Privacy policy

1. The short version

• Markatron is for teachers. You sign in with a Google account.
• We store your account details, and the quizzes, answer keys, classes, student names and results you create, so they sync between your phone and the web dashboard.
• Photos of answer sheets never leave your phone. We never receive them.
• We do not show ads, do not sell personal information, and do not use analytics or advertising trackers.
• Payments are handled by Paymongo. We never see your card or e-wallet details.
• You can export your data at any time, and you can ask us to delete your account and everything in it.

2. Who is responsible for what

The Data Privacy Act distinguishes between a party that decides why personal data is used and a party that handles it on that party's behalf.

• Your account and billing information (Section 3.1 and 3.3): Markatron decides how this is used. We are the personal information controller.
• Student information and results you enter (Section 3.2): you, or your school, decide why and how it is used. You are the controller of that information. Markatron acts as your personal information processor: we store and sync it for you, we use it only to provide the Service, and we do not use it for our own purposes.

This matters because you are responsible for having the right to enter student information into Markatron, including any consent, authority or school approval your institution requires. See Section 11.

3. What we collect

3.1 Your account

We do not receive your Google password. Google handles sign-in under its own privacy policy.

3.2 Your teaching records

This is the data you create in the app or on the web:

• Quizzes: title, number of questions, number of answer choices, colour, and the answer key.
• Classes: class names, and which quizzes are assigned to which class.
• Students: name, gender (M or F, used only to order names on lists), section, and class.
• Results: the answers read from a sheet, the score and total, the date and time, an optional display title, and the link to a student and quiz.

Student names are personal information about people who are often minors. Test scores are information about a person's education, which the Data Privacy Act treats as sensitive personal information. We therefore handle this data with extra care and use it only to provide the Service to you.

3.3 Payments

If you buy Pro, we record: the plan, the amount and currency (PHP), the status, the payment method type (for example GCash, Maya or card), the Paymongo payment reference, and the dates. Your card number, e-wallet number and PIN are entered on Paymongo's page and are never seen or stored by us.

3.4 What stays on your phone and is never uploaded

• Photos of answer sheets and the cropped name area of each sheet. These are saved in the app's private storage so you can review a result later. They are not uploaded, to us or anyone else. Only the text record of the result (answers and score) syncs.
• Camera frames. The app uses your camera to find and read the sheet. Frames are processed on your device, and are not recorded or transmitted.

If you uninstall the app or reset your phone, those images are lost. We cannot recover them.

3.5 Technical information

• Sign-in session. When you sign in, a token is stored on your phone, and the website sets one cookie that keeps you signed in.
• Browser storage on the website. Your browser keeps display preferences (for example list or card view), a counter of scans made, and a local copy of your records to keep the dashboard responsive.
• Server logs. Our hosting providers keep standard request logs (such as IP address, browser type and time) for security and reliability.
• App version. The app checks whether your version is still supported. This does not send your records.

3.6 What we do not collect

We do not collect your location, contacts, microphone, advertising ID or files. The Android app requests only camera, internet and network state permissions. The website sets no analytics, advertising or tracking cookies.

4. How we use information

• To create your account, sign you in, and keep you signed in.
• To store your records and sync them between your phone and the web dashboard.
• To grade sheets, produce item analysis and statistics, and let you export results.
• To process Pro purchases, grant Pro time, and keep payment records.
• To give you support, including investigating a problem you report.
• To secure the Service, prevent abuse and fix errors.
• To meet our legal obligations.

We do not use your records for advertising, profiling, or to sell anything to you or anyone else.

Legal basis. We process your account and billing data to perform our agreement with you and for our legitimate interests in running and securing the Service. We process records you enter on the basis of your instructions as the controller (and, where consent is required, the consent you or your school have obtained).

5. Who we share information with

We do not sell personal information. We share it only with the service providers that run the Service, and only so they can do that.

Our staff. A small number of authorised Markatron support personnel can view and manage account data through an internal console. This is used only to give you support, handle billing, and investigate problems. It is restricted to named administrators.

Legal requests. We may disclose information if the law, a court or a competent authority requires it, or to protect the rights, safety and security of our users or the public.

Business transfers. If Markatron is reorganised, sold or transferred, your information may move to the new operator, which will be bound to honour this policy.

Where information is processed

Our providers may store and process information outside the Philippines. Our database is hosted in Singapore. We rely on contracts with our providers to protect your information to the standard the Data Privacy Act requires.

6. How long we keep information

• Your account and records are kept while your account exists.
• When you delete a quiz, class, student or result, it disappears from your screens immediately. Behind the scenes it is marked as deleted rather than erased, so that your other devices learn about the deletion. These marked records stay in our database, hidden from you, until your account is deleted. If you want them erased sooner, ask us (Section 8).
• When your account is deleted, we delete your profile, settings, quizzes, classes, students, results and sync data.
• Payment records are removed with your account, except that we may keep records we are legally required to keep (for example for tax and accounting). Paymongo keeps its own transaction records under its own policy.
• Server logs are kept by our hosting providers for a limited period under their policies.
• Backups held by our database provider are overwritten on its normal schedule.

7. Security

• All connections to the Service use encryption (HTTPS).
• Each teacher's records are isolated at the database level, so one account cannot read another's.
• Billing and entitlement fields can only be changed by our servers, not by the app or website.
• Access to the support console is limited to named administrators and protected by credentials and a session that expires.
• Payment card data never reaches our systems.

No system is perfectly secure. If a personal data breach affects you and meets the threshold in law, we will notify the National Privacy Commission and the affected users within 72 hours of becoming aware of it, as the Data Privacy Act and NPC rules require.

9. Children

Markatron is for teachers and other adults. It is not directed to children, and children do not create accounts or use the app. A teacher may enter a student's name and results; those are handled as described in Sections 2 and 3.2, and are the teacher's and school's responsibility to manage lawfully. If you believe a child has created an account, contact us and we will remove it.

10. Sign-in with Google

When you choose "Continue with Google", Google tells us your name and email address so we can create your account. Google's handling of that information is governed by Google's own privacy policy. You can remove Markatron's access in your Google Account settings; this does not delete your Markatron account or its data.

11. Your responsibilities for student data

If you enter student information, you are responsible for:

• having the authority, and any consent or school approval required, to do so;
• following your school's data privacy rules and the Data Privacy Act;
• entering only what you need (for example, you do not need a student's full legal name to grade a sheet);
• keeping your phone and Google account secure, because anyone who can open your signed-in app can see your records; and
• exporting results you need to keep.

12. Changes to this policy

We may update this policy as Markatron changes. We will change the "Last updated" date above. If a change is material, for example if we start using information for a new purpose, we will tell you through the app or by email before it takes effect.

13. Contact

Markatron — CASIANO COMPUTER PROGRAMMING SERVICE, Tampakan, South Cotabato

General and privacy requests: support@markatron.com

Data Protection Officer: support@markatron.com

Regulator: National Privacy Commission