Full policy

Privacy Policy for Moodle Application

Last Updated: January 20, 2026

This Privacy Policy explains how the Moodle application ("the App") hosted at https://moodle.siotw.net collects, uses, stores, shares, and protects Google user data in compliance with the Google API Services User Data Policy and Google APIs Terms of Service.

Data Accessed

The specific OAuth scopes requested are:

• https://www.googleapis.com/auth/drive

Data Usage

The Google user data accessed by the App is used as follows:

• Authentication and Personalization: Email address, name, and profile picture are used to log users into the App, display their identity in the user interface, and associate their activities with their account.

• Course Management: Google Drive data, if accessed, is used to store and retrieve course materials, assignments, or other user-uploaded files relevant to the Moodle platform.

The App does not use Google user data for advertising or any purposes unrelated to its core functionality as an educational platform.

Data Sharing

The App does not share Google user data with third parties.

Data Storage & Protection

• Storage: Google user data is stored securely on the cloud.

• Protection: We implement industry-standard security measures, including access controls, regular security audits, and vulnerability assessments, to protect user data from unauthorized access, loss, or alteration.

• Access Control: Only authorized personnel with a legitimate need can access user data, and access is logged and monitored.

Data Retention & Deletion

• Retention: Google user data is retained only for as long as necessary to provide the App’s services or as required by applicable laws. For example, user profile information is retained while the user maintains an active account. Course-related data (e.g., Google Drive files) is retained until the user deletes their account or the associated course ends.

• Deletion: Users may request the deletion of their Google user data by contacting us. Upon receiving a verified deletion request, we will delete all associated Google user data within 30 days, except where retention is required by law.

• Process: To request data deletion, users must submit a request via email to [insert contact email]. We will verify the user’s identity before processing the request.