Privacy Policy

1. WHAT DATA WE COLLECT

We only collect information that is necessary for SchoolMode to function.

1.1 Personal Information

• Name
• Email address
• Phone number (optional, used for identity verification & school contact)
• User IDs (Firebase UID, SchoolID, ClassID)

1.2 App Activity

• QR check-in and check-out events
• Kiosk mode status (device locked/unlocked)
• Geofence exit events
• Security states (e.g., guided access/pinning status)
• Timestamp of activity

This information is used for school attendance, classroom check-ins, and security enforcement.

1.3 Location Data

• Approximate and precise location may be temporarily accessed on the device only for geofencing.
• This data is not stored, not logged, and not transmitted to our servers.
• It is used only to detect when a student leaves the authorized school area so that SchoolMode can unlock automatically.

1.4 Device Identifiers

• Firebase installation ID (Used for authentication, connection, and security)

2. HOW WE USE YOUR DATA

We use collected information strictly for:

• Enforcing school focus mode (kiosk mode)
• Attendance verification and student check-in/out
• Security and anti-tampering detection
• Geofence auto-unlock when leaving school areas
• Communication between school administration and users
• Maintaining the integrity and operation of the App

We do not use your data for advertising, analytics, or profiling.

4. HOW DATA IS STORED

The following is stored securely in Google Firebase (EU Servers):

• User profile (name, email, phone number if provided)
• User ID and school/class association
• Attendance events and kiosk activity logs

All communication between the App and Firebase is encrypted using TLS 1.3.

Location data is never stored, never logged, and never transmitted.

5. HOW WE SHARE DATA

We do not share your data with:

• Advertisers
• Third-party data brokers
• Marketing platforms
• Analytics tools
• Social networks

Data is only visible to:

• The school administration connected to the account
• The user’s assigned teachers
• SapianAI SL (infrastructure maintenance only)

We never sell personal information.

6. LEGAL BASIS FOR PROCESSING (GDPR – EU)

As a company operating in the EU, SchoolMode complies with GDPR. We process personal data under the following lawful bases:

• Contractual necessity: to provide SchoolMode services.
• Legitimate interest: ensuring school safety and academic focus.
• Consent: for optional data such as phone number.
• Public interest: in education (when applicable through the school).

7. HOW TO REQUEST DATA DELETION

Users can request deletion of their SchoolMode data at any time.

8. CHILDREN’S PRIVACY

SchoolMode is used in a school environment and may collect personal data from children under 16.

• All processing is done under contract with the school, in compliance with GDPR Article 8.
• We do not show ads, conduct profiling, or track behavior.

9. DATA RETENTION

We store personal data only as long as required for:

• School attendance records
• Academic compliance
• Safety investigations (if required by the school)

When data is no longer needed or upon request, it is permanently deleted. Location data is not retained at all.

10. SECURITY MEASURES

We employ industry-standard security:

• End-to-end HTTPS encryption
• Strict Firebase Security Rules
• Role-based access control (RBAC)
• Anti-tampering and device integrity checks
• Regular security audits

No method of transmission is 100% secure, but we take appropriate measures to protect user data.

11. INTERNATIONAL TRANSFERS

Data is stored within the European Union whenever possible. If transfer outside the EU occurs (e.g., Google Cloud backup), it is done under GDPR-approved safeguards such as SCCs.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy. Changes will be posted at:
https://schoolmode.app/privacy-policy