Effective date: 21 September 2026
Last updated: 21 September 2026
Applies to: the MasterClasss mobile application for Android and iOS
MasterClasss ("the app", "we", "us") is a learning app run by a school in Lao PDR. Students use it to browse subjects, register for classes, buy items from the school shop, watch and post short videos, and chat with the school office.
This policy explains what personal information the app collects, why we collect it, who we share it with, how long we keep it, and what you can ask us to do with it. Please read it before you create an account. If you do not agree with it, do not create an account.
The school that operates MasterClasss is the data controller for the information described here.
Contact for any privacy question or request:
WhatsApp or phone: +856 20 9381 9635
You can reach us on that number in Lao, English or Chinese. We answer privacy requests, including requests to delete your data, within 30 days.
MasterClasss is for people aged 13 and over. You may not create an account if you are under 13.
We do not knowingly collect information from children under 13. If we learn that an account belongs to a child under 13, we delete the account and the information in it. If you are a parent or guardian and believe your child has created an account, contact us on the number above and we will remove it.
We ask for your age during sign-up so we can enforce this and so we can suggest classes suited to you.
Required:
Your name
Either an email address or a mobile phone number — you choose one. We send a verification code to it to confirm the account is yours.
A password, which is stored only in an encrypted (hashed) form. We never store or see your password in readable form.
Your age, to enforce the 13+ rule.
Optional, and only if you fill them in:
A display name and a short bio
A profile photo
Gender
Your preferred language
Your learning goal, experience level, how many minutes a day you want to study, the kind of content you prefer, and the subjects that interest you
We use all of this to create and run your account, to show you as the author of anything you post, and to recommend classes and videos that fit what you said you wanted. You can change or remove the optional items at any time from Edit profile, and skipping them does not stop you using the app.
When you sign up or reset your password, we send a one-time code to the email address or phone number you gave us. Email codes are sent through our mail server. SMS codes are sent through a Lao mobile messaging gateway. The gateway receives only your phone number and the code, so that it can deliver the message. It is not allowed to use your number for anything else.
Videos you record or upload, including their sound, caption, cover image and any music track you attach
Photos you upload
Comments you write
Messages you send to the school office in the in-app chat
We store these so the app can show them. Videos and comments you publish are visible to other users of the app. Videos you keep private or unlisted are not shown in the public feed. Chat messages with the office are visible to you and to the school staff who answer them — they are not public.
When you register for a class or order from the school shop we record:
The name you give for the registration or the order
Which subject, class session, courses or products you chose
Which bank you are paying to
The payment slip image you upload, if you upload one
The school office reads the slip to confirm your payment. We never ask for and never collect your card number, bank login, PIN or CVV. All payment is by bank transfer that you make yourself in your own banking app, outside MasterClasss.
If you report a video, comment or person, we record what you reported, the reason you chose and any note you added, and pass it to our moderators. If you block someone, we record that so we can stop showing you their content. Reports are reviewed within 24 hours.
A sign-in token, stored on your own device so you do not have to sign in every time you open the app. It stays on your device and is erased when you sign out or uninstall the app.
A view count for each video, counted once per person per video, so creators can see how a video performed.
Ordinary server records — the IP address the request came from, the time, and which part of the app was asked for. Our servers write these automatically. We use them to keep the service running, to find faults and to detect abuse.
To be explicit, because people reasonably ask:
No advertising. The app contains no ads and no advertising identifier is read.
No third-party analytics or tracking. There is no Google Analytics, no Firebase, no Facebook SDK, no crash-reporting SDK and no advertising SDK in this app. Nothing tracks you across other companies' apps or websites.
No location. The app never asks for or records your GPS location.
No contacts. The app never reads your address book.
No background recording. The camera and microphone are used only while you are on the recording screen and have pressed record.
The app asks for each of these only at the moment it needs it, and explains why. You can refuse any of them, and you can withdraw any of them later in your phone's Settings. Refusing one only turns off the feature that needs it.
Permission
Why it is used
Camera
To record a video to post, to take a profile photo, and to scan a registration QR code.
Microphone
To record the sound of a video you are recording.
Photos and videos
To let you choose a video to post, a profile photo, or a payment slip to upload.
Internet
To reach our servers. Without it nothing in the app works.
The app shows you its own gallery grid rather than the system picker in the video composer, which is why it needs to read your media library rather than receiving a single file. We read the library only to draw that grid — we do not upload anything from it unless you choose it and post it.
We do not sell your personal information. We do not share it for advertising. We do not rent, trade or give it to data brokers.
We share it only in these cases:
With other users, and only what you chose to publish — your display name, profile photo, bio, and the videos and comments you posted publicly.
With the school's staff, who see your registrations, orders, payment slips, chat messages and account details in order to run the school.
With our hosting and messaging providers — the company that hosts our server, our email provider, and the SMS gateway that delivers verification codes. They receive only what they need to do that job. They act only on our instructions, may not use your information for their own purposes, and are required to protect it to at least the same standard as this policy sets out.
When the law requires it — a valid order from a competent authority, or where sharing is necessary to protect someone's safety or to investigate fraud or abuse.
If you tap a link to contact us on WhatsApp, that opens WhatsApp and your use of it is governed by WhatsApp's own privacy policy, not this one.
Your information is stored on servers we rent from a commercial hosting provider. These servers may be located outside Lao PDR, which means your information may be transferred to and stored in another country. Wherever it is held, we apply this policy to it.
Your account and profile — until you delete your account.
Videos, comments and chat messages — until you delete them, or until you delete your account.
Class registrations and shop orders that have been settled, and the payment slips attached to them — kept as the school's financial records even after you close your account, because they are proof of a transaction that both sides may need. They are kept separately from your profile and are not used to contact you.
Reports you make about other people — kept while the moderation case is open and for a reasonable period afterwards, so a repeat offender can be recognised.
Server records — kept for a short period and then overwritten.
You can, at any time:
See and correct your information — open Edit profile in the app.
Delete anything you posted — a video, a comment or a photo.
Delete your entire account — Edit profile → Delete account. You are asked for your password to confirm, because this cannot be undone. Before you confirm, the app tells you whether you still have a class registration or an order that the office has not settled yet. Deleting your account removes your profile, your posts and your chat history. Settled financial records are kept as described in section 7.
Ask us to do any of the above for you — contact us on the number in section 1. We do not charge for this, and we will not make the app worse for you because you asked.
Withdraw a permission — turn off camera, microphone or photo access in your phone's Settings.
Ask for a copy of your information, or object to how we use it.
Depending on where you live you may have further rights under your local data protection law, including the right to complain to your national data protection authority. Contact us first and we will try to put it right.
Passwords are stored hashed, never in readable form.
Every request to our servers that touches your account must carry a valid sign-in token, and every one of them is checked against your account's permissions on the server, not just in the app.
Access to the school's administrative screens is limited to staff accounts that need it.
Traffic between the app and our servers is protected in transit.
No system is perfectly secure. If a breach ever affects your personal information, we will tell the affected users and the relevant authority as quickly as we can.
If we change this policy we will update the date at the top and publish the new version at the address below. If the change materially affects how we use your information, we will tell you in the app before it takes effect. Continuing to use MasterClasss after that means you accept the new version.
This policy is published at:
https://sites.google.com/view/masterclassprivacy
For any question about this policy, to exercise any right in section 8, or to report a privacy concern:
WhatsApp / phone: +856 20 9381 9635
We answer within 30 days, and usually much sooner.