Privacy Policy

Effective Date: March 9, 2026

App Name: School M Staff

Developer: ALFASUN Technologies

1. Overview

School M Staff is a school management application designed to help school staff manage staff attendance, schedules, student exams, student attendance, and notifications. We are committed to protecting your privacy and complying with relevant regulations, including the Apple App Store Review Guidelines, Google Play Developer Policy, GDPR, and COPPA.

Note: This app is intended for users aged 18 and over. Minors (under 18) are restricted from downloading or using the app.

2. Data We Collect

We only collect data necessary to provide school management services:

Authentication Data:

• Username, Password, and User ID provided by the school administration
• Stored securely on the device using FlutterSecureStorage
• Used only to allow login and continued use of the app

Personal Data:

• Staff and Student Names
• Staff ID, Student ID, Class and Section
• Collected and managed by the respective school and accessed via the app

Media and Camera Data:

The app may allow staff to capture or attach images for student diary records or other academic documentation required by the school. Camera access is used only when the user chooses to capture a photo within the app. When selecting an image from the device, the app uses the system photo picker provided by the operating system. This allows users to select specific images without granting the app access to the entire photo library.

The app only accesses images selected by the user and does not scan or collect other files from your device.
Images uploaded through the app are transmitted securely through encrypted APIs and used solely for school-related purposes.

Device & Location Data:

• Device token (for push notifications)
• The app requests access to your precise location (ACCESS_FINE_LOCATION on Android and NSLocationWhenInUseUsageDescription on iOS) only while you are using the app, to verify staff attendance within the school campus.
• Location is collected with high accuracy and limited only to the time of attendance marking.
• The app checks whether you are physically within a 10-meter radius of the school premises before allowing attendance to be recorded.
• You may allow or deny location access in your device settings. However, if you deny location access, you will not be able to mark attendance, since this feature is a requirement set by your school administration.
• Location data is not stored permanently; it is only used at the time of attendance and transmitted securely via encrypted APIs.
• We do not use your location for advertising, tracking, or any background monitoring. Location access is strictly limited to attendance verification within the school premises and is not used to track users outside the school environment.

Academic & Institutional Information:

• Basic school information (name, phone, email, address, description) provided by the school via secure API

Note: Accounts and associated data are created and managed by the respective school administration. ALFASUN Technologies does not independently create or manage these records, but only provides the technical platform for access.

3. Permissions

The app requires the following permissions and their purposes:

• Internet Access: To communicate with school servers
• Notifications / POST_NOTIFICATIONS (Android 13+): To send alerts and updates
• ACCESS_FINE_LOCATION (Android) / NSLocationWhenInUseUsageDescription (iOS): To accurately mark attendance within school premises, only while the app is in use.
• RECEIVE_BOOT_COMPLETED / REQUEST_IGNORE_BATTERY_OPTIMIZATIONS: Used to ensure reliable notifications and app functionality after device restart.
• FOREGROUND_SERVICE: The app may run a temporary foreground service while the app is active to ensure reliable attendance verification and secure data synchronization. This service is not used for continuous background location tracking.
• Auto-Start: To allow the app to start automatically and ensure timely notifications
• Camera: To allow staff to capture images for student diary records and academic documentation.

On iOS, users will see a location permission dialog that includes the options ‘Allow Once,’ ‘Allow While Using App,’ and ‘Don’t Allow.’ The app functions only when ‘Allow Once’ or ‘Allow While Using App’ is selected for attendance purposes

All sensitive data (location, authentication credentials, tokens) are stored securely using FlutterSecureStorage and transmitted via HTTPS.

4. Use of Information

• Authenticate staff into the app
• Mark and verify attendance accurately
• Display personalized student and school information
• Send reminders, alerts, and updates
• Improve app functionality and reliability
• Upload student attendance and exam marks for their parents

5. Children’s Privacy

The app is intended for adult school staff only. We do not knowingly collect personal information from children. If you believe any child’s data has been collected inadvertently, contact us immediately.

6. Data Sharing

We do not sell or rent your personal information. Limited data may be shared with trusted third parties, including:

• Firebase: For push notifications
• Authorized school staff: Access to necessary user information only
• School-provided APIs: Used to securely transmit staff and student records between the school’s system and the app

7. Data Security

• HTTPS encryption for data in transit
• Secure authentication tokens
• Access control and restricted permissions
• Sensitive data encrypted on device via FlutterSecureStorage

While we strive to secure your data, no system is 100% secure.

8. User Rights

• Request correction or deletion of data (via school administration)
• Deactivate their account
• Contact us for any privacy concerns

9. Data Retention

Data is retained only as long as necessary for educational, legal, and administrative purposes. When no longer needed, data is securely deleted.

10. Data Deletion Requests

To request deletion of your personal data, visit: Data Deleting Page

• Provide your username, school code, and reason for deletion
• Requests are reviewed and processed within 7 working days

This complies with GDPR and Google Play data deletion requirements.

11. Updates and Contact

We may update this privacy policy periodically. Users will be notified of significant changes.