Privacy Policy

Mahmud International School (MIS Rupahi) • App ID: com.misrupahi.school• Last updated: October 31, 2026

1. Institutional Identity & Scope

Welcome to the official Mahmud International School (MIS Rupahi) Portal and Mobile Application (Package ID: com.misrupahi.school), operated by the Mahmud Educational Foundation, Rupahi, Nagaon, Assam 782125.

We are deeply dedicated to safeguarding the personal, academic, and sensitive data of our school administrators, teachers, staff, students, and parent community in accordance with the Digital Personal Data Protection (DPDP) Act of India (2023) and international educational data governance standards.

2. Information We Collect

To provide institutional management, student tracking, and digital report cards, we collect and process the following categories of information:

Student & Parent Identity: Full legal names, dates of birth, enrollment numbers, class sections, parent/guardian phone numbers, residential addresses, and emergency contacts.
Academic Records: Examination grades, progress cards, daily homework assignments, period attendance logs, and teacher remarks.
Financial Transactions: Fee ledger allocations, digital receipt generation timestamps, payment reference numbers, and staff payroll records.
Mobile Device Identifiers & Push Tokens: Firebase Cloud Messaging (FCM) registration tokens and operating system versions strictly used to deliver school circulars and homework alerts.
Attendance Geolocation (Staff Only): Approximate or precise GPS location accessed exclusively during faculty check-in to verify on-campus presence (geofencing). Location is never tracked continuously in the background.

3. Children's Privacy & Minor Protection (COPPA / DPDP Act)

Protection of Minor Students (Ages 4–18)

Because Mahmud International School provides education to children under 18 years of age, student accounts are strictly provisioned and supervised by the school administration and authorized parents/legal guardians:

We do NOT collect personal information directly from minor children for commercial purposes.
We do NOT serve third-party advertisements or behavioral marketing tracking.
All educational profile data is managed exclusively under institutional parental consent provided during school admission.
Parents retain the legal right to review, update, or request the deletion of their child's digital account at any time.

4. Mobile App Permissions & Hardware Usage

Push Notifications (POST_NOTIFICATIONS)

Used solely to alert parents and students regarding daily homework postings, urgent circulars, fee due reminders, and severe weather school closure notices.

Campus Geofencing (Attendance)

Used exclusively when staff record attendance to verify physical presence on the school campus. The app never gathers background location while inactive.

5. Data Protection Safeguards

We implement comprehensive technical and organizational measures to protect academic data:

Row Level Security (RLS): Granular PostgreSQL security policies ensure that parents can only inspect their own linked children's records.
In-Transit Encryption: All communications between the mobile app, website, and Supabase servers are encrypted using TLS 1.3 / HTTPS.
No Data Brokering: We do not sell, rent, or trade student, parent, or employee information to external data aggregators or advertisers under any circumstances.

6. Account & Data Deletion Policy

Users have the right to request deletion of their mobile app account, device tokens, and digital profile. You can initiate this request immediately via our dedicated online portal:

Request Digital Account Deletion

Submit an online request to delete your app account and device tokens.

Account Deletion Page

7. Data Protection Officer Contact

For privacy inquiries, parental consent verification, or grievance redressal, please reach our administrative team:

mahmudedufoundation@gmail.com

Mahmud Educational Foundation, Rupahi, Nagaon, Assam 782125

1. Institutional Identity & Scope

2. Information We Collect

To provide institutional management, student tracking, and digital report cards, we collect and process the following categories of information:

Student & Parent Identity: Full legal names, dates of birth, enrollment numbers, class sections, parent/guardian phone numbers, residential addresses, and emergency contacts.

Academic Records: Examination grades, progress cards, daily homework assignments, period attendance logs, and teacher remarks.

Financial Transactions: Fee ledger allocations, digital receipt generation timestamps, payment reference numbers, and staff payroll records.

Mobile Device Identifiers & Push Tokens: Firebase Cloud Messaging (FCM) registration tokens and operating system versions strictly used to deliver school circulars and homework alerts.

Attendance Geolocation (Staff Only): Approximate or precise GPS location accessed exclusively during faculty check-in to verify on-campus presence (geofencing). Location is never tracked continuously in the background.