Data deletion

Logging out, leaving school and deleting data

Logging out or removing a school connection clears the selected device login/cache; uninstalling the app does not request server deletion. Ending access or disabling AI stops the relevant future access/processing but does not automatically erase previously submitted work. Leaving school does not override lawful record retention.

Access, correction, deletion and help

Contact the school office or its designated privacy contact through an existing verified private channel. Identify the student using the school reference, explain the records or activity concerned, and state whether you seek access, correction, removal or withdrawal of an optional permission. The school checks identity and any parental/guardian authority before disclosure.

Under Hong Kong’s Personal Data (Privacy) Ordinance, statutory access and correction requests are generally to be complied with within 40 calendar days of receipt, subject to the applicable requirements and exceptions. If unable to comply in time or lawfully refusing, the responsible data user must give the required written notice and reasons within that period. An internal review does not restart the statutory clock.

Deletion is reviewed against the purpose and any continuing retention duty; it is not an unconditional promise to erase every record immediately or within the access-request deadline. The school should explain any retained category, reason, review date and progress. See this product’s retention and deletion pages.

If you cannot identify the school contact, email [email protected] with the school name and a short description only. Do not send student records, passwords, invitation codes or identity documents in ordinary email or the public quotation form. Suspected exposure should be reported promptly through these channels without forwarding the exposed records. You may also contact the PCPD about privacy concerns.

How a student-data removal is handled

• 1. Contact the school’s verified privacy channel, identify the requested records and explain whether you act for yourself or an authorised child. Ask for access/export first if you need a copy.
• 2. The school verifies authority and reviews retention duties, shared documents and third-party information. It explains the approved scope, retained items, reasons and anticipated handling time.
• 3. A school administrator records the removal request; a different authorised administrator approves it. The platform pauses school access while completing the approved cleanup. This review must not delay statutory access/correction duties.
• 4. The school checks completion, including private-file cleanup. Failed cleanup remains pending retry. A status-only receipt is available for 30 days after the platform request; it does not expose student records. Ask the school for the outcome and any remaining items.

What removal may leave behind

A reviewed student removal deletes that student’s approved operational/learning records and private files, while retaining required financial and programme-usage totals with direct identifiers removed. This is de-identification, not guaranteed irreversible anonymity: some financial links can remain until the school’s applicable retention period ends. The school must state the continuing reason and review date.

Other children’s records and shared family accounts remain. Shared class documents, free text and files already exported or independently kept by the school need a separate school review; automated name matching cannot reliably remove every reference. Where the school independently maintains other copies, including its own backup arrangements, their retention and erasure must be explained by the school.

AI copies and school copies

The school must distinguish saved submissions and reports from any temporary AI text-processing copy and check the relevant deletion outcome. Ending an AI task does not erase a saved school record. Linked English recording activities follow the English product’s speech-retention policy.