DATA PRIVACY NOTICE

EduPath-AI College Recommendation System

Effective Date: April 22, 2026

---

IMPORTANT NOTICE

This Data Privacy Notice explains how EduPath-AI collects, uses, stores, and protects your personal information in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173). Please read this notice carefully to understand your rights and how we handle your data.

---

1. PERSONAL INFORMATION CONTROLLER

EduPath-AI College Recommendation System is the Personal Information Controller responsible for the collection, processing, and protection of your personal data.

Contact Information:

• Address: Ormoc City, Leyte, Philippines
• Email: privacy@edupathAI.edu.ph
• Data Protection Officer: dpo@edupathAI.edu.ph

---

2. WHAT PERSONAL DATA WE COLLECT

We collect the following types of personal information to provide you with accurate college program recommendations:

2.1 Basic Account Information

• Full Name
• Username
• Email Address
• Password (encrypted and securely stored)
• Account creation date and last login timestamp

2.2 Personal Information

• Age and Gender
• Contact Number
• Home Address

2.3 Academic Information

• Senior High School (SHS) Strand (STEM, HUMSS, ABM, GAS, TVL, etc.)
• SHS School Name
• Expected or Actual Graduation Year
• Subject Grades (Grade 11 and Grade 12) including:
• Core subjects: Math, Science, English, Filipino
• Specialized subjects based on your strand
• Overall GPA (General Weighted Average)

2.4 Interests and Preferences

• Career Interests and Goals
• Preferred Field of Study
• Hobbies and Skills
• Extracurricular Activities
• Leadership Roles and Awards
• Learning Style and Personality Type

2.5 Financial Information

• Budget Range for College Tuition
• Scholarship Interest (Yes/No)
• Preferred College Location

2.6 System Usage Data

• Login Activity and Timestamps
• Pages Visited within the System
• Recommendation Views and Interactions
• User Feedback and Ratings
• IP Address and Browser Information (for security purposes)

---

3. SENSITIVE PERSONAL INFORMATION

The system may collect the following sensitive personal information as defined under the Data Privacy Act:

• Academic Performance Data: Your grades and GPA are considered sensitive as they reflect your educational performance.
• Personality Assessment Results: Information from personality quizzes used for program matching.

We handle all sensitive personal information with the highest level of security and confidentiality.

---

4. WHY WE COLLECT YOUR DATA (Purpose and Legal Basis)

We collect and process your personal data for the following legitimate purposes:

4.1 Primary Purposes

• College Program Recommendations: To analyze your academic performance, interests, and preferences using machine learning algorithms to recommend the most suitable college programs for you.
• Account Management: To create and maintain your user account, authenticate your identity, and provide access to system features.
• Personalized Experience: To customize your dashboard, display relevant information, and track your progress.

4.2 Secondary Purposes

• System Improvement: To improve our machine learning models, enhance prediction accuracy, and develop new features.
• Research and Analytics: To conduct anonymized research on educational trends and program preferences (your identity will not be disclosed).
• Security and Fraud Prevention: To protect your account from unauthorized access and detect suspicious activities.
• Compliance and Legal Obligations: To comply with applicable laws, regulations, and legal processes.

---

5. HOW WE USE AND PROCESS YOUR DATA

Your personal data is processed in the following ways:

• Machine Learning Analysis: Your academic data, interests, and preferences are analyzed by our AI algorithms to generate personalized college program recommendations.
• Score Calculation: The system calculates match scores based on academic fit, interest alignment, strand compatibility, and career potential.
• Profile Completion Tracking: We monitor your profile completion status to guide you through the recommendation process.
• Teacher-Student Collaboration: Your assigned teachers can view and upload your grades to ensure accurate recommendations.
• Counselor Validation: Guidance counselors may review and validate your recommendations to provide additional support.

---

6. DATA RETENTION PERIOD

We retain your personal data for the following periods:

• Active Accounts: Your data is retained as long as your account remains active and you continue to use the system.
• Inactive Accounts: If you do not log in for 2 consecutive years, your account may be marked as inactive, and you will be notified via email.
• Account Deletion: After account deletion (either by you or after 3 years of inactivity), your personal data will be permanently deleted within 30 days, except for data required for legal compliance or audit purposes.
• Anonymized Data: Data used for research and system improvement is anonymized and may be retained indefinitely for statistical and analytical purposes.
• Audit Logs: Security and audit logs are retained for 1 year for accountability and security purposes.

---

7. DATA SECURITY MEASURES

We implement the following security measures to protect your personal data:

7.1 Technical Security

• Password Encryption: All passwords are hashed using industry-standard bcrypt encryption and are never stored in plain text.
• Secure Database Storage: Personal data is stored in secure databases with restricted access controls.
• HTTPS Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS protocols.
• Session Management: User sessions are securely managed with automatic timeout after inactivity.
• SQL Injection Prevention: We use prepared statements and parameterized queries to prevent SQL injection attacks.

7.2 Administrative Security

• Role-Based Access Control: Only authorized personnel (teachers, counselors, administrators) can access specific data based on their roles.
• Audit Trails: All data access and modifications are logged for accountability and security monitoring.
• Regular Security Updates: The system is regularly updated to address security vulnerabilities.
• Data Backup: Regular backups are performed to prevent data loss, and backups are stored securely.

7.3 Organizational Security

• Staff Training: All personnel with access to personal data are trained on data privacy and security best practices.
• Confidentiality Agreements: Staff members sign confidentiality agreements to protect user data.
• Incident Response Plan: We have procedures in place to respond to data breaches and security incidents.

---

8. DATA SHARING AND DISCLOSURE

We do not sell, rent, or trade your personal information to third parties. Your data is only shared in the following limited circumstances:

8.1 Within the System

• Teachers: Your assigned teachers can view and upload your academic grades.
• Guidance Counselors: Counselors may access your profile and recommendations to provide guidance and validation.
• System Administrators: Administrators have access to user data for system maintenance, support, and security purposes.

8.2 Legal Requirements

• We may disclose your information if required by law, court order, or government regulation.
• We may share data with law enforcement agencies to investigate fraud, security breaches, or violations of our Terms and Conditions.

8.3 No Third-Party Marketing

We do not share your personal information with external organizations for marketing or advertising purposes.

---

9. YOUR DATA SUBJECT RIGHTS

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights regarding your personal data:

9.1 Right to Be Informed

You have the right to be informed about the collection and processing of your personal data. This Privacy Notice serves that purpose.

9.2 Right to Access

You have the right to access your personal data stored in the system. You can view and download your profile information, grades, and recommendations from your dashboard.

9.3 Right to Correction

You have the right to correct inaccurate or incomplete personal data. You can update your profile information at any time through your account settings.

9.4 Right to Erasure or Blocking

You have the right to request the deletion or blocking of your personal data under certain conditions:

• When the data is no longer necessary for the purposes it was collected
• When you withdraw your consent (if consent was the basis for processing)
• When the data was unlawfully processed
• When required by law

Note: Some data may be retained for legal compliance, audit, or security purposes even after deletion.

9.5 Right to Object

You have the right to object to the processing of your personal data for direct marketing, automated decision-making, or profiling.

9.6 Right to Data Portability

You have the right to obtain a copy of your personal data in a structured, commonly used, and machine-readable format (e.g., CSV, JSON) for transfer to another system.

9.7 Right to File a Complaint

If you believe your data privacy rights have been violated, you have the right to file a complaint with:

• EduPath-AI Data Protection Officer: dpo@edupathAI.edu.ph
• National Privacy Commission (NPC): www.privacy.gov.ph

---

10. HOW TO EXERCISE YOUR RIGHTS

To exercise any of your data subject rights, you may:

• Update Your Profile: Log in to your account and edit your profile information directly.
• Download Your Data: Request a copy of your data by contacting us at privacy@edupathAI.edu.ph.
• Delete Your Account: Contact us at privacy@edupathAI.edu.ph to request account deletion. We will process your request within 30 days.
• Contact Us: For any privacy-related concerns, email us at privacy@edupathAI.edu.ph or dpo@edupathAI.edu.ph.

We will respond to your requests within 15 business days and may require identity verification to protect your data.

---

11. COOKIES AND TRACKING TECHNOLOGIES

EduPath-AI uses session cookies to maintain your login state and provide a seamless user experience. These cookies are:

• Essential: Required for the system to function properly (e.g., keeping you logged in).
• Temporary: Deleted when you close your browser or log out.
• Non-Tracking: We do not use third-party tracking cookies or analytics tools that collect personal data.

---

12. CHILDREN'S PRIVACY

EduPath-AI is designed for Senior High School students (typically aged 16-18 years old). If you are under 18 years of age, we recommend that you:

• Inform your parents or guardians about your use of this system.
• Seek parental guidance when providing personal information.

We do not knowingly collect data from children under 13 years of age without parental consent.

---

13. CHANGES TO THIS PRIVACY NOTICE

We may update this Data Privacy Notice from time to time to reflect changes in our practices, legal requirements, or system features. When we make significant changes, we will:

• Notify you via email or through a prominent notice on the system.
• Update the "Effective Date" at the top of this notice.
• Provide you with an opportunity to review the updated notice.

Your continued use of the system after the changes take effect constitutes your acceptance of the updated Privacy Notice.

---

14. CONTACT US

If you have any questions, concerns, or requests regarding this Data Privacy Notice or how we handle your personal data, please contact us:

• Email: privacy@edupathAI.edu.ph
• Data Protection Officer: dpo@edupathAI.edu.ph
• Address: EduPath-AI, Ormoc City, Leyte, Philippines

---

YOUR PRIVACY MATTERS

EduPath-AI is committed to protecting your personal data and respecting your privacy rights. We comply with the Data Privacy Act of 2012 (RA 10173) and implement industry-standard security measures to safeguard your information.

---

Document Version: 1.0

Last Updated: April 22, 2026

Compliance: Data Privacy Act of 2012 (Republic Act No. 10173)

TERMS AND CONDITIONS

EduPath-AI College Recommendation System

Effective Date: April 22, 2026

---

IMPORTANT NOTICE

Please read these Terms and Conditions carefully before using the EduPath-AI system. By creating an account and using our services, you agree to be bound by these terms. If you do not agree with any part of these terms, you must not use the system.

---

1. ACCEPTANCE OF TERMS

By accessing and using the EduPath-AI College Recommendation System ("the System"), you acknowledge that you have read, understood, and agree to be bound by these Terms and Conditions, as well as our Data Privacy Notice.

These terms constitute a legally binding agreement between you ("User," "Student," "you") and EduPath-AI ("we," "us," "our").

---

2. SCOPE AND PURPOSE OF THE SYSTEM

EduPath-AI is an educational recommendation system designed to assist Senior High School (SHS) students in the Philippines in identifying suitable college programs based on:

• Academic performance (grades and GPA)
• SHS strand and subject specialization
• Personal interests, skills, and career goals
• Personality assessment results
• Machine learning algorithms and predictive analytics

Purpose: The System provides guidance and recommendations only. It does not guarantee admission to any college or university, nor does it replace professional academic counseling.

---

3. USER ELIGIBILITY AND ACCOUNT REGISTRATION

3.1 Eligibility

To use EduPath-AI, you must:

• Be a current or former Senior High School student in the Philippines.
• Be at least 16 years of age (or have parental/guardian consent if under 18).
• Provide accurate and truthful information during registration.
• Have a valid email address for account verification and communication.

3.2 Account Registration

When you register for an account, you agree to:

• Provide accurate, current, and complete information.
• Maintain and promptly update your account information.
• Keep your password secure and confidential.
• Notify us immediately of any unauthorized use of your account.
• Accept responsibility for all activities that occur under your account.

3.3 One Account Per User

Each user is allowed only one account. Creating multiple accounts using different email addresses or usernames is prohibited and may result in account suspension or termination.

---

4. USER RESPONSIBILITIES AND ACCEPTABLE USE

4.1 Responsible Use

You agree to use the System in a responsible and lawful manner. You must:

• Provide accurate and honest information about your academic performance, interests, and preferences.
• Use the System solely for its intended purpose (college program recommendations).
• Respect the privacy and rights of other users, teachers, and administrators.
• Comply with all applicable laws and regulations, including the Data Privacy Act of 2012 (RA 10173).

4.2 Prohibited Activities

You agree NOT to engage in any of the following prohibited activities:

• Unauthorized Access: Attempting to access accounts, data, or system areas that you are not authorized to access.
• Data Manipulation: Falsifying grades, test scores, or other academic information to manipulate recommendations.
• System Abuse: Using automated scripts, bots, or tools to scrape data, overload the system, or disrupt its operation.
• Security Breaches: Attempting to hack, exploit vulnerabilities, or bypass security measures.
• Impersonation: Pretending to be another user, teacher, counselor, or administrator.
• Malicious Content: Uploading viruses, malware, or any harmful code.
• Harassment: Harassing, threatening, or abusing other users or staff members.
• Intellectual Property Violation: Copying, distributing, or modifying system content without permission.
• Commercial Use: Using the System for commercial purposes, advertising, or solicitation without authorization.

⚠️ WARNING: Violation of these prohibited activities may result in immediate account suspension or termination, and may be reported to appropriate authorities if illegal activity is suspected.

---

5. DATA OWNERSHIP AND HANDLING RESPONSIBILITIES

5.1 Your Data

You retain ownership of the personal data you provide to the System. However, by using the System, you grant us a limited license to:

• Process your data to generate college program recommendations.
• Store your data securely in our databases.
• Use anonymized and aggregated data for research, analytics, and system improvement.

5.2 Data Accuracy

You are responsible for ensuring that the information you provide is accurate, complete, and up-to-date. Inaccurate data may result in incorrect or misleading recommendations.

5.3 Teacher-Uploaded Grades

Your assigned teachers may upload your academic grades to the System. You acknowledge that:

• Teachers have the authority to input and update your grades.
• You should verify the accuracy of uploaded grades and report any discrepancies to your teacher or school administration.
• EduPath-AI is not responsible for errors in grades uploaded by teachers.

5.4 Data Privacy Compliance

We handle your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and our Data Privacy Notice. By using the System, you consent to the collection, processing, and storage of your data as described in the Privacy Notice.

---

6. RECOMMENDATIONS AND DISCLAIMERS

6.1 Nature of Recommendations

The college program recommendations provided by EduPath-AI are:

• Guidance Only: Recommendations are suggestions based on data analysis and machine learning algorithms. They are not guarantees of admission or success.
• Not Professional Advice: The System does not replace professional academic counseling, career guidance, or admissions consulting.
• Subject to Change: Recommendations may change as you update your profile, grades, or preferences.

6.2 No Guarantee of Admission

EduPath-AI does not guarantee that you will be admitted to any recommended college or program. Admission decisions are made solely by the respective colleges and universities based on their own criteria and processes.

6.3 Accuracy and Reliability

While we strive to provide accurate and reliable recommendations, we cannot guarantee:

• The accuracy of program information (tuition fees, admission requirements, etc.) as these may change over time.
• The suitability of recommended programs for your specific circumstances.
• The availability of programs or seats at the time of your application.

6.4 User Responsibility

You are responsible for:

• Conducting your own research on recommended programs.
• Verifying program details directly with the colleges or universities.
• Making your own informed decisions about college applications.
• Seeking professional guidance from school counselors or career advisors.

---

7. LIMITATION OF LIABILITY

7.1 System Availability

We strive to keep the System available and operational at all times. However, we do not guarantee:

• Uninterrupted or error-free access to the System.
• That the System will be free from bugs, viruses, or technical issues.
• That data will never be lost due to technical failures (though we maintain regular backups).

7.2 Limitation of Liability

To the fullest extent permitted by law, EduPath-AI and its developers, administrators, and staff shall not be liable for:

• Any direct, indirect, incidental, or consequential damages arising from your use of the System.
• Decisions made based on the recommendations provided by the System.
• Loss of data, academic opportunities, or financial losses.
• Errors, inaccuracies, or omissions in the recommendations or program information.
• Unauthorized access to your account due to your failure to secure your password.

7.3 Academic System Context

EduPath-AI is an academic project developed for educational purposes. While we implement industry-standard security measures, users acknowledge that:

• The System is provided "as is" without warranties of any kind.
• Users assume all risks associated with using the System.
• The System is not a commercial product and may have limitations.

---

8. INTELLECTUAL PROPERTY RIGHTS

8.1 System Ownership

All content, features, functionality, and intellectual property of the EduPath-AI System, including but not limited to:

• Software code, algorithms, and machine learning models
• User interface design and graphics
• Text, images, logos, and branding
• Database structure and organization

are owned by EduPath-AI and are protected by copyright, trademark, and other intellectual property laws.

8.2 Restrictions

You may not:

• Copy, modify, distribute, or reverse-engineer any part of the System.
• Use the System's name, logo, or branding without permission.
• Extract or scrape data from the System for commercial purposes.
• Create derivative works based on the System.

---

9. ACCOUNT TERMINATION AND SUSPENSION

9.1 Termination by User

You may terminate your account at any time by:

• Contacting us at privacy@edupathAI.edu.ph to request account deletion.
• Your data will be deleted within 30 days as described in our Data Privacy Notice.

9.2 Termination by EduPath-AI

We reserve the right to suspend or terminate your account immediately, without prior notice, if:

• You violate these Terms and Conditions.
• You engage in prohibited activities or misuse the System.
• Your account has been inactive for more than 3 consecutive years.
• We are required to do so by law or legal process.
• We detect fraudulent, abusive, or suspicious activity.

9.3 Effect of Termination

Upon termination:

• Your access to the System will be immediately revoked.
• Your personal data will be deleted in accordance with our data retention policy.
• You will no longer receive recommendations or system notifications.

---

10. MODIFICATIONS TO TERMS AND CONDITIONS

We reserve the right to modify, update, or revise these Terms and Conditions at any time. When we make changes:

• We will update the "Effective Date" at the top of this document.
• We will notify you via email or through a prominent notice on the System.
• Significant changes will be highlighted for your review.

Your continued use of the System after changes take effect constitutes your acceptance of the updated Terms and Conditions. If you do not agree with the changes, you must stop using the System and may request account deletion.

---

11. COMPLIANCE WITH DATA PRIVACY ACT OF 2012 (RA 10173)

EduPath-AI is committed to full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173). We implement the following principles:

• Transparency: We clearly inform you about data collection and processing through our Data Privacy Notice.
• Legitimate Purpose: We collect and process data only for specified, legitimate purposes.
• Proportionality: We collect only the data necessary for our purposes (data minimization).
• Security: We implement appropriate technical and organizational measures to protect your data.
• Data Subject Rights: We respect and facilitate your rights to access, correct, delete, and port your data.
• Accountability: We maintain audit logs and documentation to demonstrate compliance.

---

12. GOVERNING LAW AND DISPUTE RESOLUTION

12.1 Governing Law

These Terms and Conditions are governed by and construed in accordance with the laws of the Republic of the Philippines, including but not limited to:

• Data Privacy Act of 2012 (RA 10173)
• Cybercrime Prevention Act of 2012 (RA 10175)
• Consumer Act of the Philippines (RA 7394)

12.2 Dispute Resolution

In the event of any dispute arising from these Terms and Conditions or your use of the System:

• Informal Resolution: We encourage you to contact us first at privacy@edupathAI.edu.ph to resolve the issue amicably.
• Mediation: If informal resolution fails, disputes may be referred to mediation.
• Legal Action: Any legal action must be filed in the appropriate courts of Ormoc City, Leyte, Philippines.

---

13. SEVERABILITY

If any provision of these Terms and Conditions is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect.

---

14. ENTIRE AGREEMENT

These Terms and Conditions, together with our Data Privacy Notice, constitute the entire agreement between you and EduPath-AI regarding your use of the System and supersede all prior agreements, understandings, or representations.

---

15. CONTACT INFORMATION

If you have any questions, concerns, or feedback regarding these Terms and Conditions, please contact us:

• Email: privacy@edupathAI.edu.ph
• Data Protection Officer: dpo@edupathAI.edu.ph
• Address: EduPath-AI, Ormoc City, Leyte, Philippines

---

16. ACKNOWLEDGMENT AND CONSENT

By creating an account and using EduPath-AI, you acknowledge that:

• You have read and understood these Terms and Conditions.
• You have read and understood our Data Privacy Notice.
• You agree to be bound by these terms and our privacy practices.
• You consent to the collection, processing, and storage of your personal data as described.
• Your continued use of the System constitutes acceptance of these terms.

---

Document Version: 1.0

Last Updated: April 22, 2026

Compliance: Data Privacy Act of 2012 (Republic Act No. 10173)