Privacy

This policy covers the Edopia app and website at https://lms.edopia.org, used by the families and staff of Edopia micro school in Islamabad, Pakistan across its Bani Gala and I-8 campuses. The school is responsible for the information in it.

Accounts are created by the school. There is no public sign-up: you cannot register yourself, and downloading the app does not give anyone access to anything. If your family is not part of the school, the app holds no information about you.

Everything below is collected so the app can do its job. None of it is used for advertising, profiling, or tracking.

Your account

Name and email address, the role the school gave you, and which children you are linked to. This is how you sign in and how the app knows what to show you.

School work

Assignments, submitted work, uploaded files and documents, teacher feedback, progress records, and portfolio evidence. This is the substance of the product.

Photos and video

Pictures you attach to work, requests or school records, and photographs staff take of moments at school. The camera and photo library are used only when you choose to attach something.

Audio

Voice recordings students make for reading tasks, and voice notes teachers record as feedback. The microphone is used only while you are recording.

School records

Attendance, timetable, report cards, support or wellbeing notes kept by staff, and the physical activity records the school's trainers keep.

Messages to the school

Help Desk requests and replies between a family and the school office.

Fee records

Bills and payment status, where the school uses the app for fees.

Technical logs

Ordinary server logs (a request time, a network address, a device type) kept briefly to keep the service running and secure. These are not used to build a profile of anyone.

The app is built around the idea that people see only what their role needs. This is enforced by the database itself, not merely hidden in the interface.

• Parents and guardians see only their own linked children.
• Students see only their own records.
• Teachers see only the children in the classes they are assigned to.
• Coordinators and school leadership see the children in their area of responsibility.
• School administrators see what they need to run the school, and sensitive actions are recorded in an audit log.

Families cannot message teachers directly and students have no open chat. Communication with the school runs through the Help Desk, which the school office answers and which stays inside the school. This is a deliberate safeguarding choice.

We use a small number of service providers. They process information on the school’s instructions and may not use it for their own marketing or profiling. The one exception is the payment itself, which Kuickpay handles on its own page under its own banking rules.

Supabase

Hosts the database, the sign-in system, and the private file storage where school work, photos and recordings are kept.

Vercel

Hosts and serves the application itself.

Anthropic

Staff-only tools send content to Anthropic's Claude API for two jobs: helping a staff member draft wording, and reading the timetable sheets staff upload so they can be shown as a weekly schedule. A staff member checks every result before a family sees it, these tools never decide anything about a child, and content sent this way is not used to train AI models.

Kuickpay

Where the school has turned on online fee payment, the payment itself is taken on Kuickpay's secure hosted page. Card details are never entered into, seen by, or stored in this app.

• We do not track you across other apps or websites. The app contains no advertising, no analytics SDK, and no third-party tracker of any kind.
• We do not sell or rent anyone's information, and we never have.
• We do not use children's work or photographs for marketing.
• We do not share information with anyone outside the school except the service providers listed above, or where the law requires it or a child's safety demands it. The one thing that leaves the school by design is a report about the app itself: anyone signed in can send one, and those go to the people who build the app so they can fix it.

Student accounts are created and controlled by the school as part of educating that child, and the school decides which children have an account at all. Our youngest children have no account of their own: the school shares their day with the family through the parent’s account instead.

Students have no private chat with anyone. They cannot message each other, and nobody can open a conversation with a student: anything the school sends a student is one-way, cannot be replied to, and is part of the school’s records. The app has no public profiles, no social feed, no leaderboards and no ranking of children against each other.

A parent or guardian may ask the school at any time to see, correct or discuss the information held about their child.

• Everything travels over an encrypted connection. The app refuses unencrypted traffic.
• Files, photos and recordings sit in private storage. They are never publicly linked; each view is opened with a short-lived private link generated only after your permission has been checked.
• Access rules are enforced in the database, so a mistake in the interface cannot expose someone else's child.
• Sensitive staff actions are written to an audit log.
• On Android the app keeps itself out of device backups. On iPhone and iPad your session is protected by the device's own encryption and passcode.

School records are kept while a child is enrolled and afterwards for as long as the school needs them as part of its own records, which is an ordinary obligation for a school. When an account is removed, it leaves the running school entirely. The school may keep a copy of the record in its own archive, as schools do, and that copy is visible only to the school’s administrators.

Because accounts belong to the school, the school is the right place to start for anything you want to see, correct, or have removed. Contact the school office, or use Help Desk inside the app, and the school will handle it. You may also write to us at info@edopia.org.

You can decline the camera, photo library and microphone permissions and keep using the app; you will simply not be able to attach a photo or record a voice note from your device.

If what we collect or who processes it changes, we will update this page and move the date at the top. Material changes will also be communicated by the school.

Edopia, Islamabad, Pakistan. Questions about this policy or about information held about your family: info@edopia.org.