Schools App — Privacy Policy
App: Schools App (package africa.biopass.parents) · Published by BIOPASS INVESTMENTS LTD · Last updated: 2 October 2026
The Schools App lets a parent or guardian see their children's attendance and read messages sent by their school. This policy explains what information the app handles, why, who it is shared with, and the choices you have. It applies only to the Schools App.
1. Who is responsible
Your child's school decides what information about its students is kept and who the parents are; it is the controller of student and parent contact records. BIOPASS INVESTMENTS LTD ("BioPass", "we") provides the app and the systems behind it on the school's behalf, and is responsible for the sign-in codes, device tokens and the app itself.
2. Information the app handles
| Information | Where it comes from | Why |
|---|---|---|
| Your phone number or email address | You type it when signing in; the school also holds it on your child's record | To check you are a registered parent of a student at that school, and to send you the sign-in code |
| One-time sign-in code | Generated by our server and sent to you by SMS or email | To confirm it is you. Only a keyed hash of the code is stored, for 10 minutes |
| Your children's details: name, photo, class, year, student number | The school | To show you your children |
| Attendance records: the date and time each child signed in or out of school | The school's attendance devices | To show attendance history and send you notifications |
| Messages from the school (such as arrival and departure notices) | The school | To show them in the Communications page |
| Account identifier | Created when you sign in (Firebase Authentication) | To keep you signed in and to limit what you can read to your own children |
| Notification token (device identifier for push messages) | Firebase Cloud Messaging on your phone | To deliver notifications to your phone. Removed when you sign out |
| Saved copy on your phone | The app | So what you have already seen still shows offline. Removed when you sign out of a school. Excluded from phone backups |
The app does not use your location, contacts, camera, microphone, photos or files, and it does not collect advertising identifiers.
3. How we use it
- To sign you in and show you your own children's information, and nothing else.
- To send sign-in codes and notifications.
- To keep the service secure, for example limiting how many codes can be requested.
We do not sell your information, and we do not use it for advertising or to build profiles.
4. Who we share it with
- Your child's school: the school already holds the student and parent information shown in the app.
- Google (Firebase): our service provider for sign-in (Authentication), storing school records (Firestore) and delivering notifications (Cloud Messaging). It processes data on our behalf.
- SMS and email delivery: your phone number or email address and the code are passed to the SMS gateway or email service that delivers the sign-in code.
- Authorities, only where the law requires it.
We do not share information with advertisers or data brokers.
5. Security
All traffic between the app and our servers is encrypted (HTTPS). Sign-in codes expire after 10 minutes, allow only a few wrong attempts, and are never stored in readable form. Data is only available to parents of the student concerned.
6. How long we keep it
Student, attendance and message records are kept by the school for as long as it needs them; ask the school about its retention. Sign-in code records are removed or overwritten within minutes to hours. The copy on your phone and your notification token are removed when you sign out of a school or uninstall the app.
7. Your choices and rights
- Sign out of a school in the app to remove that school's saved data and notification token from your phone.
- Notifications can be switched off in your phone's settings.
- Access, correction or deletion of your or your child's information: contact the school, or email us at the address below and we will pass your request to the school and act on what is ours. You also have rights under Uganda's Data Protection and Privacy Act, 2019 and, where it applies, the law of your country.
8. Children
The app is for parents and guardians, not for children, and is not directed at children. Information about children in the app is supplied by their school and is shown only to their registered parents or guardians.
9. App updates
Where the app is installed outside Google Play, it can download and ask you to install newer versions of itself from BioPass's servers. This sends your app version only and needs the "install apps" permission. Installs from Google Play are updated by Google Play.
10. Changes to this policy
If we change this policy we will update the date above, and tell you in the app for significant changes.
11. Contact
BIOPASS INVESTMENTS LTD
Email: [email protected]
Delete your data: schoolsapp.biopass.africa/delete_data
Website: biopass.africa · schoolsapp.biopass.africa