Privacy Policy

Effective Date: June 8, 2026

IMMACULATE HEART OF MARY'S GOVT. AIDED HIGH SCHOOL ("we", "our", or "us") operates the IMMACULATE HEART OF MARY'S GOVT. AIDED HIGH SCHOOL ERP mobile application and website dashboard ecosystem. This Privacy Policy outlines our transparent protocols regarding the collection, processing, use, and structural security safeguarding of sensitive user and device data for students, parents, teachers, and administrators.

1. Information Collection and Disclosures

To provide a completely integrated, functional educational administration platform, we collect the following categories of information:

• Personal Identity Records: Names, unique registration tokens, student registry tags, and staff employee credentials provided by institutional school administrators.
• Contact Telemetry: Phone numbers and institutional email addresses used exclusively for authentication (such as secure OTP token verification validation) and real-time push notification broadcasts.
• Academic and Financial Metadata: Homework registers, corporate payroll records, custom report cards, student leaves tracking entries, fee invoices, and processing transaction status parameters.

2. Sensitive Hardware Features & Runtime Permissions

Our application requests explicit permissions to access sensitive device sub-systems under strict technical guardrails, in compliance with both Google Play and Apple App Store policies:

• Camera & Biometrics (Face Attendance): ...
• Device Location Data: ...
• Notification System (FCM / APNs): Cloud messaging permissions are utilized to broadcast structural updates, time-sensitive circular alerts, calendar entries, and exam schedules to verified parent and staff channels. On iOS, this is handled via Apple Push Notification Service (APNs).

3. Data Storage and Protection Security

All extracted core information arrays are stored in strongly guarded database structures. All network data transfers are fully encrypted in transit using industry-standard Transport Layer Security (TLS/HTTPS protocols). We enforce absolute strict database transaction boundaries and utilize encryption layers to isolate operational logs from unauthenticated structural access channels.

4. Children Under the Age of 13 Policy (COPPA Compliance)

Given that our target audience includes minors under the age of 13, we treat student privacy with utmost care:

• Student registry records, academic performance parameters, and profiles are created and managed **strictly** by verified institutional school administrators or verified parent guardian accounts.
• There are no open or un-metered account extraction registration loops for children inside the mobile framework application layout.
• We do not utilize tracking parameters or gather behavior profiles for commercial advertising brokers. Student logs serve purely administrative, operational purposes.

5. Third-Party Sharing Disclosures

We do not lease, trade, barter, or sell student, parent, or employee compensation/identity logs to external advertisers or tracking aggregators. Data maps are routed exclusively through securely mapped third-party providers (such as transactional payment infrastructure like Razorpay or automated utility alert services like MSG91) solely to execute authorized operations requested by the active session container user.

6. Data Erasure and User Rights

Users preserve complete control over their active data footprint. Account details can be requested to be updated, corrected, or completely dropped from our live system registries. To execute a complete account deletion process from active database records, please submit an official request directly to your designated school administrative desk portal.

7. Policy Modifications and Communications

We reserve absolute rights to revise this document dynamically to mirror current statutory requirements and updated developer store protocols. Any layout changes made will be posted transparently on this URL address along with an updated revision date line stamp.