Privacy Policy
- Applies to My EAAS mobile app
- Effective 7 July 2026
- Last updated 23 August 2026
This policy explains how European Academy of Advanced Studies ("EAAS", "we", "us", "our") collects, uses, shares and protects your personal data when you use the My EAAS mobile application. EAAS is based in Malta, and we process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Maltese data-protection law.
What we collect
Your academic account details, coursework, and basic device diagnostics.
Why we collect it
To run your courses, deliver reminders, and keep the app working and secure.
We never sell data
No advertising, no tracking, no data brokers. No precise location is collected.
You stay in control
Access, correct, export or delete your data at any time under GDPR.
1 Who we are
EAAS is the data controller for the personal data described in this policy.
- Address
- 113 Mindo, Triq L-Imdina, Qormi, QRM 9016, Malta
- info@eaas.mt
- Phone
- +356 21688898
2 What we collect
| Category | What this includes |
|---|---|
| Account & profile | Username, full name, email address, country, time zone and profile picture, via your Moodle account at my.eaas.mt. |
| Academic | Your enrolled courses, assignments, grades, calendar events, messages and notifications from the EAAS learning platform. |
| Admission enquiries | Only if you submit the enquiry form: full name, email, phone number, programme of interest and your message. |
| Device & technical | Device model and operating system, app version, push-notification token, IP address, and diagnostic data such as crash reports and performance metrics. |
| Camera & microphone | Accessed only while you are in a live online class so you can take part. The stream is not recorded or stored by the app. |
| Device calendar | Optional. If you choose to add a class or event reminder, the app writes that event to your device calendar. |
| Stored on your device | Your authentication token is held in the device's encrypted secure storage. Some data is cached locally so the app loads faster and works offline. |
We do not collect precise location data, and we do not sell your personal data.
3 How we use it
- Authenticate you and give you access to your courses, assignments, grades, calendar and messages
- Send the notifications and reminders you choose to enable
- Let you take part in live online classes
- Respond to and process admission enquiries
- Maintain, secure, troubleshoot and improve the app, including crash and performance diagnostics
- Meet our legal obligations
4 Legal bases for processing
| Legal basis | When we rely on it |
|---|---|
| Performance of a contract | To provide the educational services and app functionality you have asked for. |
| Consent | For optional features: push notifications, camera and microphone access, device calendar access, and admission enquiries. You may withdraw consent at any time. |
| Legitimate interests | To keep the app secure, prevent abuse and improve our services, balanced against your rights. |
| Legal obligation | Where the law requires us to process data. |
5 Who we share with
We share data only with service providers that help us operate the app, under appropriate data-processing terms.
| Provider | Purpose |
|---|---|
| Google Firebase | Authentication, Cloud Messaging, Analytics, Crashlytics and Performance — sign-in support, push notifications, usage analytics and crash diagnostics. |
| Supabase | Secure backend storage for admission enquiries, notification tokens and account-deletion requests. |
| EAAS Moodle | my.eaas.mt — the core learning-management system that stores your academic data. |
| BigBlueButton | Live virtual classroom sessions. |
We may also disclose data if required by law, or to protect the rights, safety and security of our users and services.
6 International transfers
Some of our providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.
7 Data retention
- Academic and account data is kept for as long as your account is active on the EAAS platform
- Admission enquiry data is kept only as long as needed to process your enquiry, plus a reasonable follow-up period
- Diagnostic data is kept for a limited period, consistent with our providers' policies
- Data on your device is removed when you log out, clear the app's data, or uninstall the app
8 Your rights
Under GDPR you have the right to access your data, have inaccurate data corrected, request erasure, restrict or object to processing, request data portability, and withdraw consent at any time.
To exercise any of these, email info@eaas.mt.
You also have the right to lodge a complaint with the Maltese supervisory authority, the Information and Data Protection Commissioner — idpc.org.mt.
9 Deleting your account
You can request deletion of your account and associated data in either of two ways:
- In the app, open More → Account and use the account-deletion request option
- By email, contact info@eaas.mt with your request
We process verified deletion requests in accordance with applicable law.
10 Data security
We use industry-standard measures to protect your data, including encrypted storage of authentication tokens on your device and encrypted HTTPS/TLS network connections. No method of transmission or storage is completely secure, but we work continuously to protect your information and review our safeguards.
11 App permissions
| Permission | Why we ask for it |
|---|---|
| Notifications | To send the class and assignment reminders and updates you enable. |
| Camera & microphone | To let you take part in live online classes. Used only during a live session. |
| Calendar | To add class and event reminders to your device calendar, if you choose to. |
| Photos & files | To let you upload a profile picture and open or save course files. |
| Bluetooth audio | Where applicable, to route audio to connected devices during live classes. |
You can change or revoke any of these at any time in your device settings.
12 Children's privacy
The app is intended for higher-education students and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
13 Changes to this policy
We may update this policy from time to time. Material changes will be posted here with a revised effective date. Continued use of the app after changes take effect constitutes acceptance of the revised policy.
14 Contact us
- Address
- 113 Mindo, Triq L-Imdina, Qormi, QRM 9016, Malta
- info@eaas.mt
- Phone
- +356 21688898