Privacy Policy

Introduction

Trust is built on reliability. We understand that schools handle sensitive data—from grades to financial records. This policy outlines how we protect that information and ensures transparency in our data processing.

1. Information We Collect

We collect information necessary to manage your school environment efficiently:

• Student Data: Names, attendance records, grades, and assessment scores.
• Financial Data: Fee payment history, outstanding balances, and school expense records.
• Staff Information: Profiles for teachers, bursars, and administrators to facilitate role-based access.
• Parent/Guardian Information: Profiles for parents and guardians.

2. How We Use Your Data

Your data is used strictly for school operations and platform functionality:

• Operational Management: To generate report cards, transcripts, and financial invoices.
• Data Syncing: To synchronize data between the Femlify Mobile App and the cloud.
• Access Control: To ensure data isolation between parents, students, and staff.

3. Data Processing Agreement (DPA)

This section serves as the formal agreement between Femlify (Processor) and the School (Controller) regarding the processing of personal data.

3.1 Scope and Role

Femlify processes personal data only on behalf of and under the instructions of the School. The School maintains full ownership and control over the data uploaded to the platform.

3.2 Processor Obligations

We agree to:

• Confidentiality: Ensure that all personnel authorized to process data are committed to confidentiality.
• Sub-processors: Only use trusted infrastructure providers (e.g., AWS, Google Cloud) to host data. We will notify the School of any significant changes to our sub-processor list.
• Security Measures: Implement technical and organizational measures to ensure a level of security appropriate to the risk, including encryption and isolated database environments.

3.3 Incident Notification

In the event of a data breach, Femlify will notify the affected School without undue delay after becoming aware of the breach, providing detailed information to assist the School in meeting its own notification obligations.

4. Data Security & Isolation

We prioritize the integrity of your institutional data through several layers of protection:

Data Isolation: Each school’s data is private and isolated. We use secure cloud infrastructure to prevent "data commingling," ensuring your records never mix with another institution's.

• Backups: We perform regular, automated backups to prevent data loss.
• Physical Security: For schools using our NFC-enabled ID cards, we process verification data to ensure authorized student pickup.

5. Data Retention & Deletion

• Individual Record Deletion: Administrators can delete specific records directly through the dashboard.
• Account Closure: Upon contract termination, we will purge all institutional data within 30 days of a verified request.
• Legal Obligations: We may retain financial transaction logs for the period required by local tax and regulatory laws.

6. Your Rights

The School, as the Data Controller, has the right to access, correct, or export their data at any time via the Femlify dashboard.