1. Who This App Is For

The Gayaza High School App is a closed, role-based platform restricted to authorized users:

• Administrators — school staff managing parent records and school facilities
• Security personnel — staff managing and verifying parent/guardian visits
• Parents/Guardians — parents or guardians of enrolled students

The App is not intended for direct use by minors. However, it displays student records (names, class, house, combination, and photos) as part of its core operational function for authorized users.

2. Information We Collect

a) Account & Authentication

• Username and password — used to authenticate and access the App
• Phone number and/or email address — used for OTP-based password reset only
• A JWT authentication token is stored in encrypted secure storage on your device after login

b) Profile Information

Logged-in users may update their profile, which may include:

• Full name
• Phone number (required)
• Email address (optional)
• Profile photo selected from device gallery

This information is transmitted to and stored on the school's server.

c) Visit Confirmation Data

Security personnel logging parent visits submit a manually entered location description (e.g. "Main Gate") and optional free-text notes. The App does not collect GPS or device location data.

d) Student and Parent Records

The App retrieves and displays records stored on the school's server, including parent/guardian names, phone numbers, email addresses, photos, and student names, class, house, and subject combination. This data is managed by the school and is not collected directly from users within the App.

e) Device and Usage Data

The App does not use analytics, crash reporting, or advertising SDKs. No behavioral or usage data is collected or shared with third parties.

3. Permissions Used

Permission	Purpose
CAMERA	Scanning QR codes to look up parent records; capturing photos for profile or facility entries
INTERNET	Communicating with the school's server
ACCESS_NETWORK_STATE	Checking connectivity before making network requests

The App does not request access to your contacts, call logs, precise location, microphone, or device storage beyond what the system photo picker provides.

4. How We Use Your Information

• To authenticate and maintain your session
• To display and manage parent and student records relevant to your role
• To log and confirm parent/guardian visits to the school
• To send and display school notifications relevant to your role or class
• To manage school facility information (Admin role)

We do not use your data for advertising, profiling, or any purpose outside the school's operational needs.

5. Data Storage and Security

• Your authentication token and session data are stored in encrypted secure storage on your device
• All communication with the school's server is conducted over HTTPS
• The school's backend is hosted on Heroku. Data is subject to their infrastructure security practices
• Map tile images are loaded from OpenStreetMap and Carto for facility location display. No personal data is sent to these services

6. Data Sharing

We do not sell, rent, or share your personal data with third parties for commercial purposes. Data may be accessed by:

• Authorized school administrators managing the system
• The hosting provider (Heroku) as part of infrastructure operation

7. Data Retention

Data is retained as long as your account is active or as required by the school's operational and legal obligations. Contact the school administrator to request account deletion or data removal.

8. Children's Privacy

The App is for use by adults (staff and parents/guardians) only. While student records are displayed within the App for operational purposes, the App does not collect information directly from students. If you believe a minor has accessed the App without authorization, contact the school immediately.

9. Your Rights

You may have the right to access, correct, or request deletion of the personal data the school holds about you. To exercise these rights, contact the school at the address in section 11.

10. Changes to This Policy

We may update this policy from time to time. Continued use of the App after changes are posted constitutes acceptance of the updated policy. The effective date at the top of this page reflects the latest revision.

11. Contact

Gayaza High School
Gayaza, Wakiso District, Uganda
[school contact email]