School Management Privacy Policy

Last updated: March 3, 2026

1. Scope

This Privacy Policy describes how Rassani Technologies (“RassaniTech”, “we”, “us”) processes personal information when you use the Rassani School Management platform, including:

• the school web administration and parent/student/teacher portals;
• the mobile applications for parents, students, and staff;
• the Biometric Attendance desktop application installed at school campuses.

Schools and educational institutions that subscribe to the platform (“Schools”) are typically responsible for deciding why student and staff data is collected and for obtaining any required consents (including for biometric attendance where applicable).

2. Information We Collect

Account and identity

When a School creates or links your account, we may process your name, email address, login identifier, role (e.g. parent, student, teacher, administrator), and campus assignment.

Student and staff records

Schools may store academic and administrative records in the platform, such as admission numbers, class and section, attendance, grades, fees, timetables, homework, leave requests, transport and hostel details, documents, and photographs uploaded by the School.

Biometric attendance (fingerprint)

Where enabled by a School, the Biometric Attendance desktop app may capture fingerprint templates (mathematical representations used for matching, not stored fingerprint images) for students or staff. Templates may be stored:

• locally on the attendance kiosk or workstation; and
• on RassaniTech-hosted servers used by the School, to support enrollment sync and reporting.

Fingerprint data is used solely for identity verification and attendance marking unless the School configures otherwise within supported product features.

QR-based attendance

Students may present a QR code encoding a school-assigned student ID. The desktop app may use a camera or USB scanner to read that code and record attendance. Camera video is processed locally for decoding; we do not intend to store raw camera footage for attendance scanning.

Mobile app — device biometrics

If you enable biometric login on your phone or tablet (e.g. fingerprint or Face ID), authentication is performed by your device's operating system. We do not receive or store your device biometric data on our servers.

Mobile push notifications

If you allow notifications, we process a device push token and notification preferences to deliver school-related alerts such as attendance, fees, or announcements.

Technical and usage data

We may collect IP addresses, device type, app version, browser type, error logs, and sync timestamps to operate, secure, and improve the service.

3. How We Use Information

We use personal information to:

• provide, host, and maintain the School Management platform;
• authenticate users and enforce role-based access;
• record and report attendance, including biometric and QR methods where enabled;
• support academic, financial, and communication features configured by the School;
• send service-related notices and, where permitted, school notifications via mobile push;
• protect against fraud, abuse, and security incidents;
• comply with law and respond to lawful requests.

4. How We Share Information

We may share information:

• With the School that operates your account — administrators and authorized staff can access data according to their permissions;
• With service providers who host infrastructure, send email or push messages, or provide payment processing when integrated by the School — under contractual safeguards;
• For legal reasons when required by law, court order, or to protect rights and safety.

We do not sell personal information to third-party advertisers.

5. Children and Student Data

Student accounts are generally created and managed by Schools. Parents, guardians, or students should contact their School first with questions about a student record, biometric enrollment, or access rights. Schools are responsible for complying with applicable education and child-data laws in their jurisdiction.

6. Data Retention

We retain data for as long as the School's subscription is active and as needed to provide the service, resolve disputes, enforce agreements, and meet legal obligations. Schools may request export or deletion subject to contract terms and applicable law. Local caches on biometric devices may be cleared when a device is decommissioned or reset by school staff.

7. Security

We implement administrative, technical, and organizational measures appropriate to the nature of the data, including access controls, encryption in transit, and audit logging in the platform. No method of transmission or storage is completely secure; Schools should also protect kiosk credentials and physical access to attendance devices.

8. Your Choices and Rights

Depending on your role and local law, you may have rights to access, correct, delete, or restrict certain processing. Contact your School for student record requests. You may disable mobile push notifications in device or in-app settings. You may decline device biometric login on mobile while still using a password.

For platform-level privacy questions, contact us using the details below.

9. International Processing

Data may be processed in Pakistan or other countries where we or our infrastructure providers operate. We take steps designed to protect information consistent with this policy.

10. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the platform after changes constitutes acceptance where permitted by law.

11. Contact Us

Rassani Technologies
Email: hello@rassanitech.com
Website: rassanitech.com

Related documents: Terms of Service · School ERP product page