Privacy Policy

English For Life — Privacy Policy

Applies to: the English For Life Moodle website and branded English For Life mobile app for iOS and Android.

Effective date: 25 September 2026

1. Who we are and what this policy covers

English For Life LLC ("English For Life", "we", "us") is responsible for the personal data described in this policy. In data-protection law, this role is called the data controller.

Registered address: Hristijan Todorovski Karposh, Kumanovo 43, North Macedonia

Privacy and account-deletion contact: info@englishforlife.edu.mk

Phone: 071 989 903

This policy covers app.englishforlife.edu.mk and our branded mobile app (together, the "Service"). It applies to visitors, learners, teachers and other account holders. The Service is an educational teaching-and-learning platform for learners aged 9 and older, including teenagers and adults. All learning materials we provide through the website and app—including courses, lessons, quizzes, tests, books, pages, images, audio, videos and interactive exercises—are provided solely for educational purposes: learning English, practising skills, assessing progress and supporting teaching. Messages, forums, announcements and reminders support learning and school administration. Course access and the choice of materials should reflect each learner’s age, level and educational needs; a 9+ audience does not mean that every course is suitable for every nine-year-old. An account or enrolment may be needed for particular features. Offering the app free of charge does not mean that every school course is free.

Moodle is the software underlying the Service. This is English For Life's policy, not a policy for every Moodle website or the separate services of Apple, Google or other providers.

2. A short explanation for learners

We need some information about you to create your account, provide lessons, save answers and results, and help you learn. Your teachers can see learning records relevant to their role. Other people can see information you share with them, such as a message, forum post or profile information available to them.

The app also keeps some information on your phone to make it faster. Removing the app is not the same as deleting your school account. You can ask us about your information, request a copy or ask for deletion using the contact above or the privacy tools described below. You never need to send us your password to make a privacy request.

For younger learners: do not share your password, home address or private family information in messages or activities. If a message or activity worries you, stop and tell a parent, guardian or teacher. Ask a trusted adult to help you contact us about your information.

3. Age requirements and younger learners

Who may use the Service: English For Life is intended for learners aged 9 and older. It is not intended for children under 9. Children aged 9–12 should use the Service with the involvement of a parent or legal guardian and, where relevant, their teacher or school. Parents and guardians should help younger learners understand this policy and choose suitable activities.

Age rating is not privacy consent: an app-store content rating, including a 9+ rating, describes content suitability. It does not establish a child’s legal ability to consent, replace parental authorization, or exempt an educational service from children’s privacy laws. Downloading the app, enrolling in a course or acknowledging this policy does not by itself provide any parental consent required by law.

Being old enough to use the Service does not always mean being old enough to give privacy consent independently. When we rely on consent for an online service offered directly to a child in North Macedonia, a child under 14 needs a parent or legal guardian's authorization. Other countries may have a different consent age. Where authorization is legally required, it must be obtained before the relevant consent-based processing. Other processing may have a different lawful basis, as explained below.

If you are under 18, we encourage you to read this policy with a parent or guardian. Parents and guardians can contact us with questions; access to a learner's records depends on applicable law and appropriate verification, not simply on someone claiming to be a parent.

Where the United States Children’s Online Privacy Protection Act (COPPA) applies to a learner under 13, the required notice and verifiable parental consent must be in place before collecting personal information, unless a specific lawful exception applies. School authorization may be used only where the applicable law permits it and only within its educational-purpose limits; teacher involvement alone is not a substitute for legally required consent.

A parent or legal guardian may contact info@englishforlife.edu.mk to ask about a child’s information, request access or correction, request deletion, or withdraw consent where processing relies on it. We may need to verify the requester’s identity and authority. Withdrawal may make a consent-dependent feature unavailable; lawful retention exceptions are explained in this policy.

If you believe a child under 9 is using the Service, or a child’s information has been collected without legally required authorization, please contact us. We will investigate, restrict the affected processing where appropriate, and arrange deletion or other corrective action as required by applicable law.

4. Information we process and where it comes from

Depending on the features you use, we process:

• Account and profile information: name, username, email address, account identifiers, login credentials or authentication tokens, language preferences, enrolments, groups, roles, and profile details or photographs you provide.
• Learning information: course participation, quiz attempts and answers, question interactions, submissions and uploaded work, grades, feedback, completion status, activity times, badges, points, streaks and reward history. Audio, video or images become part of your submission if you choose to upload or record them.
• Communications and support: private or group messages, forum posts, attachments, notification preferences, reports of inappropriate content, support requests and related correspondence.
• School administration information: relevant enrolment or course-fee/payment-status information where the school uses the Service to display or manage it. Information entered into an external payment service is also subject to that provider's notice.
• Technical and security information: IP address, request and connection information, browser or app information, errors and security events, and device information used to provide and troubleshoot the Service.
• Mobile notification information: device manufacturer and model, operating system and version, app and device/installation identifiers, push-notification tokens and, where supported, an app-generated public key used by notification features.
• Privacy administration records: policy acknowledgments, consent records where applicable, privacy requests, and records needed to document how those requests or authorised cleanup operations were handled.

Information comes from you, your use of the Service and your device, and from authorised school staff or other users interacting with you. Accounts may be created through registration or administered by the school. You should provide only information needed for the activity. Avoid putting health information, identity documents, passwords or other sensitive information into messages or coursework unless we have specifically explained why it is needed and how to provide it safely.

5. Why we use information and our lawful bases

We use information to operate accounts and course access; deliver and assess learning; save and recover work; communicate about teaching; administer enrolments; provide support; prevent misuse; protect the Service; and meet legal obligations.

Where applicable data-protection law requires a lawful basis, we use the basis appropriate to the particular purpose:

• Contract: processing objectively necessary to provide an educational service under a contract with you, where a valid contract applies.
• Legitimate interests: necessary, proportionate administration, service reliability, fraud prevention, security and support, where those interests are not overridden by your rights. Children's interests require particular consideration.
• Legal obligations: records or disclosures required by applicable law.
• Consent: optional uses for which consent is required. We explain the specific purpose when asking and obtain parental authorization where necessary.

Acknowledging this policy is not blanket consent to every use of your information. Optional consent can be withdrawn without affecting the lawfulness of earlier processing. If information is needed to operate an account, record a submission or deliver a requested feature, not providing it may prevent that feature from working. Declining an unrelated optional use should not prevent access to core learning.

6. Grades, progress and achievements

Quizzes and interactive activities may automatically mark answers, calculate scores, track completion, determine access to later activities or award badges, points and streaks. These functions use your answers, activity records and the rules set for the course. Teachers may also assess work or review results.

Contact the school if a result, completion decision or achievement appears incorrect, or if you need an explanation or human review. Rights relating to decisions made solely by automated processing apply where the relevant legal conditions are met.

7. Who can see your information

Access depends on the feature, course settings and each person's role:

• Authorised teachers, school administrators and support personnel can access information needed for their work.
• Message recipients and conversation members can see messages and attachments sent to them. Participants with access to a forum can see its posts. Profiles, badges, rankings or other shared achievements may be visible according to the relevant settings. Information posted in a publicly accessible area can be seen outside your class.
• Hosting, storage, backup, email, security and notification providers process information needed to operate the Service.
• We may disclose relevant information where required by law or where legally justified to investigate misuse, protect people or establish, exercise or defend legal claims.

Messages are not an end-to-end encrypted messenger service. Authorised administration or support access may be necessary for safety, troubleshooting or legal purposes. Recipients may retain or copy content you share; use care before posting someone else's personal information.

If you report a message, submit the report and the information needed to explain the issue. Opening the reporting form alone does not submit it, and the app does not automatically send the entire conversation with that form.

8. Service providers, notifications and external content

Cloudflare helps deliver and protect the website and API. Traffic passes through its infrastructure, so it processes connection and request information and may process content being delivered. Protected, account-specific information is not intended for a public shared cache. See Cloudflare's Privacy Policy.

Push notifications use our notification relay and Google's Firebase Cloud Messaging; delivery to Apple devices also involves Apple's push-notification service. Processing can include device and installation identifiers, notification tokens, routing information and notification content or metadata. A notification may contain a message preview or learning reminder. Depending on your device settings, other people may see previews on your lock screen. You can change notification and preview settings on your device and notification preferences available in the Service. See Firebase's privacy information and Apple's Privacy Policy.

External lessons, videos and links: a course may include material hosted by another provider. Loading it can send that provider your IP address, browser/device information and relevant cookie or session information. Features may also exchange identifiers or progress needed to operate the activity. The provider's own notice applies to its independent processing. Check the provider shown in the activity before using its services; contact the school if you need help or an alternative.

The current mobile app does not use Firebase Analytics or Firebase Crashlytics. This does not mean that the Service has no learning records, technical logs or operational data processing. Those uses are described in this policy. This policy does not authorise using student information for unrelated advertising; any new purpose needs its own lawful basis and any notice or consent required by law.

9. Cookies, local storage and faster loading

The website uses session cookies and related storage to keep you signed in, maintain security and remember relevant settings. Blocking necessary cookies can prevent sign-in or activities from working. Embedded providers may use their own cookies or storage. Where the law requires consent for optional cookies or similar technologies, it must be obtained before they are used.

The app stores account-specific data on your device, such as course information, media, profile and badge information, message previews and temporary work or recovery drafts. It may prepare and download accessible learning material before you open it, including over Wi-Fi or mobile data. This improves loading speed but uses device storage and may use your mobile-data allowance. A local draft is not proof that an answer or final submission has reached the server.

Some embedded activities on iOS may need the device's cross-site-cookie setting to work. Allowing that setting can affect how embedded websites use cookies; it is not consent to unrelated advertising or a waiver of your privacy rights. If you prefer not to change it, contact the school for help accessing the activity.

Logging out does not necessarily erase all cached information. Removing a saved account from the app removes its associated app-managed local database, files and stored login tokens, but does not delete the account on our server. Files you exported or saved elsewhere may remain. Before clearing app data, make sure any important work has been successfully submitted. Protect shared devices with their own access controls.

10. Device permissions and your choices

Depending on your device and chosen features, the app may request camera, microphone, photo/file access, notifications or reminder permissions. These support activities such as taking a profile photo, recording an assignment, attaching a file or receiving a reminder. Older Android versions may use broader storage permissions for file handling.

You can decline optional permissions or change them in system settings; the associated feature may then be unavailable. Providing one permission does not give permission for unrelated uses. The current app does not request access to your contacts or precise device location. An IP address can nevertheless reveal an approximate location.

11. How long information is kept

We retain identifiable information for as long as needed for the purpose for which it was collected, subject to applicable legal obligations and justified recordkeeping needs. The relevant criteria are:

• Accounts and enrolments: whether the account or educational relationship remains active, whether continuing access is needed, and any outstanding administrative or legal obligations.
• Learning records and submitted work: course delivery and assessment, result reviews or appeals, evidence of achievement, and any applicable education or recordkeeping requirements.
• Messages, forum posts and support records: the continuing conversation or course purpose, support resolution, moderation and justified dispute-handling needs.
• Technical records and notification identifiers: security, troubleshooting, delivery and operational needs; notification identifiers are also subject to the provider's lifecycle rules.
• Backups and deletion/audit records: recovery, security, accountability and applicable retention obligations. Backup copies may remain until the relevant backup rotation expires and are not a reason to continue ordinary use of information that should be deleted.

Detailed quiz answers can be removed through authorised attempt-cleanup procedures while a smaller, student-linked record of the quiz, score, status and time remains to support grades, badges or streaks. Removing attempt details is therefore not the same as erasing every learning or achievement record. There is no single automatic two-year deletion rule for every account or quiz.

Retention is not intended to be indefinite merely because storage is available. When information is no longer needed and no lawful reason requires retention, it should be deleted or irreversibly anonymised. Ask us for the retention criteria applicable to your records. If part of a deletion request cannot be fulfilled, we explain the reason and the relevant retention basis.

12. International processing

Service providers may process information outside the country where you live, including through international infrastructure used by Cloudflare, Google and Apple. Those countries may have different privacy laws.

Where applicable law restricts international transfers, the transfer must have an appropriate legal basis and safeguards, such as an applicable adequacy decision or approved contractual safeguards. Contact us for information about the locations and safeguards relevant to your data, including how to obtain a copy or description where available. The use of a well-known provider alone is not a substitute for required safeguards.

13. Security

We use measures designed to protect the Service, including encrypted connections, account and role-based access controls, and secure storage of mobile login tokens. No system is completely secure, and secure token storage does not mean every downloaded file or local database is separately encrypted by the app.

Use a strong password, keep your device updated and locked, and do not share account credentials. Contact us promptly if you suspect unauthorised account access or disclosure. We address security incidents and provide notices where required by applicable law.

14. Your rights and account deletion

Subject to applicable law and its conditions, you may request access to or a copy of your personal information, correction, deletion, restriction of processing or data portability. You may also object to processing based on legitimate interests and withdraw consent for consent-based processing.

To make a request:

• Use Data privacy in your account/profile area in the app or website, where available, to request a copy of your data or account/data deletion.
• Alternatively, email info@englishforlife.edu.mk. For deletion, use the subject English For Life — account deletion and identify your account using your registered email address or username. You can use this route without keeping the app installed. Do not send your password or unsolicited identity documents.

We may need proportionate information to verify the request and your authority to make it. We respond within the time required by applicable law and explain any permitted extension, refusal or retention exception. Making a request does not mean it has already been completed.

Account deletion includes associated personal data unless there is a lawful reason to retain particular records. Retained records must be limited to that reason; account deactivation alone is not a substitute for deletion. Deletion may remove access to courses, learning history, messages or achievements. Some discussion context may need to remain in anonymised form, and copies kept independently by other users or providers are subject to their own responsibilities.

Uninstalling the app, logging out, removing its saved account or deleting an individual quiz attempt does not submit an account-deletion request. A parent or guardian can contact us on a child's behalf where legally authorised.

You may complain to North Macedonia's Personal Data Protection Agency or another competent data-protection authority where applicable. You do not have to contact us first, although we welcome the opportunity to help resolve a concern.

15. Changes and contact

We may update this policy when the Service, our practices or legal requirements change. We show the effective date and provide notice of material changes through appropriate channels, such as the website, app or email. If a change requires fresh consent, publishing a revised policy does not replace obtaining that consent.

For privacy questions, requests or concerns, contact English For Life LLC at info@englishforlife.edu.mk or the registered postal address above.