Privacy & Data Protection Policy
Effective Date: June 1, 2026 • Last Revised: September 5, 2026
1. Institutional Scope & Operating Entity
Gene Academy is an independent medical and scientific education platform operated by Geneacademy Co. Ltd. ("Gene Academy", "we", "us", or "our"). We are committed to protecting the privacy, academic telemetry, and professional identities of our students, medical graduates, researchers, and fellows worldwide.
Important Clarification: Gene Academy is an independent educational provider. We are not a government agency, nor are we affiliated with the Republic of Sudan's sovereign national digital identity system (SudaPass). Our internal GA-ID and GA-Pass credentials represent educational transcripts and clinical workshop verification records only.
2. Information We Collect
To deliver courses, maintain clinical logbooks, and issue verified transcripts, we collect:
- Profile & Identification Data: Full legal name, university of graduation/enrollment, academic degree, professional grade, and contact details (email, WhatsApp/phone).
- Academic & Clinical Telemetry: Mechanism-to-Clinic (MTC) simulation attempt scores, CPD credit milestones, AHA Basic Life Support (BLS) practical evaluations, Basic Surgical Skills (BSS-2) logbook entries, and research submissions to the SudaGene Scientific Journal (SGSJ).
- Verification Ledger Hashes: Deterministic cryptographic checksums (SHA-256) generated to verify certificate authenticity on the independent GA-Pass verification registry.
- Settlement References: Transaction identifiers and timestamps from local payment rails (InstaPay, Vodafone Cash, manual bank transfers) to verify workshop seat bookings. We never store bank login credentials or credit card numbers.
3. Purpose of Processing
We process your personal data exclusively for:
- Providing online courses, OET language cohorts, and in-person wet-lab training (Dokki / Cairo).
- Issuing verifiable academic credentials through our member portal (GA-ID / GA-Pass).
- Submitting candidate lists to certified clinical instructors (e.g., Cairo Clinical Simulation Hub for AHA BLS certification).
- Internal quality assurance, curriculum development, and academic benchmarking across our 63+ canonical faculties directory.
4. Zero Commercialization & Data Security
We do not sell, rent, or commercialize learner data under any circumstances. Physician and student telemetry is held in secure cloud databases with restricted access limited to authorized administrative and academic officers (GA-000, GA-001, GA-011).
5. International Trainees & GDPR Alignment
For trainees residing in the United Kingdom, the European Union (e.g., Ireland), or elsewhere overseas, we adhere to the principles of the General Data Protection Regulation (GDPR) and UK GDPR:
- Right to Access: You have the right to request a copy of your complete academic record and telemetry ledger.
- Right to Rectification: You may correct inaccurate registration details at any time via the admissions desk.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your account and personal identifiers, provided it does not conflict with legal audit retention requirements for certified clinical credentials.
6. Contact the Data Protection Officer
For inquiries, data access requests, or privacy concerns, please contact the admissions and governance desk: