Privacy Policy for myschoolapp.online

Introduction

myschoolapp.online ("we", "us", "our") provides educational software and services for schools, teachers, students, and parents. We respect your privacy and are committed to protecting personal data in accordance with applicable laws, including the Information Technology Act 2000 and related rules in India.

Scope

This Privacy Policy explains what information we collect, how we use it, with whom we share it, how we protect it, and the choices available to users. It applies to data collected via our website, mobile apps, APIs, and other services under the myschoolapp.online domain.

Definitions

• Personal Data: Any information that identifies or can identify an individual (e.g., name, email, phone).
• Sensitive Personal Data: Data revealing health, special needs, or other categories that require explicit consent.
• Processing: Any operation performed on personal data (collecting, storing, using, sharing, deleting).

Data We Collect

1. Account and Profile Data

Examples: name, email address, phone number, school name, role (student/teacher/parent/administrator), profile photo.

2. Educational Data

Class enrollment, grades, attendance records, assignments, teacher feedback, special needs information (only with explicit consent).

3. Payment and Billing Data

When you purchase paid features: billing name, billing address, payment instrument metadata (we do not store full card numbers; payment processors handle card data).

4. Technical and Usage Data

IP address, device identifiers, browser type, operating system, pages visited, feature usage, logs, timestamps, crash reports, cookies and similar technologies.

5. Communications

Support requests, emails, chat transcripts, and other communications with our team.

Legal Basis for Processing

We process personal data based on:

• Consent — where required (e.g., sensitive data, marketing communications).
• Contractual necessity — to provide services you requested (account management, course delivery).
• Legal obligation — to comply with laws and regulations.
• Legitimate interests — for fraud prevention, service improvement, and analytics, balanced against user rights.

How We Use Your Data

• To create and manage user accounts and profiles.
• To deliver educational content, assessments, and communications.
• To process payments and refunds.
• To provide customer support and respond to inquiries.
• To analyze and improve our services, perform analytics and research.
• To detect, prevent, and respond to security incidents and fraud.
• To comply with legal obligations and enforce our Terms.

Sharing and Disclosure

We do not sell personal data. We may share data with:

• Service providers (cloud hosting, analytics, email, payment processors) under written contracts requiring confidentiality and security.
• Schools and administrators — where the school account owner requests or manages student data.
• Legal authorities — when required by law or to protect rights and safety.
• Affiliates — only where necessary and under the same protections.

Third‑Party Services and Links

We use third‑party services (e.g., cloud providers, analytics, payment gateways). These services have their own privacy policies. We recommend reviewing their policies. We are not responsible for third‑party practices beyond our contractual controls.

Cookies and Tracking

We use cookies and similar technologies for essential site functionality, analytics, and optional preferences. You can manage cookie preferences through your browser or our cookie consent tool. Examples:

• Essential cookies — required for login and security.
• Performance cookies — for analytics and usage statistics.
• Functional cookies — to remember preferences.

Data Retention

We retain personal data for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type; account data is retained while the account is active and for a reasonable period after account deletion for legal and operational reasons.

Security Measures

We implement reasonable and industry‑standard security measures to protect personal data. These include:

• Encryption in transit using TLS for all network communications.
• Encryption at rest for sensitive data fields and backups.
• Access controls and role‑based permissions for staff and contractors.
• Multi‑factor authentication (MFA) for administrative accounts.
• Regular vulnerability scanning and periodic penetration testing.
• Secure development lifecycle practices and code reviews.
• Logging and monitoring of systems and security events.
• Data minimization and pseudonymization where feasible.
• Employee training on data protection and incident response.
• Vendor security assessments and contractual security obligations.

Note: No system is 100% secure. We cannot guarantee absolute security, but we commit to maintaining and improving our security program.

Data Breach Response

In the event of a confirmed data breach affecting personal data, we will:

1. Contain and remediate the incident promptly.
2. Assess the scope and impact of the breach.
3. Notify affected users without undue delay and provide recommended steps to mitigate harm.
4. Notify regulators as required by applicable law.
5. Document the incident, root cause, and corrective actions taken.

Notifications will be sent to the email address on file or via other reasonable means if email is not available.

Children's Data

We recognize the sensitivity of children's data. We collect and process data of minors only with parental/guardian consent or under school authority where applicable. If you believe we have collected data about a child without proper consent, contact us at contact@myschoolapp.online.

Your Rights

Subject to applicable law, you may have rights to:

• Access and obtain a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion or restriction of processing.
• Object to certain processing activities.
• Request data portability where technically feasible.

To exercise rights, contact contact@myschoolapp.online. We may require verification of identity before fulfilling requests.

International Transfers

We may transfer personal data to service providers located outside India. Where transfers occur, we use contractual safeguards and other measures to ensure an adequate level of protection consistent with applicable law.

Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated via email or prominent notice on our site. The "Effective date" at the top will reflect the latest revision.

Contact Us

For questions, requests, or complaints about this Privacy Policy or our data practices, contact us at:

Email: contact@myschoolapp.online

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority.