Privacy Policy

TBZ School and FM College, Noor Shah ("we", "us", "our") operates the TBZ School mobile application ("App") for students, parents, teachers, and staff. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

Information you provide

• Account information: username, password (encrypted), full name, admission number, role (student / parent / teacher / staff), class and section.
• Profile information: profile photo, contact phone, address, parent or guardian details.
• Academic records: attendance, exam results, assignments, homework, fee payments, behaviour records, library transactions.
• Communications: messages, comments, and support requests sent through the App.
• Uploaded content: homework submissions, photos, documents, audio, and video files.

Information collected automatically

• Device information: device model, operating system version, App version.
• Push notification token (Firebase Cloud Messaging) used to deliver notifications.
• Login session tokens used to keep you signed in securely.
• Diagnostic data such as crash reports and error logs to help us improve the App.

Information from your school: Class assignments, timetables, fee structure, exam schedules, syllabus, and other records provided by the school administration.

2. How We Use Your Information

• Authenticate your identity and let you log in.
• Display academic progress, attendance, fees, and other school records.
• Deliver push notifications about classes, exams, homework, fee reminders, and announcements.
• Process fee payments through third-party payment gateways (where enabled).
• Enable communication between teachers, parents, and students.
• Maintain security and prevent fraud or misuse.
• Comply with legal obligations and school policies.

3. Sharing of Information

We do not sell your personal information. We share data only with:

• Authorised school staff and administrators of TBZ School and FM College, who view records relevant to their role.
• Parents or guardians linked to a student account.
• Service providers that help us operate the App, under contracts that require them to protect your data — including Google Firebase (push notifications, crash reporting), our cloud hosting provider, and payment gateways (only where you make a payment).
• Law enforcement or regulators when required by law, court order, or to protect the safety of users.

4. Permissions Used by the App

The App requests the following device permissions:

• Camera — to capture profile photos and homework submissions.
• Storage and Photos — to upload assignments, documents, and images.
• Notifications — to deliver important school announcements.
• Internet — to communicate with the school's server.

You can grant or revoke any of these permissions at any time in your device settings. Some App features may not work if a required permission is denied.

5. Data Retention

We keep your information for as long as your account is active and for a reasonable period afterwards to comply with school recordkeeping requirements and applicable law. You may request deletion of your account using the contact details in Section 10.

6. Children's Privacy

The App is used by school-age children, including those under 13. We collect children's data only with the consent of their parent or guardian and the school administration. Parents may:

• Review the personal information held about their child.
• Request correction or deletion of their child's information.
• Withdraw consent for further processing (this may limit the child's ability to use the App).

7. Security

We protect your information using HTTPS / TLS encryption for all data transmitted between the App and our servers, encrypted password storage, role-based access controls, and regular security updates. No method of transmission or storage is 100% secure; if a data breach occurs we will notify affected users and the relevant authorities as required by law.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent for non-essential processing (for example, disabling push notifications in your device settings).
• Lodge a complaint with the relevant data-protection authority.

9. Third-Party Services

The App may link to or open third-party services such as Zoom, Google Meet, YouTube, or payment gateways. Their privacy practices are governed by their own policies. Please review them separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. Continued use of the App after an update means you accept the revised policy.