Google Play & Apple Store Compliance

Privacy Policy & User Data Transparency

Effective Date: November 10, 2026 • Version 2.1

1. Scope & Application

This Privacy Policy applies to the Mansehra Islamic Academy Mobile Application (Android package: com.school.clientapp, iOS bundle: com.mansehra.mpsc) and its associated cloud portals operated by Softwareing (softwareing.org) on behalf of Mansehra Islamic Academy School & College (“we”, “us”, “our”).

This policy explains how we collect, handle, store, and safeguard personal, academic, and device information across Teacher, Student, Parent, and Administrative portals.

2. Information We Collect and Receive

We only collect data strictly necessary to provide school administration, academic tracking, communication, and fee reconciliation services:

  • Personal & Identity Data: Full name, institutional username, email address, phone number, gender, date of birth, residential address, father/guardian name, class, section, roll number, and admission registration records.
  • Academic & School Activity Records: Daily student attendance (present, absent, late, leave), exam marks, quiz submissions, report cards, teacher diary notes, homework assignments, and leave requests with supporting reasons.
  • Financial & Fee Data: Fee voucher identifiers, invoice status (paid, pending, overdue), tuition amounts, payment dates, bank deposit references, and photo images of bank deposit slips / payment receipts uploaded by parents. We do not collect or store raw credit/debit card numbers or bank PINs.
  • Communications & Messaging: In-app direct messages exchanged between teachers, parents, and students relating to academic support, discipline, and student welfare.
  • Device & Technical Information: Device model, operating system version, unique device identifiers, IP address, connection status, and Firebase Cloud Messaging (FCM) registration tokens used solely for push notification routing.

3. Sensitive Device Permissions & Hardware Disclosures

In compliance with Google Play Store User Data and Device Permissions policies, the application requests the following runtime permissions strictly on an on-demand, user-initiated basis:

Camera Access (android.permission.CAMERA / NSCameraUsageDescription)

Why requested: (1) Allows teachers to snap photos of physical paper exams or quiz answer sheets for automated AI-assisted optical grading; (2) Allows parents to capture physical bank deposit receipts for school fee verification; (3) Allows users to take profile pictures.
The app never accesses your camera in the background or without explicit user tapping.

Photo Library / Media Storage (READ_MEDIA_IMAGES / NSPhotoLibraryUsageDescription)

Why requested: Enables users to select existing photos of bank payment receipts or avatars from their device gallery. The app does not inspect, read, or catalog any other media files on your device.

Push Notifications (POST_NOTIFICATIONS)

Why requested: Delivers essential institutional alerts to parents and teachers, including daily attendance statuses, emergency school closure alerts, new fee vouchers, and direct teacher messages.

4. How We Use Collected Information

  • Providing real-time attendance logs to parents regarding student safety.
  • Publishing and calculating term grades, report cards, and academic progress.
  • Processing fee invoices and verifying bank deposit receipts.
  • Facilitating teacher grading workflows using OCR assistance.
  • Enabling direct communication between faculty, parents, and enrolled students.
  • Maintaining institutional security, preventing unauthorized access, and authenticating user roles.

5. Third-Party Sharing & Disclosures

We strictly DO NOT sell, rent, monetize, or trade your personal data or student records with third-party advertisers or data brokers under any circumstances.

We only share data with vetted infrastructure partners who operate under strict confidentiality agreements solely to deliver the service:

  • Google Firebase (Google LLC): Used for secure push notification delivery (Firebase Cloud Messaging) and crash diagnostics.
  • Cloud Infrastructure (AWS / Contabo / DigitalOcean): Highly secure, ISO-certified data centers hosting encrypted application servers and databases with TLS 1.3 encryption.
  • Google Gemini API (Google LLC): Utilized server-side strictly for optical character recognition and teacher grading assistance. Answer sheet data is processed ephemerally and is not retained or used by Google to train public artificial intelligence models.
  • Legal & Child Safety Authorities: If compelled by valid legal process or court order, or to prevent immediate physical harm or child endangerment.

6. Children's Privacy (COPPA & Google Play Families Policy)

As an educational platform serving K-12 students, Mansehra Islamic Academy complies strictly with the Children's Online Privacy Protection Act (COPPA), GDPR-K, and Google Play Families Policies:

  • Student accounts are provisioned exclusively by authorized school administrators or with direct parent/guardian enrollment consent.
  • We never serve behavioral advertising, personalized marketing, or third-party ad networks to minors.
  • Parents and legal guardians have the absolute right to review, request corrections, or request deletion of their child's personal and academic records at any time.

7. Data Retention & Account Deletion Rights

We retain student and parent records for the duration of the student's active enrollment, plus any statutory retention periods required by the Khyber Pakhtunkhwa Education Department or regional examination boards for official academic transcripts.

How to Request Account & Data Deletion:

In compliance with Google Play and Apple Store account deletion mandates, users can request complete deletion of their account credentials and personal data through either of the following methods:

  1. In-App: Navigate to Profile / Settings → Request Account Deletion in the mobile app.
  2. Direct Email: Send an email from your registered address to admin@softwareing.org with the subject line Account Deletion Request, stating your name, student roll number, and school branch.

Verified requests will result in permanent deletion or irreversible anonymization of your login credentials, device tokens, and stored media within 30 days.

8. Security Safeguards

All data transmission between the mobile application, web portals, and backend servers is encrypted using industry-standard TLS 1.3 / HTTPS protocols. Sensitive authentication credentials and session tokens are encrypted at rest using salted cryptographic hashing. Strict Role-Based Access Control (RBAC) ensures teachers only access their assigned classes, and parents can only access records belonging to their verified children.

9. Contact Information & Data Protection Officer

For questions regarding this policy, privacy practices, or data deletion inquiries, please reach out to our team:

Institution: Mansehra Islamic Academy School & College

Platform Provider: Softwareing (softwareing.org)

Data Protection Officer: Ahsan Ali (admin@softwareing.org)

Direct Helpline: +92 333 5082651 / +92 318 0419419

Campus Address: Faizabad, Mansehra, Khyber Pakhtunkhwa, Pakistan