Privacy Architecture

1. Information Collection Architecture

MohAcademy operates on a principle of data minimization. We extract and process only the discrete data matrices explicitly required to map your GCE Advanced Level progress and secure your session authentications. The nodes collected include:

• Identity Vectors: Your registered full name, validated email channel, and securely hashed cryptographic passwords utilized during account initialization.
• Academic Telemetry: Precision tracking of your performance matrices, including completed evaluation quizzes, selected subject domains (e.g., Physics vs. Biology), XP scores, and virtual laboratory configurations.
• Diagnostic Metadata: Non-personally identifiable server-side telemetry, including your browser architecture, IP connection node, and interface response times to debug rendering errors.

2. Processing Channels & Utilization

Your data is processed strictly within isolated computational pipelines to construct a superior academic environment. The engine utilizes this information to:

• Render personalized, real-time dashboard analytics tracking your syllabus mastery.
• Generate specific study recommendations based on detected knowledge gaps in past-paper execution.
• Facilitate the community forum by attaching your identity node and XP ranking to your published inquiries and answers.
• Deploy essential system notifications, OTP validation tokens, and security alerts to your registered email channel.

3. Third-Party Transmission Policy

MohAcademy enforces an absolute zero-tolerance policy regarding data commoditization. We explicitly guarantee that your identity parameters, academic performance, and telemetry logs will never be sold, rented, or licensed to external advertising networks, marketers, or data brokers.

Data transmission is strictly limited to heavily audited, secure infrastructure partners required to keep the academy operational. This includes our encrypted cloud database hosts (e.g., MongoDB Atlas) and automated email dispatch servers. These entities are bound by strict processing agreements preventing independent data usage.

4. Cryptographic Security Standards

Your academic and personal profiles are shielded by enterprise-grade digital defenses. All data in transit between your browser and our server engine is routed through high-tier TLS 1.3 encryption protocols, preventing packet interception.

Data at rest within our core database is protected utilizing AES-256 encryption frameworks. Authentication passwords are never stored in plain text; they are salted and hashed using advanced cryptographic algorithms before reaching our storage arrays.

5. Data Retention & System Purges

We maintain your profile matrices only for the duration required to fulfill your academic objectives. Active student accounts retain their data to track long-term GCE progression.

If an account registers zero system interactions for a continuous period of 24 months, the profile is flagged as dormant. Following a final email notification, dormant profiles undergo an automated database purge, permanently erasing all associated academic and identity data to prevent unnecessary server bloat.

6. Student Authority & Integrity Controls

We recognize and enforce your complete sovereignty over your digital footprint. In alignment with global data protection frameworks, you possess the immediate right to:

• Extraction: Request a complete, machine-readable export of all your academic and profile data logs.
• Rectification: Overwrite or modify any inaccurate biographical or subject parameters via your dashboard terminal.
• Termination (Right to Erasure): Execute a permanent deletion command from your settings panel. This initiates a hard-delete sequence, stripping your identity, forum posts, and quiz scores from our servers within 72 hours.

7. Telemetry & Local Cookies

The MohAcademy interface relies on localized session cookies solely to maintain your authentication state across different subject domains (preventing you from logging in repeatedly). We utilize local storage architecture (e.g., `localStorage`) to cache temporary assets like your dark-mode preferences or unsaved forum drafts.

We do not deploy invasive cross-site tracking scripts, tracking pixels, or third-party behavioral cookies designed to monitor your activity outside of the MohAcademy domain.