Privacy Policy

Effective 15 October 2026

My RI (myri.reviewinnovations.com, "the site") is the online exam portal of Review Innovations. It is used on the web and through the My RI app in Microsoft Teams. This policy explains what personal information the site collects, why, who can see it, how long it is kept, and what you can ask us to do with it. It is written to comply with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines.

Who is responsible

Review Innovations is the personal information controller. For anything about your personal information, write to support@reviewinnovations.com.

Who can use the site

The site is private. Only people with a Microsoft account in the Review Innovations directory who belong to one of the Review Innovations teams used on the site can sign in: enrolled students, instructors, office staff and management. There is no public registration and no part of the site is open to the public, other than this page and the Terms of Use.

Information we receive from Microsoft

You sign in with your Microsoft account, the same one you use for the Review Innovations Microsoft Teams. The site never sees or stores your Microsoft password. At each sign-in, and in a regular check with Microsoft, the site receives from Microsoft Entra ID:

your display name;
your email address;
your account identifier in the directory (object ID) and whether you are a member or a guest of the directory;
whether your account is enabled, blocked or deleted in the directory;
the Microsoft Teams you belong to in the Review Innovations directory, and for staff, the directory groups that give a role on the site.

The site only reads this information. It never changes anything in your Microsoft account or in the directory. Your name on the site is your display name from Microsoft Teams; it cannot be changed on the site.

Information created when you use the site

Exams: the exams you take, your answers, the time you took and submitted them, your scores and grades, and your rank among the students of your team.
Content you add: for instructors and staff, the questions, solutions, exams, pages and files you create or upload.
Technical records: the date and time of sign-ins and failed sign-ins and the network address and browser they came from, kept to protect accounts and to find faults.
Cookies: a session cookie that keeps you signed in and a security cookie that protects forms. Your choice of light or dark theme is kept in your own browser. The site has no advertising or tracking cookies.

Why we use it

to let you in, and to decide what you may see, according to the team you belong to and your role;
to give, check and grade exams, and to show you and your instructors your results;
to show rankings and top students within a team, as part of the review program;
to keep the site secure and working, and to answer your requests for support;
to remove accounts and teams that no longer exist in the Review Innovations directory.

The legal basis is the performance of the review program you enrolled in, Review Innovations' legitimate interest in running and securing the site, and, where the law requires it, your consent.

Who can see your information

Other signed-in users of the site can see your display name and the teams you belong to. They can also see your name in top-student rankings of your team when those are shown.
Your instructors, office staff and management can see your exam attempts, answers, scores, grades and rankings, and your profile.
Nobody outside the site. Your email address, account identifier and account status are shown only to you and to staff. The site does not sell, rent or share personal information with advertisers or anyone else for their own purposes.

The site runs on services that process data on our behalf: Microsoft (sign-in and the directory), Google Cloud (the servers, located in a Google data centre), and Google reCAPTCHA (on the administrator's password sign-in page only). Each of them is bound to protect that data.

How long we keep it

Your information is kept for as long as you have an account on the site. When your Microsoft account is deleted from the Review Innovations directory, or you are removed from every team used on the site, you lose access at once. A deleted account is removed from the site after a grace period of about thirty days, the same period in which Microsoft can restore a deleted account. Exam records are kept after that without your name, for program statistics. Technical records are kept for a short time and then discarded.

Your rights

Under the Data Privacy Act you may ask to see the personal information the site holds about you, to have it corrected, to object to its processing, to have it erased or blocked where the law allows, to receive a copy of it, and to be told of any breach that affects you. Because your name and email address come from your Microsoft account, corrections to them are made in that account or by the Review Innovations office, and they reach the site at your next sign-in. To exercise any of these rights, write to support@reviewinnovations.com. You may also complain to the National Privacy Commission of the Philippines.

Security

The site is reached only over an encrypted connection (HTTPS). Sign-in is handled by Microsoft, so the site keeps no passwords for users. Access to exam records is limited by role, repeated failed sign-ins are locked out, and the servers are kept behind a firewall with access limited to the people who run the site.

Children

The site is made for licensure-exam candidates and the staff of Review Innovations, who are adults. It is not directed at anyone under 18.

Changes to this policy

When this policy changes, the new version is published on this page with a new effective date. If a change matters to you, you will be told on the site or by email.

Contact

Review Innovations
Privacy and support: support@reviewinnovations.com
General: admin@reviewinnovations.com