Privacy Policy

What this is

MyEnglish+ (the “Service”) is operated by AllWays Japan (the “School”) and is provided as an extension of the School's English-language curriculum for enrolled students. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices and rights you have. It is written to comply with Japan's Act on the Protection of Personal Information (APPI), with extra care for data about minors.

Who can use the Service

The Service is only for students enrolled at the School, their parents or guardians, and the School's teaching staff. Student accounts are created and issued by the School's teachers. We do not knowingly accept accounts from anyone else.

What we collect

From students:

• A teacher-issued username (no email is required from the student)
• Their display name as they want it shown (usually a first name or nickname)
• Their MyEnglish+ level and curriculum year
• Activity records: tasks completed, XP and coins earned, streak history, Brain Gym game results, achievements approved by the teacher, items purchased in the avatar shop
• Optional notes the student writes back to the teacher when completing a task

From parents/guardians:

• Display name and email address
• The link to their child's account
• Messages they send to or receive from the teacher
• (Later, when LINE messaging is enabled) the parent's LINE user ID, used solely to deliver messages from the teacher

From teachers:

• Display name and email address
• Records of their teaching activity within the Service: tasks created, assignments made, achievements approved, messages sent

Why we collect it

• To deliver the educational service the School provides
• To allow the student to access their account and resume progress between classes
• To allow the teacher to monitor and support each student's learning
• To allow parents to see their child's progress and communicate with the teacher
• To maintain a record of teacher approvals for skill achievements

We do not use any information for advertising, profiling, or sale to third parties.

Parental consent

Because students are minors, no student data is collected without the explicit consent of the student's parent or guardian. When a teacher links a parent to a student account for the first time, that parent is presented with a consent screen summarising this policy. They must accept before any student-related data is shown to them or before they can communicate with the teacher inside the Service. The consent record (timestamp and policy version) is stored alongside their account.

A parent may withdraw consent at any time by emailing the School (see “Contact us” below). On withdrawal, the linked student's account is disabled and the family's data is removed from active use, with deletion completed within a reasonable period.

How long we keep it

We keep student progress records for as long as the student is enrolled at the School plus a reasonable period after graduation, to allow continuity of records and certificates. Inactive accounts may be archived. Parents may request earlier deletion at any time.

Who can see what

• A student sees only their own data.
• A parent sees only the data for children linked to their account.
• A teacher sees only the students in classes they are responsible for (and, where school administration permits, the parents linked to those students).
• The School administrator sees all data necessary to operate the Service.

These restrictions are enforced at the database level by Row Level Security rules, not by the application UI alone.

Where it is stored

Data is stored on managed infrastructure provided by Supabase (managed Postgres hosting) and served through Vercel. Both providers operate to commercial standards for security and access control. Data may be processed in regions outside Japan as part of normal operation of these services.

Your rights

At any time, you (or the parent on behalf of the student) may:

• Ask what data we hold about you or your child
• Ask for inaccurate data to be corrected
• Withdraw consent and request deletion
• Ask a question about how the Service handles personal information

All requests are handled by email — see below.

Contact us

For any privacy question, consent withdrawal, or data deletion request, please email sehrish@allwaysjp.com. We aim to respond within 14 days.

Changes to this policy

If we update this policy in a way that materially changes how we collect or use student data, we will require parents to review and re-consent before continuing to use the Service.