Privacy Policy

iLearn CPAC — Last updated: March 2026

1. Introduction and scope

CPAC ("we", "our", or "the institution") operates the iLearn learning management platform and the iLearn CPAC mobile application (together, "iLearn" or "Services"). iLearn is available at lms.cpac.edu.ph and as a mobile app on the Google Play Store (Android) and the Apple App Store (iOS).

This Privacy Policy describes what personal data we collect, how we use it, who we share it with, and what rights you have. It applies to all users of our website and mobile apps, including students, instructors, and staff. By using iLearn, you agree to this policy. If you do not agree, please do not use our Services.

2. Information we collect

We collect information you provide, information we obtain from your use of our Services, and (where applicable) information provided by your institution.

Information you provide

  • Account and profile: Name, email address, username, password (stored in encrypted form), profile picture, and other details you give when registering or updating your account.
  • Content you create: Assignments, forum posts, messages, files, images, and other materials you submit through courses or the platform.
  • Communications: Messages you send to instructors, peers, or administrators through iLearn.

Information we obtain automatically

  • Usage and learning data: Course enrollments, activity completion, quiz and assignment submissions, grades, and other data generated when you use courses and features.
  • Device and app data: Device type, operating system (e.g. Android, iOS), app version, and similar technical data when you use the mobile app—used for compatibility, security, and support.
  • Log data: IP address, browser type, access times, and pages or features used when you access the website or app.

Analytics and performance

  • We may use analytics and crash-reporting tools (e.g. Google Firebase on Android; Apple-related services on iOS) to improve app stability and user experience. Where possible, we use aggregated or anonymized data that does not identify you personally.

What we do not do

We do not sell your personal data. We do not use your data for advertising or marketing by third parties. We collect only what is necessary to provide and improve our educational Services.

3. How we use your information

We use the information we collect to:

  • Deliver the Services: Operate the platform and mobile app, authenticate you, manage your account, and control access to courses and content.
  • Support learning: Track progress, grade work, run assessments, and enable communication between you, instructors, and peers.
  • Communicate with you: Send important notices about your account, courses, or the Services (e.g. password resets, course updates), where permitted by law or your preferences.
  • Improve and secure our Services: Diagnose technical issues, analyze usage patterns, and improve performance, security, and usability.
  • Comply with the law: Meet legal, regulatory, and institutional requirements (e.g. record-keeping, responding to lawful requests).

4. Legal basis for processing

We process your personal data:

  • To perform our contract with you (e.g. providing the learning management system and courses).
  • Where required by law (e.g. legal obligations, institutional or regulatory requirements).
  • With your consent where we have asked for it and you have agreed (e.g. optional communications or features).
  • For our legitimate interests in operating a secure, effective educational platform—where those interests are not overridden by your rights (e.g. security, fraud prevention, service improvement).

Where consent is the basis, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

5. Data sharing and disclosure

We do not sell your personal data. We may share your information only in these circumstances:

  • Within the institution: With authorized staff, faculty, and systems that need access to operate iLearn, deliver courses, and support you.
  • Service providers: With trusted third parties (e.g. hosting, analytics, email delivery) who process data on our behalf under strict confidentiality and data-processing agreements. They are not permitted to use your data for their own purposes.
  • Legal and safety: When required by law, court order, or government request; or to protect the rights, safety, or property of the institution, our users, or the public.
  • With your consent: Where we have clearly asked for and you have given explicit consent for a specific disclosure.

We do not share your personal data with third parties for their marketing or advertising.

6. Data security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (e.g. HTTPS/TLS) and, where applicable, encryption of sensitive data at rest.
  • Access controls and authentication so that only authorized personnel can access personal data.
  • Secure hosting and regular security assessments to reduce risks of unauthorized access, alteration, or loss.

No system is completely secure. You can help by using a strong password, keeping your login details confidential, and logging out when using shared devices.

7. Data retention

We retain your information:

  • For as long as your account is active and as needed to provide the Services.
  • After account closure or deletion, for as long as necessary to comply with legal obligations, resolve disputes, enforce our agreements, and meet institutional or regulatory retention requirements (e.g. academic records).

Learning and assessment data may be retained in accordance with institutional and regulatory policies. When data is no longer needed, we delete or anonymize it in line with our retention schedule.

8. Your rights

Depending on your location and applicable law (e.g. GDPR, Data Privacy Act of the Philippines), you may have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your data, subject to legal and institutional retention requirements.
  • Restriction: Request that we limit how we use your data in certain circumstances.
  • Objection: Object to processing based on legitimate interests or for direct marketing.
  • Data portability: Receive your data in a structured, machine-readable format where technically feasible.
  • Withdraw consent: Where processing is based on consent, withdraw it at any time.
  • Complaint: Lodge a complaint with a supervisory authority (e.g. National Privacy Commission in the Philippines).

To exercise these rights, contact your site administrator or the institution (CPAC) using the details in the Contact section below. We will respond within the time required by applicable law.

9. Children's privacy

iLearn is used in an educational context and may be used by minors under the supervision of their school or institution. We do not knowingly collect personal data from children in a manner inconsistent with applicable law (e.g. parental consent where required). If you are a parent or guardian and believe we have collected a minor's data inappropriately, please contact us so we can address it promptly.

10. International transfers

Your data is primarily processed in the Philippines. Where we use service providers or systems located in other countries, we ensure appropriate safeguards are in place, such as contractual clauses approved by relevant authorities (e.g. standard contractual clauses) or other mechanisms required by law, so that your data receives an adequate level of protection.

11. Third-party services and technologies

The mobile app may integrate with third-party services that have their own privacy practices:

  • Android: Google Play Services, Firebase (e.g. for analytics and crash reporting).
  • iOS: Apple frameworks and services (e.g. for push notifications, analytics where used).

Our website may use cookies and similar technologies (e.g. session cookies) to keep you logged in and to remember your preferences. We do not use these for third-party advertising. You can adjust your browser settings to limit or block cookies, though some features may not work correctly if you do.

We encourage you to review the privacy policies of these third parties. Our use of their services is consistent with this policy and limited to supporting app functionality, security, and improvement.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you via the app, email, or a notice on the platform. Your continued use of iLearn after the changes take effect constitutes acceptance of the updated policy. We encourage you to review this page periodically.

13. Contact

For privacy-related questions, requests to exercise your rights, or complaints:

Contact your institution (CPAC) or the iLearn site administrator.

Website: lms.cpac.edu.ph
Privacy policy: lms.cpac.edu.ph/privacy/

This privacy policy applies to the iLearn CPAC mobile application distributed on the Google Play Store (Android) and the Apple App Store (iOS), and to use of the iLearn website.