Privacy Policy

Data We Collect

• User account data (name, email, phone, school, role)
• Student learning data (scores, quizzes, rankings, progress)
• Guardian and teacher account relationships
• Uploaded content (notes, exams, PDFs, videos, assignments)
• Payment and transaction records
• Device and usage data (IP address, device type, OS version)
• Push notification tokens (FCM device tokens) collected via Firebase Cloud Messaging to deliver push notifications to your device
• Analytics data (page views, feature usage, session duration)
• Cookies and similar tracking technologies — see our Cookie Policy

App Permissions

The 25schools mobile app may request the following device permissions:

• Notifications: To send push notifications about new assessments, quiz results, and announcements (via Firebase Cloud Messaging)
• Storage / Media: To allow uploading of study materials, PDFs, and assignment files
• Internet: Required for all platform features

All permissions are optional where technically possible. You can manage permissions in your device settings at any time.

How We Use Data

• Provide educational services and improve user experience
• Run quizzes, competitions, and learning tools
• Power leaderboards and rankings
• Enable guardian monitoring features
• Process digital store transactions
• Deliver push notifications to your device
• Improve platform performance and security
• Detect cheating, fraud, or abuse
• Provide recommendations and personalisation
• Comply with legal obligations

Data Storage & Location

Your data is stored on servers located in the United States, hosted via Heroku (Salesforce) and Amazon Web Services (AWS). By using our platform, you consent to this transfer and storage. We take reasonable steps to ensure your data is treated securely in accordance with this Privacy Policy.

If you are located in the European Economic Area (EEA), your data may be transferred to and processed in countries outside the EEA. In such cases, we ensure appropriate safeguards are in place.

Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

• Active account data: Retained for the lifetime of your account
• Account data after deletion request: Deleted within 30 days, except where legal retention is required
• Usage logs and analytics: 90 days
• Payment and transaction records: 7 years (legal/tax requirement)
• Push notification tokens (FCM): Deleted immediately when you log out or uninstall the app
• Uploaded content: Retained until you delete it or your account is closed
• Backup copies: May persist for up to 90 days after deletion

Leaderboards & Visibility Control

• Students may choose whether to appear on leaderboards
• Users control whether their profile is public or private

Guardian Linking System

• Guardians may request access to student accounts
• Students must approve requests before access is granted
• Students may revoke access at any time
• Guardians can view learning progress where permitted

User Content Ownership

• Users retain ownership of uploaded content
• By uploading, users grant 25SCHOOLS a worldwide, royalty-free, non-exclusive licence to store, display, and distribute content within the platform
• Content may be removed for violations or legal reasons

Advertising & Analytics

• We may use third-party analytics tools (e.g. Google Analytics) to understand platform usage
• Ads may be personalised based on usage only with your explicit consent, which you can withdraw at any time
• We do not sell personal data to third parties
• We do not serve behavioural advertising to users identified as children under 13

Children's Privacy (COPPA)

• The platform is designed for learners, including children under 13
• We do not knowingly collect personal information from children under 13 without verifiable parental consent
• Parental/guardian consent is obtained through our Guardian Linking System — a parent or guardian must link to the child's account before the child can access certain features
• We do not use children's data for behavioural advertising
• Extra privacy safeguards are applied to all student accounts
• Parents may review, correct, or request deletion of their child's data at any time by contacting us at 25schoolsinfo@gmail.com
• See our Parental Consent Policy for full details

Data Security

• We use reasonable technical and organisational safeguards including HTTPS encryption
• No system is 100% secure; users share responsibility for account security
• See our Security Policy for full details

Account Deletion & User Rights

• Users may request deletion of accounts and data at any time
• Some data may be retained for legal, security, or business reasons as noted in the Data Retention section above
• You have the right to: access your data, correct inaccuracies, restrict processing, request portability, and lodge a complaint with a supervisory authority
• EU/EEA users have additional rights under GDPR. Contact us to exercise any of these rights.