Privacy Policy

Last updated: 7 October 2026

1. Who we are

MS Korean Academy (“we”, “us”) is a Korean language institute in Karachi, Pakistan. This policy covers our website mskoreanacademy.com and our Android app MS Korean (package com.mskoreanacademy.app).

Contact for privacy questions: admin@mskoreanacademy.com · WhatsApp +92 318 8294992 · Karachi, Pakistan.

2. Information we collect and why

Admission applications (website and app)

Full name, father’s name, gender, nationality, phone, WhatsApp number, email, address, education, the course(s), study mode and timing you choose, how you heard about us, your current Korean level, an optional photo, and the signature you draw on the form. Why: to review your application, contact you and create your student account if you are admitted.

Student and teacher accounts

Name, username, password, email, phone, WhatsApp, address, photo, course and start date. Passwords are stored only as secure one-way hashes, never in readable form. Why: to let you sign in and to run your classes.

Teacher job applications

Name, contact details, gender, address, education, experience, specialties, CV/resume, photo and cover letter. Why: to assess teaching applications.

Learning, fee and certificate records

• Lesson progress, assignments, homework submissions and files, and teacher feedback.
• Fee records: the month or period, amount, payment method, transaction reference, the payment screenshot you upload, and receipts. Fees are paid through Easypaisa, JazzCash or bank transfer outside our app. We never receive your card number, bank password or wallet PIN.
• Certificates: certificate ID, your name, course and issue date. Anyone who has your certificate ID or fee receipt ID can check it on our verification page. This is so employers and others can confirm it is genuine.

Live classes (camera, microphone, whiteboard)

• The app and website use your camera and microphone only inside a live class, and only after you allow it. You can join with your camera or microphone off.
• Audio and video are sent directly between participants (peer-to-peer WebRTC) and are always encrypted in transit.
• If a direct connection is not possible on your network, the encrypted stream is passed through a TURN relay server run by our provider Metered (metered.ca). The relay forwards the stream but cannot see its content.
• To set up a connection, devices exchange technical details (such as network addresses) through the PeerJS connection service (peerjs.com). No audio or video goes through it.
• We do not record class audio or video on our servers. The teacher’s screen has a “Record” button that saves the whiteboard and the teacher’s own microphone audio as a file on the teacher’s own device. Students’ cameras and microphones are not part of that recording.
• The teacher’s whiteboard or PDF page is stored on our server as an image during the class, so students who join late can see it.
• Attendance: your name, role, join and leave times, and whether you raised your hand.
• Free demo classes: the name and phone number you enter to join.

Class chat

Messages you send in a live class chat are stored on our server with your name and role. Other participants of that class can see them. Please do not share private information in chat.

App sign-in and quick login (PIN / fingerprint)

• When you sign in to the app, we store a sign-in token (as a hash), your phone’s model name (for example “Pixel 7”), the IP address at sign-in and the time. This lets you manage sessions and keeps accounts secure. Tokens expire automatically.
• If you turn on quick login, your phone stores a device credential in encrypted storage protected by the Android Keystore. Our server keeps only a hash of it, the phone model and when it was last used. It expires if it is not used for 180 days.
• Your fingerprint never leaves your phone. Android checks it, and we never receive or store fingerprint data. Your 4-digit PIN is checked on your phone and is not sent to us.

Password and PIN reset

Your email address and a one-time code. The code is stored only as a hash and is valid for 10 minutes. We also log the IP address of the request and the number of attempts to stop abuse.

Connection diagnostics

To fix live-class connection problems, the app and website send us technical events: connection type, relay use, error codes and timings. These records contain no names, no IP addresses (only a short anonymous code that changes every day) and no audio, video or chat content. They are stored in a private folder on our server.

Emails we send

We send service emails from noreply@mskoreanacademy.com: application received, approved or rejected, login details, password reset codes, fee status, new assignments, live class alerts and certificates. For each email we keep a delivery log: recipient address, subject, type and whether it was delivered. We do not keep the message text or codes. Academy staff receive notification emails at admin@mskoreanacademy.com when you submit an application, fee proof, homework or demo class request. We do not send marketing newsletters.

Messages to us

If you contact us by WhatsApp, phone or email, we receive your number or address and your message. We use them to reply.

Website analytics and third-party resources

Our website uses Google Analytics and Ahrefs Web Analytics to count visits and see which pages are useful. These services may receive your IP address, browser and device type, and the pages you view. Google Analytics may set cookies. The website also loads fonts and code libraries from Google Fonts, jsDelivr, cdnjs and unpkg, which receive your IP address when your browser downloads them. Some lesson videos may be played from YouTube, where YouTube’s own privacy policy applies.

The app itself contains no analytics, advertising or tracking SDKs.

App permissions

3. How we use information

Only to run the academy: process admissions, provide classes and lessons, manage accounts, check fees, issue and verify certificates, send service emails, keep the service secure and fix technical problems. We do not use your information for advertising or sell it. We do not make automated decisions about you.

4. Who we share it with

• Teachers and academy staff see the student information they need to teach and manage classes.
• Service providers who process data for us:
  • Hostinger: web hosting, database and email.
  • Metered: live-class relay.
  • PeerJS: live-class connection set-up.
  • Google Analytics and Ahrefs: website analytics only.
• Anyone who has your certificate or receipt ID can see the details on the verification page, as described above.
• Authorities, if Pakistani law requires it.

We do not sell, rent or trade personal data.

5. Security

All connections use HTTPS, and live-class media is encrypted. Passwords and sign-in tokens are stored as hashes. Quick-login data on your phone is encrypted. Private files and logs are kept outside the public website folder, and admin and teacher pages require a login. No system is perfectly secure. If you think your account is at risk, change your password and contact us.

6. How long we keep data

• Account, class, homework, fee and certificate records: while you are our student or teacher, and afterwards for as long as needed for records, fee accounting and certificate verification.
• Applications that do not lead to admission: as long as needed to handle the application and any follow-up. Deleted sooner if you ask.
• App sign-in tokens and quick-login credentials: until they expire or you sign out or turn quick login off.
• Password reset codes: valid for 10 minutes.
• Connection diagnostics and email delivery logs: kept for a limited time for troubleshooting, then deleted.
• When you ask us to delete your account, we follow the steps on the delete-account page.

7. Your choices and rights

• Ask for a copy of your information, or ask us to correct it.
• Ask us to delete your account and data on the delete-account page, by email or on WhatsApp.
• Turn off camera, microphone or biometric permissions at any time in your phone’s settings.
• Sign out of the app or turn off quick login at any time.

8. Children

Our courses are not directed at children under 13. Students under 18 should use our services with a parent’s or guardian’s permission. If you believe a child under 13 has given us personal data, contact us and we will delete it.

9. Changes

We may update this policy when our services change. The date at the top shows the latest version. Important changes will be announced on the website or in the app.

10. Contact

MS Korean Academy, Karachi, Pakistan
Email: admin@mskoreanacademy.com
WhatsApp: +92 318 8294992

See also: Terms of Service · Delete your account