Privacy Policy

Who is responsible

Gaussian Kamil School decides what is recorded in this app and why, so the school is the party answerable for it under Indonesian personal data protection law. The school can be reached at [contact email], or at [school address].

What is recorded

About a child:

• Their full name, the shorter name teachers and parents actually use, and the class they are in.
• Their date of birth, if the school has recorded one. It is optional and nothing in the app depends on it.
• A daily report for each school day a teacher writes one: a mood, a note in the teacher's words, and any photos attached to it.
• A weekly note, and school notices addressed to them, their class, or everybody.
• Whether their family has opened each report and notice, and when.

About a parent or guardian:

• Their name, their email address, and a phone number if they gave one.
• Which children they are linked to, and how they are related to each.
• Any comments they write on a report.

About a teacher or administrator:

• Their name as families see it, their email address, and which classes they cover.
• A record of what they wrote and when, including changes made to a report after it was sent.

Kept about the account itself, not the person:

• An encrypted form of the password. It is stored so that nobody, including the school office, can read the password itself.
• Failed sign-in attempts against an email address, with the address, the network address they came from, and the time. These are used only to stop somebody guessing passwords, and are cleared once the right password arrives.
• A sign-in session that lasts thirty days unless signed out sooner.

There is no analytics, no advertising, and no third-party tracking of any kind in this app. Nothing records which pages a family reads except the read receipt on a report, which exists so a teacher knows whether their message arrived.

Why it is recorded

• To tell a family about their child's day, which is what the app is for.
• To let a family reply to the teacher about it.
• To let the school see that reports are actually reaching families.
• To keep the accounts secure and to know who wrote what.

The school records this because a family and a school need to communicate about a child in their shared care. If the school relies on consent for any part of it, notably photographs, that consent is asked for separately and can be withdrawn.

Who can see it

• A child's reports, photos and notes are visible to the guardians linked to that child, and to nobody else's family.
• Teachers see the children in the classes they are assigned to. A teacher given school-wide reach sees every class.
• School administrators can see the roster and the accounts, and can read what has been sent.
• Nothing in this app is public. There is no page that can be opened without signing in.

Photographs

Photographs are the most sensitive thing this app holds, so they are handled separately from everything else.

• They are stored privately. There is no address that opens a photo without signing in first, and a link copied out of the app will not work for anybody else.
• Every request for a photo is checked against the session asking for it, and a photo belonging to another family reads as missing rather than refused.
• Photos are resized on the teacher's own device before they are uploaded, and the original stays on that device.
• A photo of one child may incidentally include another. Families may not republish photos from this app anywhere else; see the Terms of Service.

Email

Everything a family is told inside the app is also emailed to the address on file. Those emails name the child, carry the first part of what the teacher wrote, and link back to the app. They are sent through [email provider], which handles them on the school's behalf and does not use them for anything of its own.

Where it is stored

The database and the photographs are held by [hosting provider and country]. They process this data only to run the service for the school. No other company receives it.

How long it is kept

Reports, photographs and comments about a child are kept for [retention period]. When a child leaves the school, their record is [what happens on leaving]. An account that is turned off keeps the reports and comments its owner wrote, because those are part of another person's record, but the person can no longer sign in.

What a family can ask for

Under Indonesian personal data protection law, a parent or guardian may ask the school to:

• Show them everything recorded about their child, and give them a copy.
• Correct anything that is wrong.
• Delete something, or stop a particular use of it, where the law allows.
• Withdraw a consent that was given, such as consent to photographs.
• Explain how a decision affecting their child was reached.

Ask at [contact email]. The school answers within [response time]. If the answer is unsatisfactory, a complaint can be taken to the supervisory authority for personal data protection in Indonesia.

Keeping it safe

• Passwords are stored in a form they cannot be recovered from, and are never visible to the school office. A member of staff creating an account never sees or chooses somebody else's password.
• Repeated wrong passwords against an address are refused for a while, so a stolen password list cannot be tried at speed.
• Changing a password signs that person out everywhere else.
• Every page checks who is asking before it answers, on the server, on every request.

Children

This app holds information about children, but children do not have accounts in it and are not asked for anything. Every account belongs to an adult: a parent or guardian, a teacher, or a member of the school office.

Changes

If this policy changes in a way that affects what is recorded or who can see it, the school tells families before the change takes effect, through a notice in the app and by email. The date at the top of this page always shows when it last changed.