Privacy Policy

STEP English, a program of Michigan Academy of Science and Technology (MAST). Effective November 12, 2026.

This Privacy Policy explains how Michigan Academy of Science and Technology (“MAST”, “we”, “us”), doing business as STEP English, collects, uses and protects your information when you use mi-step.com, the STEP English student portal and app, and our text messages.

Information we collect

• Account details: your name, e-mail address, mobile phone number, country and gender, and your password (stored only in encrypted, hashed form).
• Learning information: your level, placement test answers, class enrollment, exercise answers, writing, voice recordings, project files, scores, attendance and certificates.
• Payment information: the amount, date and status of your payments and any receipts you upload. Card payments are handled by our payment provider, Stripe. We do not receive or store your full card number.
• Messages: what you send us through the contact form or the portal inbox.
• Technical information: your IP address, device and browser type, pages visited and sign-in times, used for security and to keep the service working. We use cookies only to keep you signed in and remember your language.

How we use your information

• To create and manage your account and sign you in, including one-time passcodes sent by text message.
• To place you at the right level, run your classes and self-study, and let your teacher review your work.
• To process payments, coupons and refunds.
• To send you account, enrollment, payment, class and exam messages by e-mail or text message.
• To issue and verify certificates.
• To answer your questions, keep the service secure and improve our courses.

Text messages (SMS)

If you give us your mobile number and agree to receive text messages, MAST (STEP English) will send you sign-in passcodes and messages about your account, enrollment, payments, classes and exams. Message frequency varies. Message and data rates may apply. Reply STOP to stop receiving messages or HELP for help. See our SMS Terms.

Who we share information with

We do not sell your personal information. We share it only as needed to run the service:

• Service providers that work on our behalf: SMS delivery (Twilio), card payments (Stripe), e-mail delivery, website hosting, video hosting (Vimeo) and live online classes (Zoom). They may use your information only to provide their service to us.
• Your teachers and our staff, who see your learning information to teach and support you.
• Anyone you share a certificate link or QR code with, who can confirm your certificate's name, level and date.
• Authorities, when the law requires it or to protect the safety of our students and staff.

How long we keep information

We keep your account and learning records while your account is open and as long as needed for certificates, accounting and legal obligations. You can ask us to delete your account. Backups are kept for a limited time and then removed.

Your choices and rights

• You can see and update your account details in the portal.
• You can stop text messages at any time by replying STOP, or turn off SMS sign-in in your account.
• You can ask us for a copy of your information, to correct it, or to delete your account by contacting us.

Security

We protect your information with encrypted connections (HTTPS), hashed passwords, encrypted stored secrets, access limited by role, and regular backups. No online service is completely secure, so please keep your password private.

Changes to this policy

We may update this policy. The effective date at the top shows the latest version. If a change is important, we will tell you in the portal or by e-mail.

Contact us

Michigan Academy of Science and Technology (STEP English)
New Mexico, USA
Mobile phone: 248 989 6002
mi-step.com · Contact