Mobile App Privacy Policy

1. Who we are and who uses this app

The EDMS mobile app is published by EDMS School Management System (edms.pk). It is a companion to the EDMS school management system and is used by school staff and parents/guardians. It is not directed to children, and children are not the intended users.

Each school is the data controller for the records in its own account. We operate the software and hosting on the school’s behalf as a data processor. Questions about a particular child’s records should go to that school; questions about the platform can come to us at info@edms.pk.

2. You need an account, and we do not create one

The app has no sign-up. Accounts are created by your school’s administrator and you sign in with credentials they issue. If you do not have an account, the app shows only a login screen and collects nothing.

3. What the app collects

Information you provide

• Account credentials — the email/username and password you type at sign-in. Passwords are sent over HTTPS, verified against a hash, and never stored on the device.
• Work you enter — attendance marks, leave requests, diary entries and similar records you create in the course of your role.

Information collected automatically

• Session tokens — so you stay signed in between launches. Stored encrypted on the device (Android Keystore) and excluded from cloud backups.
• Push notification token — a device identifier issued by Google Firebase Cloud Messaging, used only to deliver notifications to your device. Removed when you sign out.

What the app does not do

• No advertising, no ad identifiers, no third-party ad or analytics SDKs.
• No location collection. No contacts, call log, SMS inbox or file access.
• We never sell personal information, and we never use school data to train models.

4. Student and family information

Depending on your role, the app displays records held in your school’sEDMS account — for example student names, attendance, fee vouchers, exam results and school notices. A parent sees only their own children; a staff member sees only what their role and assigned campus permit.

This information is entered by the school in the EDMS system; the app reads it over an encrypted connection and does not copy it anywhere else.

5. Permissions, and exactly why each is needed

• Camera — to scan the school’s attendance QR code, and student ID QR codes when taking a register. Frames are processed on the device to read the code; no photo or video is recorded, stored or transmitted. You can decline, and the rest of the app works normally.
• Notifications — to show school announcements, attendance alerts and reminders. Optional; you can decline or turn them off later in Android settings.
• Internet — to reach your school’s EDMS server.

The app does not request permission to send SMS. Where staff send a message to parents, the app opens your phone’s own messaging app with the text prepared, and you press send. The app cannot send a message by itself.

6. Sharing

We share personal information with no one except:

• Your school — the controller of the records you view or create.
• Google Firebase Cloud Messaging — receives the device token and notification content in order to deliver push notifications.
• Where the law requires it, or to protect the safety of a user.

7. Security

All traffic uses HTTPS/TLS; the app refuses plain-text connections. Session tokens are held in encrypted device storage, expire, and rotate on every use, so a stolen token has a short life. Access is enforced per role and per campus on the server, not just hidden in the interface, and each school’s data is isolated from every other school’s.

8. Retention and deletion

School records are kept for as long as the school’s account is active, under that school’s own retention rules. Signing out removes the session token and the push token from your device immediately; uninstalling removes all app data from the device.

To request deletion of your account and associated personal data, see Account & Data Deletion, or contact your school administrator.

9. Your rights

You may request access to, correction of, or deletion of your personal information. The fastest route is your school administrator, who can act directly in EDMS. You can also email info@edms.pk and we will route the request to the right school.

10. Changes

If we change how the app handles data, we will update this page and its date, and — for material changes — notify users in the app.

11. Contact

EDMS School Management System, Lahore, Punjab, Pakistan. Email info@edms.pk. Phone +92 301 4638564.