Privacy Policy

Your privacy and the privacy of your students matter. This policy explains in plain language what data SchoolTrack stores, where it lives, how long it's kept, and who can see it.

1. What We Store

When you use SchoolTrack, the following data is stored in your school's private Firebase database:

• Administrator account information (name, school name, email; your password is handled by Firebase Authentication and is never stored in plain text by Firebase Auth)
• Student records (names, dates of birth, contact details, enrollment status)
• Academic records (grades, attendance, Hifz progress, behavioral notes)
• Teacher and parent account records for your school, so they can log in from their own devices
• Messages and announcements you create

Passwords: all logins (admin, teacher, and parent) are handled by Firebase Authentication. Passwords are never stored in your school's records — not even by the admin. The initial password is shown to the admin once at account creation for sharing; after that, the only way to change a password is a secure reset email.

2. Where It's Stored and For How Long

• Google Firebase (Firestore + Firebase Authentication) — the primary copy of your data, hosted on Google Cloud in the United States. It stays there until you delete it. We use Firebase's free tier; there is no paid data-processing arrangement beyond Google's standard Firebase terms.
• Your browser (localStorage) — a working copy is cached on each device you log in from, for speed and offline resilience. It persists until you log out, clear browser data, or use Reset All Data.
• Backups you export — the Export feature downloads files to your device; those copies are entirely under your control.

3. Who Can See Your Data

• Your school's admin account has full access.
• Teachers you add can see and edit records only for the classes assigned to them, enforced by server-side security rules.
• Parents you add have read-only Parent Portal access scoped to the classes their own children attend.
• Google processes the data as our hosting provider (see Firebase Privacy).
• We do not sell data, run ads, or share data with any other third party.

4. Email Delivery

If you configure the optional email feature, messages are sent through EmailJS using your own EmailJS account. Recipient email addresses and message contents pass through EmailJS's servers when you send a message. This is optional and off by default.

5. Online Payments (Stripe)

If your school enables online tuition payments, invoice amounts, descriptions, and due dates are shared with Stripe to generate a checkout session. When a parent pays, Stripe collects and stores their card details directly — SchoolTrack never sees or stores card numbers. We receive only confirmation that a specific invoice was paid, which we record against your school's billing records. See Stripe's Privacy Policy for how Stripe handles payer information.

6. Student Data and Privacy Laws

As the school administrator, you are responsible for ensuring your use of SchoolTrack complies with student privacy laws in your jurisdiction (such as FERPA and COPPA in the US, or GDPR in the EU).

⚠️ Before onboarding a real school, have a qualified lawyer review this policy and your obligations. In particular: FERPA/COPPA compliance for US schools, whether you need parental consent to store children's records in Firebase, data-residency requirements (Firestore data is hosted in the US), and whether your school requires a formal Data Processing Agreement. SchoolTrack is an early-stage product and this policy is not legal advice.

7. Cookies and Tracking

SchoolTrack does not use advertising cookies, analytics trackers, or third-party ad scripts. Firebase Authentication stores a login token on your device so you stay signed in. If your school enables online payments, Stripe's checkout page may set its own cookies while you're on stripe.com — that's controlled by Stripe, not SchoolTrack.

8. Data Security

• All traffic between your browser and Firebase is encrypted with HTTPS/TLS.
• Data in Firestore is encrypted at rest by Google.
• All logins — admin, teacher, and parent — are protected by Firebase Authentication.
• Firestore security rules restrict every read and write to authenticated members of your school; parent accounts are read-only.
• Card payments are handled entirely on Stripe's PCI-compliant infrastructure; SchoolTrack's servers never receive or store card details.
• Keep your devices updated, use strong passwords, and log out on shared devices.

9. Data Deletion

You can permanently delete your school's data at any time from Settings → Reset All Data inside the app, which clears both your device cache and your Firebase records. To delete your admin login account entirely, contact us and we'll remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top reflects the last revision. Continued use of SchoolTrack after changes take effect constitutes acceptance of the revised policy.

11. Contact

If you have questions or concerns about your privacy, please contact us.