Privacy Policy

👋 Overview

SkoolPay ("we", "us", or "our") is a school fee tracking application that helps parents monitor and record tuition payments for their children. This Privacy Policy explains what information we collect, why we collect it, and how we protect it.

      SkoolPay does not process actual financial transactions. We are a record-keeping and notification tool only — no credit card numbers or banking details are stored on our servers.
    

By using SkoolPay, you agree to the collection and use of information in accordance with this policy.

📋 Information We Collect

Type	What we collect	Why
Account	Name, email address, password (hashed)	To create and secure your account
Student records	Child's name, school name, grade level, school year	To track which fees belong to which student
Payment records	Payment amount, due dates, paid dates, payment method, reference notes	To track your payment schedule and history
Receipt uploads	Images/PDFs you upload as proof of payment	To attach receipts to payment records
Device & usage	IP address, last login date, browser type	For security monitoring and abuse prevention
Push notifications	Device push token (if you opt in)	To send payment reminders to your device

⚙️ How We Use Your Information

To provide, operate, and maintain the SkoolPay service
To send payment due date reminders and overdue alerts
To notify registered schools when a parent records a payment
To allow account sharing with co-parents or guardians (collaborators)
To send transactional emails (password reset, registration confirmation)
To detect and prevent fraudulent or abusive activity
To improve and troubleshoot the application

We do not sell, rent, or share your personal data with third-party advertisers or marketing companies.

🔒 Data Storage & Security

Your data is stored on a secured private server. We implement the following security measures:

Passwords are hashed using bcrypt — we never store plain-text passwords
All connections are encrypted via HTTPS / TLS
Sessions are secured with httpOnly, secure cookies
File uploads are stored in a private directory not directly accessible from the web
Access to student and payment data is restricted to the account owner and explicitly invited collaborators

While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

🔗 Third-Party Services

SkoolPay uses the following third-party services, each with their own privacy policies:

Service	Purpose	Data shared
Google OAuth	Sign in with Google (optional)	Name, email address, profile photo
Gmail API	Sending notification emails	Recipient email address, payment details in email body
Google Fonts	Typography	IP address (standard web font request)

When you choose to sign in with Google, we receive only your basic profile information (name and email). We do not access your Google Drive, Gmail inbox, or any other Google services beyond authentication.

🏫 School Notifications

If your child's school is registered on SkoolPay, we may share the following payment details with that school via email when you record a payment:

Your child's name
Your name (parent/guardian)
Payment amount, type, and date
Reference number or notes (if you enter them)
Receipt image (if you attach one)

This notification is sent to help schools verify and reconcile payments. Schools are bound by their own privacy policies. You can choose not to attach receipts or notes if you prefer not to share that information.

🗂️ Data Retention

We retain your data for as long as your account is active. If you request account deletion:

Your personal account information will be permanently deleted
Student and payment records associated with your account will be deleted
Uploaded receipt files will be removed from our servers
School notification logs referencing your data will be anonymised

To request deletion, contact us at the email address below.

👶 Children's Privacy

SkoolPay is intended for use by parents and guardians (18 years and older). We do not knowingly collect personal information directly from children under 13. Student records entered into the app are managed by the parent or guardian account holder.

If you believe a child under 13 has provided personal information to us directly, please contact us immediately and we will promptly delete it.

✅ Your Rights

You have the right to:

Access — request a copy of the personal data we hold about you
Correct — update inaccurate or incomplete information via your account settings
Delete — request that your account and all associated data be permanently deleted
Withdraw consent — disable push notifications at any time in your device settings
Portability — request your payment records in a readable format

To exercise any of these rights, please contact us at the email address below.

📝 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you via email or an in-app notice.

Continued use of SkoolPay after changes are posted constitutes acceptance of the updated policy.