Privacy Policy

Effective Date: June 22, 2026

Last Updated: June 30, 2026

This Privacy Policy applies to the Deghost edu mobile application (collectively, the "Application" or "Service"), operated by DeGhost ("we", "us", "our", or the "Service Provider").

We are committed to protecting the privacy of school administrators, parents, guardians, and students. This Privacy Policy explains how data is accessed, authenticated, and secured within the Application, specifically tailored to comply with international data protection frameworks and mobile app marketplace requirements, including the Apple App Store Review Guidelines.

1. Data Architecture & Authentication Model

To ensure maximum data minimization and security, the Application functions under the following data structure:

• Zero Self-Registration: Parents and legal guardians cannot open or create independent accounts within the Application.
• Pre-Verified School Authentication: Access is granted strictly via the mobile phone number or credentials already officially registered, verified, and maintained in the respective School's database.
• Real-Time Data Verification: When a parent attempts to log in, the Application securely verifies the provided phone number against the School's pre-existing records to authorize access to that specific student's portal.

2. Categories of Information Processed

The Application accesses and processes information split into two main classifications: Information Authorized by the School (Core Features) and Automatically Processed Technical Data.

A. School-Provided Student & Parent Records

The Application acts as a pipeline to securely display the following pre-existing educational records to authorized parents:

• Student Academic Information: Classroom/section assignments and official academic report cards.
• Attendance & Logistics: Daily or period-by-period attendance logs (e.g., Present, Tardy, Unexcused Absence).
• Health and Safety: School clinic or infirmary visit logs.
• School Resource Management: Library account status, borrowed books, and reservation logs.
• Financial & Operational Status: School tuition fees, active contract structures, outstanding balances, and official payment receipts.
• Communications: Direct school-to-parent messages, administrative announcements, and real-time operational notifications.

B. Automatically Processed Technical & Device Data

To ensure application stability, performance optimization, and secure session management, the Application may automatically process limited technical metadata:

• Internet Protocol (IP) address and device-specific network identifiers.
• Mobile operating system name, version, and hardware specifications.
• App diagnostics (e.g., crash logs, session durations, screen engagement, and UI interactions).

3. Purpose of Processing and Lawful Basis

We process information exclusively to fulfill contractual obligations between the Service Provider and the participating Schools, acting strictly as a Data Processor. The data is utilized to:

• Authenticate authorized parents and prevent unauthorized access to sensitive student records.
• Deliver real-time updates regarding student progress, school announcements, and emergencies.
• Facilitate smooth transmission of administrative data, library notifications, and school fee tracking.

4. Third-Party Data Access & Disclosures

We do not sell, rent, trade, or share any personal data or student records with third-party advertisers or data brokers. Data is shared only under the following tightly controlled circumstances:

• With the Institutional School: Because the data originates from the School, all interactions, acknowledgments, or inputs made within the App are securely synchronized back to the School.
• With Trusted Infrastructure Providers: We utilize trusted, enterprise-grade cloud hosting and push notification delivery services (such as Apple Push Notification service) that operate under strict confidentiality agreements. These providers have no independent right to use or access the data.
• Legal Obligations: We may disclose information if required by applicable law, such as to comply with a valid legal process, subpoena, or government safety mandate.

5. Children’s Privacy & Parental Control

The Application inherently handles student data that may include children under the age of 16. However, because this data is strictly managed and provisioned by the School—and accessible only by verified parents or legal guardians—the Application complies fully with the Children's Online Privacy Protection Act (COPPA) and relevant regional educational privacy laws.

We do not knowingly solicit data directly from children, nor is the app designed for independent child usage without parental supervision.

6. Data Retention and Deletion

A. School Records (Not Deleted via the App)

Academic, financial, clinical, and attendance records displayed in the Application are controlled entirely by the participating School’s master retention policies. If a student withdraws or graduates, access permissions are managed and revoked by the School—not by deleting records through the mobile app.

B. In-App Mobile Account Deletion

In compliance with Apple App Store Review Guideline 5.1.1(v) and applicable privacy laws, the Application provides an in-app option to delete your mobile app account. You can initiate this at any time while signed in:

• Open the side menu (drawer) and select Delete Account, or choose Delete Account from the sign-out options.
• Review the on-screen explanation of what will and will not be removed.
• Confirm deletion to complete the process immediately within the app—no website visit, phone call, or email is required.

After deletion, you will no longer receive school notifications or messages through the Application until you re-activate mobile access using Activate Account on the login screen. Re-activation uses the same school-verified phone number or credentials already on file with your School; no new personal registration data is collected.

Account deletion requires an active, authenticated session—the same security model used when you sign out. Deletion is permanent for mobile app access and cannot be undone from within the app; re-activation creates new mobile credentials only.

C. Cached and Temporary Data

• Device-side caching used to improve performance is cleared when you sign out, delete your mobile account, or uninstall the Application.
• Diagnostic logs (crash reports, session analytics) may be retained for a limited period for security and stability purposes, then deleted or anonymized in accordance with our internal retention schedule.

D. Other Deletion Requests

To request removal of school-held records, correction of inaccurate data, or verification of data processed on behalf of your School, please contact your School’s registrar or administration office directly, as the School remains the data controller for educational records. For questions about mobile app account deletion or this Privacy Policy, contact us at info@deghost.com.

7. Data Security Safeguards

We employ robust, industry-standard physical, electronic, and managerial safeguards to protect your data. This includes end-to-end encryption of data in transit (via HTTPS/TLS), secure API token authentications, and regular server security patching. In the highly unlikely event of a verified data breach, we maintain strict operational protocols to notify affected institutional clients and users in accordance with applicable legal timelines.

8. Your Rights & International Transfers

Depending on your jurisdiction, you or your School may retain rights to access, correct, delete, or restrict the processing of personal data. You may delete your mobile app account at any time using the in-app Delete Account option described in Section 6—without contacting customer support. Because the Service Provider operates on behalf of international clients, data may be transferred to and maintained on cloud infrastructure located outside your home country. We utilize recognized legal transfer mechanisms, such as Standard Contractual Clauses (SCCs), to ensure equivalent safety standards globally.

9. Changes to this Privacy Policy

We reserve the right to update this policy to reflect application enhancements or regulatory changes. Any material changes will be communicated transparently through an in-app notice, featuring a revised effective date. Your continued use of the Application post-update indicates your acknowledgement of the amended terms.

10. Contact Us

If you have any questions, compliance inquiries, or security-related concerns regarding the Deghost edu application, please reach out to us at:

Email: info@deghost.com