Privacy Policy

1. Information we collect

Account data: name, email address, phone number and the password hash created when you register.

Institution data: the institution you belong to, your role (principal, teacher, staff, guardian, student) and your permissions.

Educational records entered by your institution: attendance, exam marks, conduct records, documents and financial entries.

Optional photos of students and staff uploaded by the institution.

Technical data needed to run the service: sign-in timestamps and basic error logs.

2. Why we use it

To operate the core features you request: attendance, exams, notifications, reports, finance and administration.

To secure accounts, prevent abuse and keep an audit trail of administrative actions.

We do not sell personal data, and we do not use it for advertising profiling.

3. Children's data

Records about students, including minors, are entered and controlled by the institution the student is enrolled in. The institution is the data controller; Nibras.EF processes this data on its behalf.

Students and guardians only ever see their own records.

4. Sharing

Data is visible only to authorised members of the same institution, according to their role.

We use a managed cloud database and hosting provider to store and serve data. No other third party receives your personal data, except when required by law.

5. Security

All traffic is encrypted in transit. Access is protected by row-level security rules in the database, so each request can only reach the records that the signed-in person is allowed to see.

Student and staff photos are stored in a private bucket and served only through short-lived signed links.

6. Retention

Account data is kept while your account is active. Institution records are kept while the institution uses the service, because they form the educational history of its students.

When you delete your account, your personal account data is removed permanently and your name is unlinked from institution records.

7. Your rights — access and deletion

You can view and correct your profile inside the app at any time.

You can delete your account and personal data from Settings → Delete account, or from the public page /delete-account. Deletion is immediate and cannot be undone.

You can also write to app.hammad@gmail.com to request access, correction or deletion.

8. Changes and contact

If this policy changes we will update the date at the top of this page.

Questions: app.hammad@gmail.com