Privacy Policy

1. Who we are

Ministry of Education - Feedback Survey ("the app") is operated by the Ministry of Education, Higher Education and Skills Development of the Republic of Maldives ("the Ministry", "we", "us"). The app runs feedback surveys for teachers and other school and education staff at https://www.education.gov.mv/surveys. Each survey has its own page under /surveys/.

This policy covers the information the app receives from Google when you sign in and the information you give in a survey.

2. Google user data we access

When you choose "Sign in with Google", the app asks Google for these scopes only:

• openid: confirms who you are;
• email: your email address;
• profile: your basic profile.

From these, the app receives the following fields:

All of these are held in your sign-in session on our server, which is identified by a session cookie in your browser. The session ends when you sign out, or after 2 hours without activity. Signing in does not create an account. We do not receive your Google password, and the app cannot access your Gmail, Google Drive, contacts, calendar or any other Google data.

From your email address we also make a coded fingerprint: a one-way code calculated with a secret key held on our server. It is saved with every response so that a survey's response limit (for example one response per person per quarter) can be applied. The fingerprint cannot be turned back into your email address.

3. Other data we collect

Survey responses

• your answers: ratings, choices and any text you type, including the general remarks box;
• the sections of the survey you chose to answer;
• the domain of your email address (the part after the @) and the school or institution that domain belongs to, if it is on our list;
• the date and time you submitted, and how long you took to answer.

Please do not type personal details about yourself or others into free-text answers; anything typed there is stored as part of the response.

Cookies and browser storage

• Session cookie (moe_session): keeps you signed in during your visit. It lasts 2 hours, is sent only over HTTPS (secure), and is HTTP-only, so page scripts cannot read it.
• Security cookie (XSRF-TOKEN): protects forms against cross-site request forgery.
• Google Analytics cookies on the individual survey pages, which use the Ministry website's layout. Google Analytics is not used on the app home page or on this privacy policy page.
• Draft answers are saved in your own browser's local storage while you fill in a survey, so you don't lose them if the page reloads. The draft is removed when you submit, and it is never sent to us until you submit.

Logs and IP addresses

• Your IP address is not saved with your survey response.
• If you open a survey by scanning one of its QR codes, the scan is logged with the time, your IP address, your browser's user agent, the referring page, and the device type, platform and browser. These are used to count scans.
• If sign-in with Google fails, the technical error message is written to our application log, without your name or email address.
• The website is served through Cloudflare, which handles your connection, including your IP address, to deliver and protect the site.

4. How we use the data

• Identity verification: confirming, through Google, that you control a verified email address.
• Domain eligibility check: a survey can be limited to accounts on approved school or institution email domains (all of them, or selected ones), or opened to any Google account; the app home page shows which applies to each survey. We compare your email's domain with the Ministry's list of approved domains.
• Linking responses: to a school, through your email domain, so results can be reported by school, atoll and zone; to you, only on identified surveys, through your name and email address; and to your other responses to the same survey, only through the coded fingerprint, to apply the response limit.
• Showing you who you are signed in as (name and picture) on the survey page.
• Understanding and acting on the feedback: The Minister's Bureau, read the responses and summarise them in reports to improve schools and the Ministry's services. On identified surveys, staff may use your name and email address to follow up on your feedback.
• Website statistics: Google Analytics measures visits to the survey pages.

We do not use Google user data for advertising, we do not sell it, and we do not use it for any purpose other than running the surveys described here.

5. Sharing and disclosure

• We do not sell, rent or trade your information, and we do not share or transfer Google user data with anyone outside the Ministry.
• Survey responses are used only within the Ministry, by staff authorised to see them. Reports present results summarised by school, atoll or zone, not as lists of named people.
• Service providers that the website uses:
  • Google provides the sign-in. Your survey answers are not sent to Google.
  • Google Analytics receives page-visit information from the survey pages.
  • Cloudflare delivers and protects the website's traffic.
• We will disclose information only where the law of the Republic of Maldives requires it.

6. Storage and security

• Responses are stored in the app's database.
• All traffic between your browser and the app is encrypted with HTTPS; plain HTTP requests are redirected to HTTPS. The session cookie is marked secure (sent only over HTTPS) and HTTP-only, and forms are protected against cross-site request forgery.
• Only authorised Ministry staff can view survey responses. Access is controlled by role-based permissions. On identified surveys, names and email addresses are visible only to staff given a separate permission to see them.
• The coded fingerprint is calculated with a secret key that is kept only on our server.
• When staff delete or change a response in the admin system, that action is recorded in an audit log.

7. Retention

• Google sign-in data (name, email address, picture link, Google account ID, Workspace domain) is kept only in your sign-in session. It is removed when you sign out or after 2 hours without activity, except that on identified surveys the name and email address are saved with your response.
• Survey responses, including the email domain, school, coded fingerprint and, on identified surveys, name and email address, are kept indefinitely. There is no fixed deletion period. They are deleted only if you ask us to delete them (section 8), or if the Ministry deletes them.
• QR code scan logs have no fixed deletion period.
• Draft answers stay in your browser until you submit the survey or clear your browser data.
• Google Analytics data is retained according to the Ministry's Google Analytics property settings.

8. Your rights and deleting your data

• View, correct or delete: email [email protected] with the survey's name and the Google email address you used.
  • On identified surveys we find your response by your email address.
  • On anonymous surveys we find it by recalculating the coded fingerprint from the address you give us, without looking at anyone else's identity.
  • Submitted responses cannot be edited. To correct one, we delete it, and you can answer again where the survey allows. We will confirm by email when your request is done.
• Sign out at any time using "Sign out" on the survey page or the app home page. This ends your sign-in session.
• Revoke access: you can remove the app's access to your Google account at any time from your Google Account's Third-party apps & services page (myaccount.google.com/permissions).
• Draft answers can be removed by clearing your browser's site data.

9. Limited Use disclosure

Ministry of Education - Feedback Survey's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, Google user data is used only to provide and improve the survey features described in this policy, is not used to serve advertisements, is not sold, and is not transferred to others except as needed to provide these features, to comply with the law, or for security purposes.

10. Changes to this policy

If we change how the app collects or uses information, we will update this page and the "Last updated" date below. Please check this page from time to time; it is linked from the app home page.

Last updated: 21 October 2026

11. Contact

For privacy questions or requests about Ministry of Education - Feedback Survey, email [email protected], or write to: Ministry of Education, Higher Education and Skills Development, Velaanaage, 8th Floor, Ameer Ahmed Magu, 200096, Malé, Republic of Maldives.