Privacy Policy

12 Stars Edu App ("we", "our", or "us"), a product of 12 Stars Solutions, provides a school management platform for administrators, teachers, students, and parents. This Privacy Policy explains how we collect, use, and protect personal information when you use our web portal and mobile applications.

We may collect the following categories of information:

• Account information — name, email, phone number
• Academic records — grades, attendance, assignments, and submissions
• Device tokens for push notifications (with your consent)
• Usage and security logs required to operate the service safely

Data is used to deliver educational services, authenticate users, send school-related notifications, generate reports, and maintain platform security. We do not sell personal information to third parties.

The mobile app may request the following permissions:

• Camera — QR code scanning for attendance and check-in, and document capture
• Location (When In Use) — attendance verification and transport tracking
• Biometrics / Face ID — optional secure login (fingerprint or face recognition)
• Photo library / storage — attaching images to assignments and documents
• Microphone — recording voice announcements
• Push notifications — school alerts and announcements
• Network access — connecting to school services and receiving updates
• Local storage — caching data for offline access and session management

You can manage or revoke these permissions at any time in your device settings.

We do not sell or rent your personal information to third parties. We may share information with trusted service providers who assist in operating the platform (such as cloud hosting, email delivery, and push notification services), subject to contractual data protection obligations. Schools remain the data controller for tenant-specific educational records.

We use HTTPS encryption, role-based access controls, multi-tenant isolation, and industry-standard security practices. Secrets are stored in Azure Key Vault and are never committed to source code.

Academic and account data is retained according to your school's policies and applicable regulations. Automated retention policies purge expired activation tokens and inactive authentication data.

12 Stars Edu App is designed for use in educational settings. Accounts for students, including minors, are provisioned by the school — not self-registered by children.

• Parents of children under 13 must provide verifiable consent before data collection (COPPA)
• Students who turn 18 may restrict parent access to education records (FERPA)
• Schools are responsible for obtaining appropriate parental consent and communicating data practices to families

Depending on your jurisdiction (DPDP, GDPR, FERPA, COPPA), you may have rights to access, correct, delete, or port your personal data. Submit a Data Subject Access Request (DSAR) from your account Settings or contact your school administrator.

We use essential cookies for authentication and session management on the web portal. Functional and analytics cookies require your consent via the cookie banner shown on first visit. The mobile app may use local storage to cache data for offline access and maintain your session.

12 Stars Edu App implements technical controls aligned with DPDP, GDPR, FERPA, and COPPA frameworks — including DSAR workflows, consent management, retention policies, cookie consent, and audit logging. These features support privacy-by-design but do not constitute legal or regulatory certification.

Each school remains responsible for configuring tenant privacy settings (Grievance Officer, DPO, jurisdiction) and obtaining independent legal review before making compliance claims.

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by your school. Continued use of the service after changes constitutes acceptance of the updated policy. The "Last updated" date at the top of this page reflects the most recent revision.