Privacy Policy & Student Data Protection

Last updated: August 2026 • TODO: Lawyer Review

1. Protection of Student PII

Student personal information (names, admission numbers, guardian phone numbers, and photos) is stored with strict multi-tenant isolation. We never sell, rent, or monetize student or parent data.

2. Technical & Cryptographic Safeguards

All data in transit is encrypted using TLS 1.3. Student passwords and refresh tokens are cryptographically hashed at rest using Bcrypt and SHA-256 algorithms.

3. Third-Party Subprocessors

We use PayHere (Payment Gateway) and local Telco providers strictly for processing parent fee payments and delivering automated SMS notifications.