Effective Date: July 13, 2026 | Last Updated: July 13, 2026

Welcome to School Club ("we," "our," or "us"). We are deeply committed to protecting the privacy and security of our users, which include educational institutions, administrators, teachers, parents, and students. This Comprehensive Privacy Policy explains how we collect, process, share, and protect your personal information across our ERP software, website, and mobile applications available on the Apple App Store and Google Play Store.

1. Information We Collect

We collect and process various types of information to provide a seamless and secure educational management experience. This includes:

• Account & Profile Information: Name, email address, phone number, physical address, profile picture, and login credentials provided during onboarding.
• Educational & Academic Data: Student enrollment details, attendance records, exam results, assignments, disciplinary records, and fee payment history, inputted by authorized school personnel.
• Device & Usage Data: IP address, device identifiers (UDID, MAC address), operating system version, browser type, mobile network information, and app crash logs.
• Camera & Media Access: With your explicit consent, our mobile app accesses your device's camera and photo gallery for uploading profile pictures, homework, or document attachments.
• Financial Data: While we facilitate fee payments, we do not store full credit card numbers or raw banking details. All transactions are securely processed by our PCI-DSS compliant third-party payment gateways.

2. How We Use Your Information

We use your data solely to fulfill our contractual obligations to your educational institution and to enhance our Services:

• To provision, operate, maintain, and secure the School Club platform.
• To facilitate school-to-parent and school-to-student communications (e.g., SMS alerts, push notifications for attendance and fee reminders).
• To authenticate users, prevent fraud, and ensure the integrity of academic records.
• To analyze system performance, troubleshoot technical issues, and improve our platform's UI/UX.

3. Automated Processing and AI Integration

School Club utilizes Artificial Intelligence (AI) to optimize educational workflows, such as generating predictive analytics for student performance and automating routine administrative tasks. However, no automated decisions that produce legal or similarly significant effects concerning a student are made without human intervention. AI-driven insights are provided strictly as advisory tools for school administrators and teachers.

4. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies on our website and web portal to:

• Maintain active sessions and authenticate users securely (Essential Cookies).
• Remember your preferences and settings (Functional Cookies).
• Analyze traffic and usage patterns to optimize the user experience (Analytics Cookies).

You can manage your cookie preferences through your browser settings; however, disabling essential cookies may impact your ability to use the ERP portal.

5. Data Sharing and Third-Party Disclosure

School Club acts as a Data Processor on behalf of educational institutions (the Data Controllers). We never sell, rent, or monetize your personal data. Data is only shared under the following conditions:

• With the Educational Institution: Authorized school administrators and teachers have access to relevant student and parent data.
• Service Providers: We engage trusted third-party vendors (e.g., AWS/Azure for cloud hosting, Twilio/Msg91 for SMS delivery, Firebase for push notifications and crash reporting). These vendors are contractually bound by strict confidentiality and data protection agreements.
• Legal Compliance: We may disclose data if legally required by law enforcement, court order, or to protect the rights, property, or safety of School Club, our users, or the public.

6. Security Measures & Protocols

We employ robust, industry-standard security measures to safeguard your information against unauthorized access, alteration, or destruction:

• Encryption: All data in transit is encrypted using TLS 1.2/1.3. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Role-Based Access Control (RBAC) ensures that users can only view data authorized for their specific role.
• Audits: We conduct regular vulnerability scanning, penetration testing, and compliance audits.

7. Data Breach Notification

In the unlikely event of a data breach that compromises personal information, we have a strict incident response plan in place. We will notify the affected educational institutions (Data Controllers) without undue delay, typically within 72 hours of becoming aware of the breach, providing all necessary information to help mitigate any potential risks.

8. International Data Transfers

Our primary servers are located in India. If you access our platform from outside India, your information may be transferred to, stored, and processed in India. By using our Service, you consent to this transfer, understanding that data protection laws in India may differ from those in your jurisdiction.

9. Data Retention and Account Deletion Policy

We retain your personal data only for as long as your school maintains an active subscription with us, or as required to fulfill legal and regulatory obligations.

10. Children's Privacy (COPPA & FERPA Compliance)

School Club is strictly an educational tool. We comply with the Children's Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA). We do not collect personal information from children under 13 without verifiable consent from the school and parents. Educational institutions hold the responsibility to obtain such consent before utilizing our platform for their students.

11. Your Privacy Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the right to:

• Access and obtain a copy of your personal data.
• Request correction of inaccurate or incomplete data.
• Object to or restrict the processing of your data.
• Request the portability of your data in a structured, commonly used format.

12. Changes to This Privacy Policy

We may amend this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via in-app notifications, email, or a prominent notice on our website prior to the change becoming effective.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us: