Your portal information should be handled with care.

1. Who this notice covers

This notice applies to the YCMA School Portal and its sign-in services for approved students, guardians, instructors, staff, and administrators. It explains the online account information used by the portal. Program, enrolment, employment, and education records may also be governed by separate YCMA policies and applicable law.

Public account registration is disabled. YCMA creates or approves access and links each portal user to an existing YCMA relationship before school information becomes available.

2. Information we collect

The information available to YCMA depends on how you sign in and your relationship with the academy.

• Account information such as your email address, name, provider user identifier, and profile image when Google, Facebook, Apple, or another approved sign-in provider shares it.
• Portal access information such as your linked YCMA Contact, approved role, multi-factor authentication status, sign-in events, and security or support records.
• School information that YCMA already maintains and that you are authorized to view or manage, such as student, guardian, instructor, program, schedule, attendance, or administrative records.
• Information you submit when requesting support, correcting account details, or communicating with YCMA.

3. How we use information

• Authenticate you and match the sign-in identity to the correct approved YCMA account.
• Provide the school-portal features permitted for your student, guardian, instructor, staff, or administrative relationship.
• Protect accounts, investigate access problems, prevent misuse, and maintain security and audit records.
• Respond to support, access, correction, privacy, and account-deletion requests.
• Meet applicable legal, contractual, educational-record, safety, and operational obligations.

4. Service providers and disclosure

YCMA uses service providers, including Supabase for authentication and data services and Cloudflare for secure application delivery. A social sign-in provider processes information under its own privacy terms when you choose that provider. These services receive only the information needed to provide their function.

YCMA does not sell School Portal personal information or use it for behavioural advertising. Information may be disclosed when required by law or when reasonably necessary to protect users, YCMA, or the security of the service.

5. Retention and deletion

YCMA keeps account and school information only for as long as it is reasonably needed for the purposes described here and for applicable legal, contractual, educational-record, safety, dispute, or legal-hold requirements. A social sign-in identity can be disconnected without automatically deleting records that YCMA must retain.

When information is no longer required, YCMA will delete it, de-identify it, or securely restrict it as appropriate. You may ask YCMA to review your account and eligible information for deletion.

6. Security and your choices

YCMA uses encrypted connections, access controls, relationship-based permissions, and additional authentication controls where appropriate. No online service can guarantee absolute security, so you should use a strong unique password, protect your sign-in provider, and never send a password to YCMA by email.

You may request access to or correction of your account information, disconnect a social sign-in method, or ask about deletion. YCMA may need to verify your identity and authority before acting on a request.

7. Young users and account access

The portal does not allow open self-registration. Access for a student or guardian is created and limited by YCMA according to the relevant school relationship. A parent, guardian, or authorized school representative may need to participate in a privacy or account request for a young user.

8. Changes and contact

YCMA may update this notice when the portal, service providers, or legal requirements change. The updated date on this page identifies the current version.

Questions about this notice or YCMA's handling of portal information can be sent to [email protected]. Do not include your password, government identification number, or sensitive documents in the first message.