Privacy Policy

Shanti Public School LMS — the official app and website of Shanti Public Higher Secondary School, Guna (M.P.), India
Last updated: 31 July 2026

This application and website ("the LMS") is operated by Shanti Public Higher Secondary School, Guna, Madhya Pradesh ("the School") for its own students' families and its own staff. Accounts are issued only by the School — there is no public sign-up. This policy explains what information the LMS processes and how it is protected, in line with India's Digital Personal Data Protection Act, 2023 (DPDP).

What information the LMS holds

• Student records — name, date of birth, gender, class and section, admission details, photograph, house, and the identifiers the School uses for its statutory records (e.g. scholar number).
• Parent/guardian details — name, relationship, and mobile number, used to create the family's account and to contact the family.
• Attendance — daily and lecture-wise attendance, including arrival/departure events from the School's gate scanners.
• Academic records — examination marks, report cards, teacher remarks, home assignments and syllabus information.
• Fee records — fee dues, payments and receipts.
• Gate-pass records — for a student's safety, an early pickup requires the pickup person's name, relationship, reason and a photograph taken at the school reception, confirmed by a one-time code sent to the parent's account.
• Photographs attached by staff — teachers may attach photos (e.g. of written work or notices) to items shared with parents.
• Account and device information — username, role, sign-in records, and (when notifications are enabled) a device notification token.

Why it is processed

Solely to run the School: marking and reporting attendance, communicating with parents (notices, assignments, results, fee reminders), collecting fees, student safety (gate passes), and the School's own academic administration and statutory record-keeping. The LMS does not use this information for advertising, and it is never sold.

Children's information

The LMS holds students' educational records as part of the School's function. App accounts belong to parents/guardians and staff — students do not register themselves. Processing of a child's information is done with the consent of the parent/guardian, obtained through the School's admission process and at first sign-in. The app's "Student Mode" is a parental-supervision feature the parent controls with their own PIN.

Where it is stored, and who can see it

• All information is stored on the School's own server, accessed over HTTPS. Passwords are stored only in hashed form.
• Access is strictly role-based: a family account sees only its own children; teachers see only their own classes and subjects; sensitive staff modules additionally work only from the School's own network.
• Sensitive actions are recorded in an audit log.
• The LMS links to services operated for the School: the School's online fee-payment portal (opened for your own child's fees) and the School's English Lab learning platform (signed in automatically from your account). When push notifications are enabled, message delivery uses Google Firebase Cloud Messaging; only the delivery token and the message content are involved.
• Information is not shared with any other third party, except where the law or an education authority requires it.

Camera and photos

The app asks for camera/photo access only when you attach a photo (staff features) or when reception photographs a pickup person for a gate pass. The app never accesses your camera or photo library in the background.

Retention

Educational records are retained for as long as the School is required to keep them (statutory registers, transfer certificates, examination records). Operational records such as sign-in sessions and notification tokens are kept only as long as they are needed.

Your rights

Parents/guardians may view their child's information in the app, and may ask the School office to correct inaccurate information, or raise any concern about this policy. The School will respond in line with the DPDP Act.

If this policy changes, the updated version will be published at this address with a new "last updated" date.