Privacy Policy

Effective date: 4 October 2026

This Privacy Policy explains how ROGA International Pte Ltd ("ROGA", "we", "us") collects, uses, shares and protects personal data when you use the ROGA Education Management System at roga-edu.vip (the "Service"). We follow the Singapore Personal Data Protection Act 2012 ("PDPA").

1. Who this policy covers

The Service is a private system for ROGA's debate, public speaking and English programmes. It is used by:

  • Students enrolled in ROGA classes, and their parents or guardians;
  • ROGA staff, including coaches, teachers, course consultants, academic leads and administrators.

Accounts are created by ROGA; the Service has no public sign-up.

2. Information we collect

Account information

  • Name, email address, role, password (stored only as a salted hash) and language preference.

Student and family information

  • Student name, parent or guardian name, contact details (email, phone, messaging handles), school, level and similar enrolment details.
  • Class enrolments, timetable, attendance, lesson and hour balances, make-up and transfer records.
  • Learning records: homework assignments and submissions, files and videos students upload, teacher feedback, class progress reports, guided notes, competition sign-ups and results.
  • Payment records: packages, invoices, amounts paid and refunds. The Service does not collect or store card or bank account numbers.

Messages and files

  • Messages sent through the Service's chat, notes written by staff, and files attached to homework, notes and other records.

Technical information

  • IP address, sign-in times, browser and device information, and an audit log of important actions (used for security and to resolve disputes).
  • If you allow notifications, a browser push subscription so we can send you alerts.
  • Your browser stores your sign-in session and language choice locally. We do not use advertising or third-party analytics trackers.

3. How we use information

  • To run classes: scheduling, attendance, lesson balances, homework, feedback and progress reports.
  • To communicate with students, parents and staff, including notifications and emails about classes, homework, notes and payments.
  • To manage enrolment, packages, invoices and payments.
  • To keep the Service secure, prevent misuse and keep records required by law.
  • To improve our programmes and the Service.

We do not sell personal data, and we do not use it for advertising.

4. Children

Many of our students are under 18. We collect a child's personal data with the consent of a parent or guardian, given when the child enrols with ROGA. Parents and guardians can see their child's records in the Service and can contact us at any time to access, correct or delete them.

5. Who we share information with

Within ROGA, staff see only the information their role needs (for example, a coach sees the students in their own classes). Outside ROGA, we share personal data only with service providers that help us run the Service, under confidentiality obligations, and only for that purpose:

  • Cloud hosting (Alibaba Cloud), where the Service and its database run;
  • Email delivery providers, to send notifications;
  • Google Drive, to store student homework videos (see section 6) and, if enabled, class recordings;
  • Zoom and Lark / Feishu, if enabled, to transfer class recordings;
  • Anthropic (Claude AI), if enabled by an administrator, to translate text that staff choose to translate and to help staff generate lesson materials. Homework videos are never sent to it.

We may also disclose information where required by law, or to protect the safety of students, staff or others.

6. Google user data

An administrator of ROGA can connect a Google account so that students can upload homework videos. When connected, the Service requests only Google's drive.file permission and the account's basic profile (email address). With this:

  • The Service creates a ROGA Homework Videos folder in that Google Drive, uploads student homework videos into it, plays them back to authorised viewers (the student, their teacher and ROGA staff), and deletes each video about 90 days after it is graded.
  • The Service can access only the files and folders it creates. It cannot see, read, change or delete any other files in that Google Drive.
  • The connected account's email address and storage usage are shown to the administrator in Settings so they can confirm the connection.
  • Google sign-in credentials are stored securely on our server and are never shown in the Service.

We do not sell Google user data, use it for advertising, or use it to train artificial intelligence or machine learning models. We do not transfer it to others except as needed to provide this feature, for security, or to comply with the law. People at ROGA do not read the data except where needed for teaching (for example, a teacher watching a student's homework video), for security, or as required by law.

ROGA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The administrator can disconnect Google at any time in Settings, or remove ROGA's access at myaccount.google.com/permissions.

7. How long we keep information

  • Homework videos are deleted about 90 days after grading.
  • Student, family and staff records are kept while the person studies or works with ROGA, and afterwards only as long as needed for the purposes above, for example to keep financial records required by Singapore law (generally five years).
  • When information is no longer needed, we delete or anonymise it.

8. How we protect information

The Service uses encrypted HTTPS connections, hashed passwords, role-based access, limits on repeated failed sign-ins, audit logs and regular backups. No system is completely secure, but we take reasonable steps to protect personal data and will notify affected people and the authorities of a notifiable data breach as the PDPA requires.

9. Transfers outside Singapore

Some service providers may store or process data outside Singapore. When this happens, we take steps to make sure the data receives protection comparable to the PDPA.

10. Your rights

You may ask to access or correct your personal data (or your child's), ask us to delete it, or withdraw your consent to our use of it. Withdrawing consent may mean we can no longer provide some services. Email info@roga-edu.com; we aim to reply within 30 days.

11. Changes to this policy

We may update this policy from time to time. The effective date above shows when it last changed, and we will tell users about significant changes through the Service or by email.

12. Contact us

ROGA International Pte Ltd, Singapore
Data Protection Officer: info@roga-edu.com