Privacy Policy
- Who we are
- What we collect
- Why we use it
- Children
- Who sees it
- Class recordings
- How long we keep it
- How we protect it
- Your rights
- Cookies and browser storage
- Changes and contact
1. Who we are
Gergasi (https://gergasi.school) is run by Karyatama (registration no. [SSM registration number]), Kuala Lumpur, Malaysia. We are responsible for your personal data on Gergasi. Contact us about your data at support@gergasi.school.
2. What we collect
- Account: your name, email address, password (stored only as a secure hash), role (student or teacher), language, and your school level and subjects.
- Teachers: qualifications and verification documents, teaching subjects, and the bank details needed to pay you.
- Learning: classes booked and attended, your answers (including handwriting), marks, rankings, assignments, exam results, Power Congak points, and teachers' notes about your class.
- Communication: messages, enquiries to Gergasi, safety reports, warnings and appeals.
- Video and audio: your camera and microphone during live classes and Power Congak voice chat, and the parts of classes Gergasi records (section 6).
- Payments: what you bought, when, and the amount. Card and online-banking details are entered on the payment provider's page. We never see them.
- Telegram: if you link Telegram for alerts, your Telegram chat number.
- Technical: IP address, browser and device type, and logs of what happens on our servers, used to keep the service working and secure.
3. Why we use it
- To run your account, and your classes, bookings, credits, payments and payouts.
- To show teachers how their students are doing, and students how they are progressing.
- To send you the emails and alerts the service needs: sign-up codes, bookings, cancellations and receipts.
- To keep students safe, handle reports and appeals, and stop misuse and fraud.
- To improve Gergasi. Where possible we use figures that do not identify you.
- For promotion, only as explained in section 6.
- To follow the law.
We do not sell your personal data. We do not show third-party advertising.
4. Children
Gergasi has no minimum age. For a student under 18, the parent or guardian gives consent for us to use the child's data as described here. We collect only what we need to teach. A parent or guardian can ask to see, correct or delete their child's data at support@gergasi.school.
5. Who sees it
- Teachers see their students' names, class answers, marks and attendance.
- Other students in a class see your display name, your camera if it is on, and the class ranking. Leaderboards show display names only, never email addresses.
- Service providers who work for us, only for that work:
- Daily.co (live video)
- Billplz (payments)
- our email providers (Hostinger, and Amazon Web Services when it is switched on)
- Telegram (alerts, if you link it)
- our hosting provider
- Authorities, when the law requires it, or to protect someone from harm.
6. Class recordings
- Gergasi records some parts of classes for monitoring (safety, quality and complaints) and for promotion. Everyone in the class is told when this happens.
- Students and teachers are not allowed to record classes themselves.
- Recordings are seen only by Gergasi staff who need them.
- We will not use a recording showing a student's face, voice or name in promotion without the consent of the student or, if they are under 18, their parent or guardian.
7. How long we keep it
We keep your data for as long as your account is open. After an account is closed we delete or anonymise it, except what we must keep by law (such as payment records) or need to settle a dispute or safety matter. Monitoring recordings are deleted once they are no longer needed for those purposes.
8. How we protect it
Data travels over encrypted connections (HTTPS). Passwords are stored only as secure hashes, and access to personal data is limited to those who need it. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires.
9. Your rights
- Ask for a copy of the personal data we hold about you.
- Ask us to correct data that is wrong.
- Withdraw consent, or ask us to limit how we use your data. This may mean we can no longer provide some or all of the service.
- Ask us to close your account and delete your data, apart from records we must keep.
- Complain to the Personal Data Protection Commissioner (JPDP) if you are not happy with our answer.
Write to support@gergasi.school. We reply within 21 days.
10. Cookies and browser storage
We do not use advertising or tracking cookies. Your browser stores a few things so Gergasi works: your login for the current tab, your language, your theme and a few display preferences. Clearing your browser data removes them.
11. Changes and contact
We may update this policy. We tell you about important changes by email or in the app. This notice is available in English and Bahasa Melayu. If they differ, the English version applies.
Karyatama, Kuala Lumpur, Malaysia · support@gergasi.school