Privacy Policy

1. Overview & Applicability

This Privacy Policy describes how Planmyschool Inc. ("PlanMySchool", "we", "us", or "our") collects, uses, stores, and protects personal information obtained from users ("you", "User", "School Administrator", "Teacher", "Parent", or "Student") when utilizing:

• The PlanMySchool Android Application (Package identifier: com.planmyschool.app) available on Google Play.
• The PlanMySchool iOS Application available on the Apple App Store.
• The PlanMySchool Web Portal & Cloud ERP hosted at https://planmyschool.in.

By downloading, installing, registering, or using our mobile application or web portal, you agree to the practices outlined in this Privacy Policy. If you do not agree, please refrain from using the platform.

2. Information We Collect

We collect information strictly necessary to provide school enterprise management, academic learning management (LMS), real-time safety tracking, and parent-teacher communication services.

A. Information Provided by Educational Institutions & Users

• Student Profiles: Full name, student roll number, admission number, class/section, date of birth, gender, blood group, emergency contact details, and enrolled courses.
• Parent / Guardian Information: Parent name, relationship to student, mobile phone number, email address, and residential address.
• Teacher & Staff Information: Name, professional email address, mobile number, designated subjects, employee identification ID, and staff attendance logs.
• Academic Records: Homework submissions, exam grades, attendance logs, report cards, class timetables, and teacher feedback comments.
• Fee & Payment Transaction Details: Fee invoices, installment schedules, and payment confirmation IDs generated through authorized banking gateways. (Note: PlanMySchool does not store raw credit card numbers or banking passwords).

B. Information Collected Automatically Through the Mobile App

• Device & Hardware Identifiers: Device model, operating system version, unique device identifiers (Android ID), network operator, and push notification tokens (Firebase FCM token).
• Log & Diagnostic Data: App crash reports, load times, system performance metrics, and application interaction logs to diagnose faults and improve app stability.

C. Location & Transit Data (School Bus GPS Tracking)

For student transit safety, the app provides real-time school bus tracking. Location data is processed as follows:

• Driver / Transport Device: Precise GPS coordinates (latitude, longitude, speed, heading) are collected continuously during designated school transit hours to show the bus location to authorized parents and school administration.
• Parent / Student Device: Approximate location may only be requested with permission to show the parent's proximity to the incoming school bus stop. Location is never tracked in the background for parents or students.

3. Device Permissions & Hardware Access

When you install and use the PlanMySchool Android mobile application (com.planmyschool.app), the app may request specific system permissions to enable critical features:

4. How We Use Collected Information

All data collected is used strictly for legitimate educational, administrative, and safety purposes:

5. Third-Party Services & Google SDK Disclosures

Our application integrates reliable, industry-standard third-party SDKs to facilitate essential functionalities such as cloud hosting, push notifications, map rendering, and diagnostics. These third-party providers process data under strict data protection terms:

• Google Play Services: Core Android system services providing authentication, app integrity, and Google Play billing mechanisms.
  Privacy Policy: https://policies.google.com/privacy
• Firebase Cloud Messaging (FCM): Delivers instant push notification alerts to parents and teachers regarding daily homework, bus arrival, fees, and circulars.
  Firebase Privacy: https://firebase.google.com/support/privacy
• Firebase Crashlytics & Analytics: Aggregates anonymized diagnostic crash logs to help our engineering team fix software defects and optimize performance.
• Google Maps API: Renders route navigation and displays live vehicle positions for the school transport safety module.
  Google Maps Privacy: https://cloud.google.com/maps-platform/terms
• Cloud Infrastructure (AWS / Google Cloud): All customer records are hosted in SOC 2 and ISO 27001 certified data centers with 256-bit AES database encryption.

6. Data Sharing & Disclosure Principles

We never sell, rent, monetize, or trade student, parent, or institutional data to any commercial advertisers or data brokers.

Data is shared solely under the following limited circumstances:

1. With Your Enrolled School: Data is accessible to designated administrators, principals, and teachers of the school where the student is currently enrolled.
2. With Authorized Service Providers: Trusted cloud infrastructure and SMS/Email gateway providers who assist in operating our services under binding non-disclosure and security agreements.
3. Legal & Regulatory Compliance: If required by applicable law, court order, or governmental authorities to comply with legitimate legal obligations.

7. Data Security & Storage Practices

We employ robust administrative, technical, and physical safeguards to prevent unauthorized access, alteration, disclosure, or destruction of user data:

• 256-Bit SSL/TLS Encryption: All data transmitted between the mobile application, web portal, and backend servers is encrypted using modern TLS 1.3 / HTTPS encryption protocols.
• Data at Rest Encryption: Databases and file storage repositories are encrypted using AES-256 standards.
• Role-Based Access Control (RBAC): Strict role separation ensures that parents only view their own children's records, teachers only access assigned classrooms, and administrative tools require multi-factor authorization.
• Continuous Monitoring & Backups: Automated daily backups and real-time vulnerability monitoring to guarantee high data availability and business continuity.

8. Children & Student Privacy Compliance

Protecting the privacy of children and minor students is of paramount importance to PlanMySchool. We comply with international student data protection standards, including the principles of the Children's Online Privacy Protection Act (COPPA), FERPA, and India's Digital Personal Data Protection (DPDP) Act:

• Student accounts are created, provisioned, and managed either directly by authorized school administrators or by verified parents/guardians.
• We do not solicit personal information directly from children without parental or institutional consent.
• We do not create advertising profiles or engage in behavioral tracking of children.
• Parents and legal guardians retain the right to review, update, or request deletion of their child's educational records through their school administration or by contacting us.

9. Data Retention Policy

PlanMySchool retains personal information for the duration of the student's active enrollment at the participating educational institution or as long as the school maintains an active subscription agreement with us.

Upon graduation, student withdrawal, or termination of the institutional contract, student records are archived or permanently deleted in accordance with the school's retention schedules and legal recordkeeping mandates.

10. User Rights, Account Deletion & Data Deletion Policy

In accordance with Google Play Developer Policies and data protection regulations, users have complete control over their personal data.

11. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements in our app capabilities, regulatory updates, or changes in data processing practices. When updates occur, we will update the "Last Updated" date at the top of this policy.

For substantial changes, we will notify users through an in-app alert or banner notification prior to the change becoming effective. We encourage you to review this page periodically to stay informed about how we protect your information.

12. Contact Information & Grievance Officer

If you have questions, concerns, feedback, or grievance complaints regarding this Privacy Policy or our data handling practices, please reach out to our dedicated Privacy & Data Protection team: