have to keep official grades even after you leave.
10. Contact the Data Protection Officer
[DPO name]
Data Protection Officer, [School or company legal name]
[DPO email]
We answer requests within 15 working days. We will tell you about any changes to this notice, and ask you to read it again when the changes are significant.