Privacy Policy

1. Information We Collect

a. Account, School, and Profile Information

We collect information necessary to provide the Service to educational institutions and their users.

Schools & Principals

• School name
• School address
• Institutional details
• Principal's name
• Phone number
• System-generated login credentials

Teachers

• Name
• Phone number used for account verification and official school communications through WhatsApp where applicable
• System-generated login credentials

Parents

• Name
• Phone number
• Login credentials

Students

• Name
• Grade
• Academic records

All student records are created and managed by the school. Only students enrolled in Grade 6 and above receive individual login accounts. Students below Grade 6 remain under the school's management and do not have their own accounts.

b. Academic and School Data

We process information entered by school administrators and teachers, including:

• Academic history
• Grades and performance insights
• Class rankings
• Attendance records
• Timetables
• Exam schedules
• Homework assignments
• Weekly and monthly performance reports
• School events
• School announcements
• School activity logs

c. Financial Data

The Service displays school-related financial information such as fee structures and payment statuses. We do not collect, store, or process credit card information, bank account details, or payment credentials through the Service.

d. Device and Usage Information

We may automatically collect technical information including:

• Device model
• Operating system version
• Application version
• IP address
• Device identifiers
• Push notification tokens
• Crash reports
• Diagnostic and usage information necessary to improve the Service

2. How We Use Information

We use collected information to:

• Provide, operate, and maintain the Service
• Authenticate users and manage accounts
• Generate system-generated login credentials
• Deliver login credentials through WhatsApp where applicable
• Send attendance alerts, academic reports, exam schedules, fee reminders, and school announcements
• Generate weekly and monthly academic reports
• Improve system performance, reliability, and security
• Provide educational institutions with tools to manage their schools effectively
• Comply with applicable legal obligations

3. Legal Basis for Processing

Where applicable under relevant privacy laws, we process personal information on one or more of the following legal bases:

• Performance of our contractual obligations with educational institutions using the Service.
• Consent, where required by applicable law.
• Compliance with legal obligations.
• Our legitimate interests in operating, maintaining, securing, and improving the Service.

4. How Information Is Shared

SEPTA operates as a software platform for educational institutions. Schools determine what information is entered into the Service and are responsible for managing student, parent, and teacher data. SEPTA processes such information on behalf of the school in order to provide the Service.

Information may be shared only in the following circumstances:

With Educational Institutions

School administrators and teachers may access student, parent, and academic information necessary to manage their institution.

Between Users

• Parents may access information relating to their enrolled children.
• Students in Grade 6 and above may access only their own academic information.

Platform Administrators

Authorized SEPTA administrators may access school and user accounts for support, troubleshooting, quality assurance, and platform monitoring purposes. This may include viewing an account as the user would see it in order to diagnose an issue or verify that the Service is functioning correctly. Administrators do not use this access to alter user data except where necessary to resolve a reported issue, and all such access is logged.

Service Providers

We may share information with trusted third-party service providers that help operate the Service, including:

• Supabase (cloud hosting, database, and backend infrastructure)
• WhatsApp Business services used for account verification and official communications

These providers process information only as necessary to provide their services and are required to protect the confidentiality of the data.

Legal Requirements

We may disclose information where required by law or in response to valid legal requests from government authorities or regulatory bodies.

5. Children's Privacy

The Service is designed for use by educational institutions that manage students of all ages. We do not knowingly collect personal information directly from children. Student information is entered, managed, and controlled by school administrators and teachers.

Students below Grade 6 do not receive individual user accounts. Their information is managed by the school and may be viewed by their parents.

Students in Grade 6 and above receive individual login credentials. These credentials are sent directly to the parent's WhatsApp number to ensure parental authorization and oversight.

If a parent or guardian believes information has been collected without appropriate authorization, they may contact us to request review or removal of the information where applicable.

6. Data Security

We implement industry-standard administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction. These safeguards include encrypted data transmission, secure backend infrastructure, authentication controls, and restricted administrative access.

Despite our efforts, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention and Deletion

We retain personal information only for as long as necessary to provide the Service, fulfill our contractual obligations, comply with applicable laws, and resolve disputes.

If an educational institution terminates its agreement with SEPTA, or if a student leaves or graduates from the institution, associated personal information will be deleted or anonymized in accordance with our contractual obligations and applicable law.

Parents, teachers, and principals may request deletion of their personal information by contacting their educational institution or by contacting us directly.

8. International Data Transfers

Information may be processed or stored on servers located outside your country of residence. Where such transfers occur, we implement appropriate safeguards designed to protect personal information in accordance with applicable privacy laws.

9. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Access your personal information.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Request restriction of processing.
• Object to certain processing activities.
• Receive a copy of your personal information where applicable.
• Withdraw consent where processing is based on consent.

Academic information may generally only be corrected by the relevant educational institution. Push notifications may be disabled at any time through your device settings.

10. Cookies and Similar Technologies

Our mobile application and web application may use cookies and similar technologies to support authentication, maintain user sessions, remember preferences, improve functionality, monitor performance, and enhance the overall user experience.

Users may manage or disable cookies through their browser settings. However, doing so may affect certain features of the Service.

11. Information We Do Not Collect

Unless explicitly required for a specific feature and authorized by the user or educational institution, we do not collect or process:

• Credit card information
• Bank account information
• Government-issued identification numbers
• Biometric information (such as fingerprints or facial recognition)
• Precise GPS location data
• Personal contacts stored on the device
• Photos, videos, microphone recordings, or camera access beyond what is necessary for features explicitly used by the user

12. Third-Party Services

The Service may integrate with trusted third-party providers, including Supabase and WhatsApp Business services. These providers maintain their own privacy policies and data handling practices. We encourage users to review their respective privacy policies.

We are not responsible for the privacy practices of third-party services beyond our control.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are made, we will update the “Last updated” date at the top of this page. Continued use of the Service after changes become effective constitutes acknowledgment of the revised Privacy Policy.

14. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Islamic Republic of Pakistan, except where mandatory laws of another jurisdiction require otherwise.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: