Who we are
Olmon Akademie is a German-language school in Tashkent, Uzbekistan. We teach German, host exams as an ÖSD exam centre and advise on study and work in Germany. “We” and “the school” mean Olmon Akademie.
This policy covers:
- The Olmon Edu app for iPhone and iPad.
- Our CRM website, olmonedu.uz: the school’s management system, used by our staff. It holds the student records that staff enter or see (name, phone number, groups, attendance, grades, payments and balance); applications that come from the app, the olmon.uz form, phone calls, Instagram or visits to the school; staff accounts and a log of changes; and call records, if the school uses its optional telephony service.
- The student web portal, talaba.olmonedu.uz. Your student account works there too.
- The speaking-practice booking site, spkng.olmonedu.uz. Our in-class students enter their phone number there to book a session; the site shows their name and keeps the booking.
- The olmon.uz website and its application form.
The app talks only to the school’s own servers. The exceptions are live lessons (Cloudflare’s video service), lesson recordings (they play straight from our file storage), signing in with Telegram, and the App Store link for updates.
What we collect
In the Olmon Edu app (students and guests):
- Account: your phone number (it is your sign-in name), first name and surname, and gender. Your password is stored only as a one-way hash.
- SMS codes for sign-up and password reset: stored only as a hash, together with the phone number and the IP address that asked for them, and deleted after one day.
- Study: the German level you choose, course applications, homework answers and drafts, test results, teacher marks, speaking-practice bookings, and the attendance, grades, payments and balance that the school records.
- Files you attach to homework: only the photos or documents you pick yourself. The app has no access to the rest of your photo library.
- Group chat (online groups): your text messages.
- Live lessons: your voice, but only after the teacher lets you speak, and the times you joined and left. Students’ cameras are never turned on.
- Notifications: a push token and the app language.
- Telegram: your Telegram chat ID, if you link our bot.
- Diagnostics: the live-lesson video service (Cloudflare RealtimeKit) collects crash data and a device identifier for its diagnostics and analytics.
Kept only on your device: your settings (language, theme, text size). Your sign-in tokens are stored on the device in the iOS Keychain, and our server keeps a record of each signed-in session.
We do not collect your location, contacts or advertising identifier. The app has no advertising and no tracking.
On the olmon.uz website:
- The application form: your first name, last name, phone number and the page language, plus a record that you agreed to this policy and when. We use them only to call you back about your application. The form creates an application in the school’s CRM, where our staff see it.
- To prevent abuse, the server counts form submissions by IP address for a short time.
- The website sets no cookies of its own and uses no analytics or tracking.
- In your browser only: until you send the form, what you typed is kept in this tab, so it survives a page change. After you send it, the browser keeps a hash of the number (not the number itself), so the same number is not sent twice. Neither leaves your device.
- The map loads only when you press “Show the map”. Yandex then receives your IP address and may set its own cookies.
- Like any web server, ours records each request: IP address, browser type, page address and time. This applies to all our websites.
Staff accounts (teachers and administrators) are created and managed by the school. They hold the name, phone number, gender, date of birth, photo, role and branches. In live lessons, the teacher’s camera, screen and voice are streamed and recorded, whether the teacher uses the Olmon Edu app or Olmon Studio, our Windows app for teachers.
How we use your data
- To run lessons and the app: live lessons, recordings, homework, tests, the library, chat and your profile.
- To keep the school’s records: groups, attendance, grades and payments.
- To contact you about your application or your studies.
- To send notifications you would expect: a lesson starting, teacher announcements, homework, payments and schedule changes.
- To keep accounts safe: sign-in, SMS codes and limits on repeated attempts.
We do not sell your data and we do not use it for advertising.
Live lessons and recordings
Online lessons run live in the Olmon Edu app through Cloudflare RealtimeKit.
- Lessons are recorded: the teacher’s camera or screen and the stage audio, including students who spoke.
- A student’s microphone works only after the teacher lets them onto the stage. The app tells you once that lessons are recorded, and shows a recording indicator during the lesson.
- Your classmates and the video service see your first name and the first letter of your surname (for example “Ali V.”), never your phone number.
- Recordings can be watched by the students of that group, the group’s teacher and the school’s administration.
- The school’s administration, including quality supervisors, may watch online lessons without being shown in the participant list.
- Recordings are kept while the group is active. The school may delete them after the group is archived. Cloudflare keeps a transit copy for up to seven days.
Who processes your data
These services process data for us:
| Service | What it receives | When |
|---|---|---|
| Railway | Our servers and database: the school’s records and the server logs | Always (hosting) |
| Railway Buckets (Tigris) | Files: homework answers and materials, profile photos, notification images and lesson recordings | Always (file storage) |
| Cloudflare RealtimeKit | Lesson audio and video, the display name (for students: first name and surname initial), recordings in transit, app diagnostics | During live lessons |
| Apple Push Notification service | Push token and the notification text | When a notification is sent |
| Eskiz.uz | Your phone number and the SMS code text | Sign-up and password reset |
| Telegram | Chat ID, payment receipts (with amounts), reminders and sign-in confirmations | Only if you link our bot |
| Sentry | Technical error reports with a user ID and role (request contents removed) | Only if enabled on the server; the iOS app does not use it |
| OnlinePBX | Call records: phone numbers, call length, a link to the call recording and the linked application or student | Only if the school uses this telephony service in the CRM |
| Google Fonts | IP address (a font request) | When you open olmonedu.uz, the student portal or the speaking site; the olmon.uz website hosts its own fonts |
| Yandex Maps | IP address; Yandex’s own cookies | Only after you press “Show the map” on the website |
Our hosting provider’s servers are located outside Uzbekistan. Links to Instagram, Telegram and YouTube on the website are plain links: nothing is sent to them until you click.
How long we keep data
| Data | How long |
|---|---|
| Student record (name, phone, groups, attendance, grades) | Kept in the school’s records, also after you finish studying |
| Payments and billing | Kept for the school’s accounting, as the law requires |
| Applications (website and app) | Kept in the school’s CRM until staff delete them |
| SMS codes | Deleted after one day |
| Attempt counters (IP address; for sign-in, also the phone number) | Deleted about an hour after the limit period ends |
| Lesson recordings | While the group is active; the school may delete them after the group is archived |
| Group chat | Kept in the group. A deleted message is hidden from everyone, but its text stays on the server as evidence |
| Push tokens | Until you sign out, reset your password or delete your account |
| Server request logs | For the period set by our hosting provider |
The school also keeps a log of changes to records (an audit log). It is not deleted, and it can include names and phone numbers, including those from deleted records.
Deleting your account
You can delete your account in the app: Profile → Settings → Account → Delete account. You confirm with your current password. The deletion is immediate and cannot be undone in the app. If you sign in only with Telegram and have no password, first set one in Settings → Change password.
What is removed:
- Your sign-in details
- Push notifications
- All sessions: you are signed out everywhere, in the app and the student portal
- Signing in with Telegram
What the school keeps:
- Payments and billing — for the school’s accounting, as the law requires
- Study history — groups, attendance and grades
- Your name and phone number in the school’s student record
- Group chat messages — they stay in the group under your name
- The Telegram bot link, so payment receipts and reminders continue
- If you used the app as a guest: your whole record in the school’s CRM, including your gender, chosen level and any course application
If you sign up again with the same phone number, the account is re-attached to the same student record. Staff accounts are removed by the school. For anything else — a copy of your data, a correction or a full deletion — contact us (section 12). A full deletion is done by our staff, and the change log keeps a record of it.
Your rights
- See your data in the app: profile, attendance, grades, payments and homework results.
- Change your password, or reset it by SMS.
- Delete your account (section 7).
- Turn notifications off in iOS Settings, and allow or deny the camera, microphone and photos when iOS asks.
- Ask us for a copy of your data, a correction or its deletion, and withdraw the consent you gave in the website form — by phone (section 12).
Children
The app does not ask for your age. If you are a parent or guardian and have a question about your child’s data, including their voice in recorded live lessons, please contact us (section 12).
Security
- Passwords and SMS codes are stored only as one-way hashes.
- All connections to our servers are encrypted (HTTPS).
- In the app, sign-in tokens are kept in the iOS Keychain.
- Sign-in and code attempts are limited.
- Recordings open only through short-lived links.
- Staff access is limited by role and branch.
No system is completely secure, but we work to protect your data.
Changes
If this policy changes, we will publish the new version on this page and update the date at the top.
Contact us
Questions about your data, or a request about it? Call us:
Olmon Akademie, Tashkent, Uzbekistan.
SupportSigning up, resetting a password and deleting an account — step by step