Scope of this Privacy Policy
This Privacy Policy applies to MBB LMS services, including the MBB LMS website, hosted academy platform, student web access and the MBB LMS mobile applications available for supported Android and iOS devices.
It explains the categories of information that may be processed, why the information is used, how it may be shared, the safeguards applied to it, and the rights available to users under applicable data protection law.
MBB LMS and academy operators
MBB LMS provides technology that allows academies, educational institutions, training providers and other organizations to operate branded learning environments.
Where you access MBB LMS through an academy, that academy may determine which personal information is collected, which courses you can access, how long your educational records are retained and which features are enabled for you.
Depending on the circumstances and the applicable law, your academy may act as the controller of your educational information and MBB LMS may process such information on its behalf as a technology provider. Certain information required to operate, secure and maintain the MBB LMS platform may also be processed directly by MBB LMS.
Information we may process
The information processed depends on the academy, account type and features you use.
Name, email address, username, account identifiers, profile information and account authentication data.
Academy membership, courses, groups, enrollments, roles and access permissions.
Course progress, completed activities, quiz and exam activity, scores, attempts, homework, attendance and certificates.
Homework submissions, comments, community posts, messages, support requests and other information submitted through the platform.
Documents, images, homework attachments and audio recordings that you choose to upload or record through supported learning features.
Learning events, live-session information, scheduled activities, invitations and related participation information.
Device type, operating system, app version, technical identifiers and information needed to provide and secure mobile functionality.
Notification tokens and related technical data used to deliver learning and account notifications to supported devices.
Information you choose to provide
Some features allow you to voluntarily submit text, media, files, voice recordings or other content. MBB LMS processes such content only as necessary to provide the relevant platform feature and in accordance with the academy's configuration.
How we use information
Personal information may be processed for purposes including:
- Creating, authenticating and maintaining user accounts.
- Providing access to academies, courses, learning activities and educational content.
- Tracking course progress, attendance, quizzes, exams, homework and certificates.
- Delivering community, messaging, support and communication features.
- Delivering push notifications and important learning or account updates.
- Providing live sessions, calendar events and learning schedules.
- Protecting user accounts and preventing unauthorized access or misuse.
- Diagnosing technical issues and maintaining application reliability.
- Meeting applicable legal, security and compliance obligations.
Legal basis for processing
Where the EU General Data Protection Regulation ("GDPR") or similar data protection laws apply, information may be processed on one or more of the following legal bases:
- Performance of a contract where processing is necessary to provide the requested learning or account service.
- Legitimate interests such as maintaining platform security, preventing misuse, improving reliability and supporting academy operations.
- Consent where applicable law requires consent for a specific activity or permission.
- Legal obligations where processing is necessary to comply with applicable legal or regulatory requirements.
- Processing carried out on instructions from an academy where that academy has established the applicable legal basis.
Sharing and service providers
MBB LMS does not sell personal information to advertisers.
Information may be shared or made available only where necessary to provide, secure or administer the service, including with:
- The academy or training organization responsible for your account.
- Authorized academy administrators, instructors or support personnel according to their role and permissions.
- Hosting, infrastructure, database, email and technical service providers used to operate the platform.
- Google Firebase services used for supported mobile functionality such as push notifications.
- Live-session or meeting providers where an academy chooses to use an external meeting service.
- Authorities or professional advisers where disclosure is legally required or necessary to protect legal rights, security or users.
Service providers are given access only to information reasonably necessary to perform the relevant service and are expected to process information subject to appropriate confidentiality and data-protection requirements.
Mobile application permissions
The MBB LMS mobile application may request device permissions when a feature requires them. Permissions can generally be managed through your device settings.
| Permission | Purpose |
|---|---|
| Notifications | To deliver course, homework, calendar, communication, live-session and other supported learning notifications. |
| Microphone | Used only when you choose to record audio in a feature that supports voice recordings. |
| Files / media | Used when you choose to upload or download learning materials, homework or supported attachments. |
| Face ID / device authentication | Used where you choose to enable biometric protection for supported account access. |
Biometric authentication
Where biometric protection such as Face ID or another device authentication method is enabled, biometric verification is performed by the operating system and device security framework.
MBB LMS does not receive or store your facial template, fingerprint template or other raw biometric identifier. The application receives only the authentication result required to allow or deny access to the protected feature.
Data retention
Information is retained only for as long as reasonably necessary for the purpose for which it was collected, to provide the service, to meet academy requirements, to maintain legitimate records, or to comply with applicable legal obligations.
Retention periods may differ depending on the academy, category of information and applicable legal requirements.
Where MBB LMS processes educational information on behalf of an academy, retention and deletion may be determined by that academy in accordance with its policies and legal obligations.
Security
MBB LMS uses technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss or misuse.
Measures may include encrypted network communication, authenticated access, role-based permissions, restricted administrative access, account security controls, backups and operational monitoring.
No internet-based system can guarantee absolute security. Users are responsible for protecting their login credentials and should notify their academy or MBB LMS if they believe their account has been compromised.
International data transfers
Some infrastructure or service providers may process information from locations outside the country in which you live.
Where applicable data protection law requires additional safeguards for international data transfers, appropriate legal mechanisms and contractual safeguards are used where required.
Your privacy rights
Depending on your location and applicable law, you may have rights concerning your personal information, including the right to:
- Request access to your personal information.
- Request correction of inaccurate information.
- Request deletion of information where applicable.
- Request restriction of certain processing.
- Object to certain processing activities.
- Request a portable copy of eligible personal information.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with the competent data protection authority.
If your account belongs to an academy, you may need to submit your request directly to that academy because it may be responsible for determining how your educational information is processed.
Learners and minors
MBB LMS can be used by educational and training organizations serving learners of different ages.
Where an academy provides access to a minor, the academy is responsible for ensuring that it has the legal basis, permissions or parental/guardian consent required under applicable law for the processing of that learner's information.
Account and data deletion
Users may request deletion of their personal information where applicable law provides such a right.
If your account was created or managed by an academy, please contact that academy first. The academy may need to retain certain educational, financial, attendance, certification or legal records even after account access is terminated.
You may also contact MBB LMS using the contact information below for privacy-related assistance.
Third-party links and services
Courses or academies may contain links to external websites, embedded content, video platforms, meeting services or other third-party services.
Those services operate under their own privacy policies and terms. MBB LMS is not responsible for the privacy practices of independent third-party websites or services that you choose to access.
Changes to this Privacy Policy
We may update this Privacy Policy when our services, technology, legal requirements or privacy practices change.
The effective date shown at the top of this page will indicate when the current version became effective. Material changes may also be communicated through the platform or other appropriate channels when required.
Contact us
If you have questions about this Privacy Policy or a privacy-related request concerning MBB LMS, you can contact us using the information below.