Privacy Policy

This Privacy Policy describes how School Connect (https://schoolservice.in) and its mobile applications (collectively, the "Service") collect, use, and protect information about schools, administrators, teachers, students, and parents who use the Service.

1. What we collect

1.1 Account information

• Name, email address, phone number
• School / institution name and address
• Role within the institution (admin, teacher, student, parent)
• Hashed password and email-verification status

1.2 Operational data

• Attendance records, grades, exam results, fee payment records
• Class assignments, timetables, announcements you create
• Messages, comments, and notifications between users within your tenant

1.3 Device and usage data

• Device model, OS version, app version
• Firebase Cloud Messaging (FCM) push notification token
• IP address and approximate location (city-level) from log records
• Crash and diagnostic reports (via Firebase Crashlytics)

1.4 Information we do NOT collect

• We do not access your contacts, photos, microphone, or camera unless you explicitly grant permission for a specific feature (e.g. uploading a profile photo).
• We do not sell your data to advertisers or any third party.
• We do not use your data to train AI models.

2. How we use information

• To operate and maintain the Service for your school
• To authenticate users and enforce role-based access
• To send service emails (account verification, password reset, important account notices)
• To send push notifications when you opt in (e.g. attendance, fee due, exam results)
• To debug crashes and improve reliability
• To comply with legal obligations

3. Sharing and disclosure

Your data is tenant-isolated. Each school is a separate tenant, and data never crosses tenant boundaries. We share information only with:

• Other users in your school based on role (e.g. teachers see their students; parents see only their children).
• Infrastructure providers who host the Service on our behalf — primarily Contabo (servers) and Hostinger (domain). They process data only as needed to provide infrastructure.
• Firebase / Google for push notifications and crash reporting (subject to their own privacy policies).
• Authorities, only when required by valid legal process.

4. Children's data

Because School Connect serves schools, the Service inherently processes data about students who may be under 13. We treat student data as strictly need-to-know: only the school's admin, the student's teachers, the student themselves, and their registered parent / guardian can see it. Parents can request deletion of their child's data at any time (see Section 7).

5. Data retention

We retain personal data for as long as the school maintains an active tenant on the Service, plus a 90-day grace period after cancellation in case the school wishes to reactivate. Backups are kept for an additional 90 days for disaster recovery, after which all personal data is permanently deleted.

6. Security

• All connections use HTTPS / TLS 1.2+.
• Passwords are hashed with industry-standard algorithms (BCrypt).
• Data is isolated per-tenant at the database row level.
• Access to production systems is restricted to authorized engineers and audited.

7. Your rights

You can:

• Access your data — visible directly in the dashboard.
• Correct your data — edit profile in the dashboard, or contact your school admin for school-level data.
• Export your data — request a copy by emailing us.
• Delete your data — see the Data Deletion page.
• Withdraw consent — disable push notifications in app settings or your device settings.

8. Cookies

Our website uses minimal cookies — only those required to keep you logged in to the dashboard. We do not use third-party advertising or analytics cookies.

9. Changes to this policy

If we materially change this policy we will notify the email address on your account at least 14 days before the change takes effect.

10. Contact

Questions or concerns? hello@schoolservice.in