Privacy Policy

1. Introduction

Welcome to StudentConnect ("we," "our," or "us"). StudentConnect is operated by AARA Technologies. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile applications (StudentConnect Parent, StudentConnect Teacher) and web platforms (School Admin Portal), collectively referred to as the "Services."

We are committed to protecting the privacy and security of students, parents, teachers, and school administrators who use our Services. Please read this Privacy Policy carefully. By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide to Us

Account Information:

• Full name
• Email address
• Phone number
• Profile photograph (optional)
• School affiliation
• Role (parent, teacher, administrator)

Student Information (provided by schools/parents):

• Student name
• Date of birth
• Class/grade information
• Student ID/enrollment number
• Parent/guardian contact information
• Profile photograph

Educational Records:

• Attendance records
• Academic grades and marks
• Homework assignments and submissions
• Exam schedules and results
• Leave requests and approvals
• Entry/exit timestamps

2.2 Information Collected Automatically

Device Information:

• Device type and model
• Operating system and version
• Unique device identifiers
• Mobile network information

Usage Information:

• App features accessed
• Time and duration of use
• Interaction patterns
• Error logs and crash reports

3. How We Use Your Information

3.1 Core Service Delivery

• Facilitate communication between parents, teachers, and schools
• Track and report student attendance
• Manage homework assignments and academic records
• Process leave requests and approvals
• Send notifications about school events and updates
• Enable entry/exit tracking and parent notifications

3.2 Service Improvement

• Analyze usage patterns to improve user experience
• Identify and fix technical issues
• Develop new features and functionality
• Conduct research and analytics (in aggregated, anonymized form)

3.3 Security and Compliance

• Verify user identity and prevent unauthorized access
• Detect and prevent fraud, abuse, or security threats
• Comply with legal obligations
• Enforce our Terms of Service

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on:

5. Data Sharing and Disclosure

5.1 Within the School Community

5.2 Third-Party Service Providers

We may share data with trusted third parties who assist in operating our Services:

• Firebase (Google): Authentication, database, cloud functions, messaging
• Google Cloud Platform: Data storage and processing
• Email service providers: Transactional emails and OTP delivery

All third-party providers are contractually obligated to protect your data.

6. Data Security

We implement robust security measures to protect your information:

6.1 Technical Safeguards

• Encryption in Transit: All data transmitted uses TLS 1.2+ encryption
• Encryption at Rest: Sensitive data is encrypted in our databases
• Secure Authentication: OTP-based login, no passwords stored
• Access Controls: Role-based access control (RBAC)
• Firestore Security Rules: Database-level access restrictions
• Regular Security Audits: Periodic review of security practices

6.2 Data Breach Protocol

In the event of a data breach:

1. We will investigate and contain the breach immediately
2. Affected users will be notified within 72 hours
3. Relevant regulatory authorities will be informed as required
4. Steps will be taken to prevent future occurrences

7. Data Retention

We retain personal data only as long as necessary:

8. Your Rights and Choices

• Access and Portability: Request a copy of your personal data or export it in a commonly used format
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Restriction and Objection: Request restriction of processing or object to processing based on legitimate interests
• Consent Withdrawal: Withdraw consent for optional data processing at any time

How to Exercise Your Rights

Contact us at:

• Email: hello@scapp.in
• In-app: Settings > Privacy > Data Requests

We will respond to requests within 30 days.

9. Children's Privacy

9.1 COPPA Compliance (United States)

• We do not knowingly collect personal information directly from children under 13
• Student data is provided by schools and parents/guardians
• Schools are responsible for obtaining necessary parental consents

9.2 Student Data Protection

• Student data is used solely for educational purposes
• We do not use student data for advertising or profiling
• Student data is not sold or rented to any third party
• Parents/guardians can review and request deletion of their child's data

10. International Data Transfers

Our Services use Google Cloud Platform infrastructure. Data may be processed in:

• United States
• Other regions where Google Cloud operates

For international transfers, we ensure appropriate safeguards including Standard Contractual Clauses (SCCs) and compliance with applicable data transfer regulations.

11. Push Notifications

We send push notifications for:

• Attendance alerts (entry/exit, absences)
• Homework assignments and reminders
• Exam schedules and results
• Leave request updates
• School announcements
• Fee reminders

You can manage notification preferences in App Settings > Notifications or Device Settings > App Notifications.

12. Cookies and Similar Technologies

12.1 Web Platforms (School Admin Portal)

We use essential cookies for session management, authentication, and security. For more details, see our Cookie Policy.

12.2 Mobile Applications

Our mobile apps use Firebase Analytics (aggregated, anonymized), crash reporting, and performance monitoring. You can opt-out of analytics in app settings.

13. Regional Privacy Rights

13.1 European Union (GDPR)

EU residents have additional rights including the right to be forgotten, data portability, and lodging complaints with supervisory authorities.

13.2 California (CCPA/CPRA)

California residents have the right to know what personal information is collected, request deletion, opt-out of sale (we do not sell data), and non-discrimination for exercising privacy rights.

13.3 India (DPDP Act)

Indian users have rights under the Digital Personal Data Protection Act including right to access, correction, erasure, grievance redressal, and nomination.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our website
• Sending in-app notifications
• Updating the "Last Updated" date

Continued use of our Services after changes constitutes acceptance of the updated policy.

15. Contact Us