This Privacy Policy explains how SchoolOS ("we," "our," or "us") collects, uses, stores, and protects personal information when you use our mobile applications and web platform. By accessing or using SchoolOS, you agree to the information handling practices described in this policy.

1. Information We Collect

SchoolOS collects information strictly necessary for educational, administrative, and core platform operations:

• Personal Details: Student names, parent/guardian details, contact numbers, email addresses, and identification numbers.
• Academic Data: Attendance records, grades, exam results, assignment submissions, and performance evaluations.
• Administrative Data: Admissions status, class assignments, movement logs, and payment/fee records.
• Location Data (Mobile App): Foreground location access processed strictly for verified feature workflows (such as staff movement logs). Location data is never tracked in the background or shared with advertisers.
• Device Identifiers & Push Tokens: FCM registration tokens and device parameters required to deliver essential push notifications.
• Usage & Technical Data: Account login activity, HTTP access logs, and system crash diagnostics used to maintain security and stability.

2. How We Use Information

We process personal data solely for legitimate educational and institutional management purposes, including:

• Managing student enrollment, class allocations, and academic records.
• Facilitating secure communication between school administrators, teachers, parents, and students.
• Validating staff location status for administrative movement requests.
• Delivering push notifications regarding school announcements and real-time updates.
• Ensuring platform security, preventing unauthorized access, and improving infrastructure performance.

3. Legal Basis for Processing

We process personal data under legitimate educational interests, contractual obligation to the participating educational institution, compliance with applicable laws, and user consent (where explicitly required).

4. Data Sharing and Disclosure

We do not sell, rent, trade, or monetize personal data under any circumstances. Personal information is disclosed only under the following strictly defined conditions:

• Authorized Institutional Staff: Teachers and administrators access student profiles based on role permissions.
• Parents and Guardians: Linked parent profiles access only their wards' academic and administrative records.
• Essential Infrastructure Providers: Trusted third-party processors (such as cloud database hosting or notification relay services) operate strictly under contract to support application functionality.
• Legal Obligations: When required by enforceable law, regulation, or legal authority.

5. Children’s Privacy

SchoolOS processes personal data relating to students under the age of 18 strictly under the supervision and authorization of the participating educational institution and/or parent/guardian. We do not knowingly collect or use children’s data for marketing, profiling, or behavioral tracking.

6. Cookies, Storage, and Tracking Technologies

SchoolOS uses essential local storage mechanisms and session cookies required for fundamental system operations:

• Authentication Tokens: Secure local session keys used to keep users logged in across application sessions.
• Essential Cookies: HTTPS session identifiers that protect against cross-site security threats and maintain server connectivity.

We do not use third-party tracking cookies, advertising trackers, or cross-app profiling pixels.

7. Third-Party Services

We utilize verified infrastructure providers (such as Google Firebase Cloud Messaging) to power notification delivery and API operations. These third parties process technical identifiers solely on our behalf and are bound by strict data security standards.

8. Data Security & Storage

We maintain industry-standard administrative, technical, and physical safeguards to protect user data, including:

• Encrypted HTTPS/TLS transmission protocols for all API exchanges.
• Role-based access control (RBAC) ensuring data access is limited to verified credentials.
• Restricted database permissions and secure server infrastructure.

9. Data Retention & Deletion

Personal data is retained only for as long as necessary to fulfill school management operations or meet legal obligations. Users or institutions may request account deactivation or data deletion by contacting our support team.

10. User Rights

Depending on your jurisdiction, you or your authorized representative have the right to:

• Request access to the personal data we store regarding your account.
• Request corrections to inaccurate personal details.
• Request deletion or restriction of non-essential profile data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any amendments will be published on this page with an updated revisions date.

12. Contact Information

For privacy queries, data requests, or compliance inquiries, please reach out to us at: