AIS School System Pindi Gheb

1. Introduction

Welcome to AIS School ("we," "our," or "us"). We are committed to protecting your privacy and the privacy of students, parents, and educators who use our educational platform, website, and mobile application.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://aisschool.top, use our mobile application, or access our educational services including student portal, teacher portal, and management system.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

Student Information: Name, age, class, roll number, academic records, attendance
Parent/Guardian Information: Name, contact details, email address, phone number
Teacher Information: Name, qualification, contact details, employment records
Contact Information: Email addresses, phone numbers, postal addresses
Academic Data: Grades, assignments, test results, progress reports

2.2 Technical Information

Device information (device type, operating system, browser type)
Usage data (pages visited, time spent, features used)
Log files (IP addresses, access times, error logs)
Mobile app usage data and crash reports

2.3 Educational Content

Game scores and learning progress from educational games
Submitted assignments and projects
Communication between students, teachers, and parents
Calendar events and academic activities participation

3. How We Use Information

Educational Purposes

Provide educational services and content
Track academic progress and performance
Facilitate communication between stakeholders
Manage educational games and activities

Administrative Purposes

Manage student enrollment and records
Process scholarship applications
Maintain academic calendar and events
Handle admissions and course applications

Communication

Send important school announcements
Notify about events and activities
Respond to inquiries and support requests
Share academic updates with parents

Security & Improvement

Ensure platform security and safety
Improve our services and user experience
Analyze usage patterns for optimization
Prevent fraud and unauthorized access

4. Information Sharing and Disclosure

We DO NOT sell your personal information

We will never sell, rent, or trade your personal information to third parties for commercial purposes.

We may share information in these limited circumstances:

1
With Your Consent: When you explicitly agree to share information
2
Educational Partners: With approved educational service providers who assist in delivering our services
3
Legal Requirements: When required by law or to protect rights and safety
4
Emergency Situations: To protect the health, safety, or rights of students or staff

5. Third-Party Services and Analytics

Google Analytics Integration

Our app uses Google Analytics to help us understand how users interact with our platform and improve our services. This service may collect:

• Device Information: Device type, operating system, screen resolution
• Usage Data: Pages visited, time spent, features used
• Performance Data: App crashes, loading times, error reports
• Device Identifiers: Advertising ID, Analytics ID for user tracking
• Geographic Data: General location (country/region level only)

Educational Service Providers

• Cloud Storage Services: For secure data backup and storage
• Communication Platforms: For notifications and messaging
• Security Services: For fraud prevention and platform security
• Performance Monitoring: For app stability and crash reporting

Data Processing Locations

• Primary Servers: Secure data centers with encryption
• Analytics Processing: Google's global infrastructure
• Backup Storage: Encrypted cloud storage solutions
• CDN Services: For faster content delivery worldwide

Third-Party Privacy Policies

Our third-party service providers have their own privacy policies governing how they handle your data:

• Google Analytics: Google Privacy Policy
• Google Play Services: Google Privacy Policy

6. Data Security

Technical Safeguards

SSL encryption for data transmission
Secure password requirements
Encrypted data storage
Role-based access controls

Administrative Safeguards

Staff training on data protection
Regular security audits
Data backup and recovery procedures
Monitoring and logging systems

7. Data Retention Policy

Important Notice: Educational Records Retention

As an educational institution, we are legally required to maintain student and educational records for extended periods. Deletion of academic records may constitute a legal violation and compromise the integrity of educational documentation.

Permanent Records (Cannot be Deleted)

Academic Records: Grades, transcripts, certificates, diplomas
Attendance Records: Daily attendance, participation records
Student Identity: Name, student ID, enrollment information
Teacher Records: Employment history, qualifications, performance
Official Documents: Admission forms, fee records, disciplinary records

Modifiable Records (Can be Updated)

Contact Information: Phone numbers, email addresses
Address Information: Current residential address
Communication Preferences: Notification settings
Account Settings: Password, security preferences

Legal and Regulatory Compliance

Our data retention policies comply with:

• Educational record-keeping regulations and government requirements
• Legal obligations for maintaining student academic history
• Requirements for providing official transcripts and certificates
• Professional teaching standards and employment documentation
• Audit and inspection requirements by educational authorities

8. Children's Privacy (COPPA Compliance)

Special Protection for Children Under 13

We take extra care to protect the privacy of children under 13 years of age in compliance with the Children's Online Privacy Protection Act (COPPA).

Parental Consent: We require verifiable parental consent before collecting personal information from children under 13
Limited Collection: We only collect information necessary for educational purposes
No Marketing: We do not use children's information for marketing or advertising
Parental Rights: Parents can review and modify their child's non-academic information
Safe Environment: Our educational games and activities are designed to be safe and age-appropriate

9. Legal Compliance and Educational Privacy Laws

FERPA Compliance (Family Educational Rights and Privacy Act)

As an educational institution, we comply with FERPA and other applicable educational privacy laws to protect student educational records.

• Educational Records Protection: Student academic records are protected under FERPA guidelines
• Authorized Access: Only authorized school personnel can access educational records
• Parent Rights: Parents have rights to inspect and review their child's educational records
• Directory Information: Limited directory information may be disclosed as permitted by law
• Consent Requirements: Written consent required for most disclosures of educational records

Local Educational Laws

• Pakistani Education Act compliance
• Provincial education ministry regulations
• Student data protection requirements
• Teacher employment record regulations
• Academic certification standards

International Standards

• GDPR principles for data protection
• COPPA compliance for children under 13
• ISO 27001 security framework alignment
• Educational data privacy best practices
• Cross-border data transfer safeguards

Legal Record Retention Requirements

We are legally obligated to maintain certain educational records as required by:

• Government audit and inspection requirements
• Academic accreditation standards
• Student transcript and certification needs
• Teacher licensing and qualification verification
• Legal dispute resolution and court orders

10. Data Breach Response and Notification

Our Commitment to Data Security

While we implement robust security measures, in the unlikely event of a data breach affecting personal information, we are committed to transparent and prompt response.

Immediate Response (Within 24 Hours)

• Incident Assessment: Evaluate scope and impact of breach
• Security Measures: Implement immediate containment actions
• Evidence Preservation: Secure logs and forensic evidence
• Team Activation: Mobilize incident response team
• Risk Analysis: Assess potential harm to affected individuals

User Notification (Within 72 Hours)

• Direct Communication: Email/SMS to affected users
• Clear Information: What data was involved and when
• Impact Assessment: Potential risks and consequences
• Protective Actions: Steps taken to secure data
• User Guidance: Recommended actions for users

Long-term Response and Prevention

• Regulatory Notification: Comply with legal reporting requirements
• System Enhancement: Strengthen security measures to prevent recurrence
• User Support: Provide ongoing assistance to affected individuals
• Third-party Coordination: Work with partners to address shared vulnerabilities
• Transparency Report: Publish summary of incident and improvements made

11. International Data Transfers and Processing

Global Service Infrastructure

To provide reliable and efficient services, your data may be processed in different countries with varying data protection laws. We ensure appropriate safeguards are in place for all international transfers.

Primary Processing

• Location: Pakistan (Primary servers)
• Data Types: All educational records and personal information
• Security: Full encryption and access controls
• Compliance: Local data protection laws

Analytics Processing

• Provider: Google Analytics (Global)
• Data Types: Usage data, device information
• Purpose: App improvement and performance
• Safeguards: Google's privacy certifications

Backup Storage

• Location: Secure cloud data centers
• Data Types: Encrypted backup copies
• Purpose: Disaster recovery and continuity
• Access: Restricted to authorized personnel only

International Transfer Safeguards

• Encryption: All data encrypted in transit and at rest using industry-standard protocols
• Contractual Protection: Data processing agreements with all third-party providers
• Privacy Frameworks: Adherence to international privacy frameworks and standards
• Access Controls: Strict authentication requirements for international access
• Audit Rights: Regular audits of international processing activities
• Data Minimization: Only necessary data transferred for specific purposes

12. Your Rights and Choices

Limitation on Data Deletion Rights

Important: While we respect your privacy rights, we cannot delete academic records, grades, attendance, or other educational documentation as this would violate legal requirements and compromise the integrity of educational records. Students and teachers invest significant time and effort in their academic journey, and these records serve as permanent proof of their achievements and educational history.

Available Rights

View your personal and academic information
Update contact information and preferences
Request copies of your records
Request deletion of non-academic personal data only

What You Can Control

Opt-out of non-essential communications
Manage notification preferences
Update communication methods
Contact us about privacy concerns

How to Exercise Your Rights

To exercise any of your available rights, please contact us using the information in the "Contact Us" section below. We will respond to your request within 48 hours and provide assistance within the legal limitations of educational record keeping.

Note: Requests for deletion of academic records cannot be honored due to legal and regulatory requirements for educational institutions.

13. Contact Us

If you have any questions about this Privacy Policy, your data, or our privacy practices, please contact us:

General Inquiries

privacy@aisschool.top

03261813881, 03474383140

Street Of Friends Motor Eccho Pump Collage chowk, Pindi Gheb

Data Protection Officer

dpo@aisschool.top

Response within 48 hours