Privacy Policy

Account and profile information. When your school or organisation creates an account for you, we store your full name, email address, phone number, role, and — depending on your role — your staff ID, address, city, state, and gender. For teaching staff, an administrator may also record a qualification history, employment status, and links to identity/employment documents (such as an ID document or a résumé) that the administrator provides; these are stored as links to a document you or your school already control (e.g. a Google Drive link), not as files uploaded to and stored by SARAL.

Location information. When you check in for attendance at a school location, the app records your device's location at that moment, together with the distance from the school and whether you were within the school's permitted radius. This is stored as part of your attendance record. If your role involves field visits (for example, sales or outreach staff), the app also tracks your location continuously while a visit/commute is actively in progress — including while the app is in the background — so your organisation can confirm field activity; this tracking stops automatically after a fixed period and when you end the visit.

Photos. The app can request camera access to attach photographs to field-visit records (for example, evidence of a site visit). Photos you choose to capture or upload for this purpose are stored securely and linked to the relevant record.

Push notification data. If you enable notifications, we store a device token (an identifier your device's notification service assigns) so we can deliver notifications to you — for example, a new task assignment or a mention in a comment thread. We do not collect any other device identifiers.

Technical information. Like most web and mobile apps, our servers automatically log basic technical information with requests (such as IP address and browser/device user-agent), which we use for security and troubleshooting.

Schools may use SARAL to keep operational records about students — such as name, grade/class, term, parent/guardian name and contact details, and academic or attendance-related notes and scores entered by teaching staff. Students do not have accounts or log in to SARAL; this information exists purely as records maintained by the school. Access to student records is restricted to the school's own teaching and administrative staff and is never shared outside the school's own account (see "How we share information" below), and is never used to send notifications, marketing, or any communication to students directly.

SARAL is intended to be used by school staff on behalf of the school, not directly by children. If you believe a child has provided us with personal information directly and without appropriate authorisation, please contact us using the details at the end of this policy and we will address it.

We use the information above to:

• provide and operate the core features of the app for your organisation;
• verify attendance and field-visit activity against the location and time it was recorded;
• send you notifications you have enabled (task updates, mentions, approvals, and similar operational alerts) by push notification or email;
• maintain security, investigate misuse, and keep an audit trail of sensitive actions;
• respond to support requests and improve the reliability of the app.

We do not use your information for advertising, and we do not sell personal information.

Within your organisation only. SARAL is used by many separate schools and organisations on the same platform. Your data is only visible to your own organisation's authorised staff (based on their role) — it is not visible to any other school or organisation using SARAL.

We share limited information with the following service providers, solely to operate the app on our behalf:

• Firebase Cloud Messaging (Google) — delivers push notifications to your device. Firebase receives your device's notification token and the content of the notification itself (e.g. a task title), not your account profile.
• Google Maps / Places — used by administrators to look up and pin a school's location on a map when setting up a school. This does not involve your personal location.
• Brevo — sends transactional emails on our behalf (for example, approval or leave-status notifications), which requires sharing your email address, name, and the relevant email content with Brevo.
• Google Sheets (optional, per organisation) — if your organisation chooses to connect a Google Sheet for its own record-keeping, relevant records (such as sales-lead contact details, or internal task lists) are synced to that organisation's own sheet. This is configured and controlled by your organisation, not shared with other organisations.
• Error-monitoring tools (Sentry) — used to detect and fix crashes and errors. These tools are configured to avoid collecting personal information where possible.

We do not currently process any payment information through the app or mobile app. We may disclose information if required to do so by law, or to protect the rights, safety, or property of SARAL, our users, or others.

We retain account, attendance, location, and activity records for as long as your organisation's account is active, since they form part of your organisation's operational history. If your organisation's administrator removes your account, your login access is revoked immediately; underlying records are retained as part of the organisation's records unless your organisation specifically requests their deletion (see "Your choices" below).

We use industry-standard measures to protect your information, including encrypted connections (HTTPS) between the app and our servers, access controls based on your role, and short-lived login sessions. No method of transmission or storage is completely secure, but we work to protect your information appropriately.

You can control camera, location, and notification permissions at any time through your device's system settings. If you would like to access, correct, or request deletion of your personal information, please contact your organisation's administrator, or contact us directly using the details below and we will assist, subject to your organisation's own data-retention requirements.

SARAL's accounts (login access) are intended for school staff, not children. As described above, schools may maintain operational records about students as part of their own school administration; SARAL does not knowingly collect personal information directly from children through the app, and students do not have SARAL accounts.

We may update this policy from time to time as the app changes. We will update the "Last updated" date above when we do. Continued use of the app after an update means you accept the revised policy.

If you have questions about this policy or how your information is handled, contact us at contact@saralindia.org.