Privacy Policy
How EduManage handles student, staff and parent information.
What we collect
Account details (name, username, role, email used for sign-in), school records your school enters about you (class, attendance, exam marks, fee invoices and payments), and basic technical data such as sign-in timestamps needed to keep accounts secure.
Why we collect it
To run day-to-day school administration: registering students, marking attendance, issuing and tracking fees, recording exam results, publishing announcements and producing reports for school management.
Who can see your data
Access follows your role. Students and parents see only their own records. Teachers see the classes they teach. Accountants see fee and payment records. Administrators see school-wide data. Access rules are enforced on the server, not just hidden in the interface.
Passwords and sessions
Passwords are stored only as salted hashes by our authentication provider and are never visible to us or your school. Password reset links are sent to your registered email and expire after a short time. Choosing "Remember me" keeps you signed in on that device; leaving it unchecked ends your session when you close the browser.
Sharing with others
We do not sell personal data or use it for advertising. Data is shared only with the infrastructure providers needed to run the service (hosting, database, authentication and email delivery) and where the law requires it.
How long it is kept
School records are retained for as long as your school needs them for academic and financial record-keeping, then deleted or anonymised according to the school's retention policy.
Your rights
You can ask to see the data held about you, have inaccurate records corrected, or ask for deletion where the school is not legally required to keep them. Start these requests with your school administrator.
Cookies and local storage
We store a session token and small preferences (dark mode, sidebar state, remember-me choice) on your device. These are required for the app to work and are not used for tracking across other websites.