Privacy Policy for MyGradeCard
Effective Date: 2021-12-01
Last Updated: 2024-12-01
MyGradeCard is a multi-tenant academic performance and student information management platform developed by NYM Technologies Limited. We are committed to protecting the privacy and security of all users—schools, students, and guardians—across all institutions using our service.
This Privacy Policy explains how we collect, use, store, and share data within the MyGradeCard app while maintaining strict data isolation between tenants (schools or institutions).
1. Scope
This policy applies to all users of the MyGradeCard platform, including students, parents/guardians, teachers, and school administrators. It covers all schools and organizations using the platform under our multi-tenant infrastructure.
2. Information We Collect
a. Personal Information
- Student name, ID, class, school
- Parent/guardian contact information
- Academic records including grades, subjects, and comments
- School-specific configuration and preferences
b. Biometric and Location Data
- Biometric Data: Fingerprint or facial recognition (if enabled by the school) for secure login or attendance verification. Biometric templates are hashed and never stored in raw form.
- Location Data: Captured only during specific features like check-ins or attendance. This is always permission-based and controlled by the institution.
c. Device & Usage Data
- Device ID, operating system, browser or app version
- Crash logs, usage behavior, and diagnostics (used for improving app stability and user experience)
3. How We Use the Information
- To display and manage academic records for each user within their institution
- To verify identity and track student attendance (if biometric/location features are enabled by the school)
- To provide personalized dashboards for schools, parents, and students
- To communicate notifications, updates, and alerts related to student performance
- To maintain internal security and perform audits (per institution)
4. Data Segregation in a Multi-Tenant System
Each school or institution (“tenant”) has isolated access to its own data. We ensure:
- No cross-tenant data leakage
- Separate logical access for each school
- Role-based permissions for users within each tenant
5. Data Storage & Security
- Data encryption at rest and in transit
- Strict role-based access control
- Biometric templates stored in a secure, non-reversible format
- Secure hosting environments with regular audits and monitoring
6. Data Sharing & Disclosure
We do not sell or rent any user data. Data is shared only:
- Within the user’s registered institution (school)
- With guardians (if access is granted by the school)
- With our secure infrastructure providers (under strict confidentiality and data protection agreements)
7. Children's Privacy
MyGradeCard is designed for school use and may process information about children under 13. We comply with COPPA and similar regulations by:
- Collecting data only under school direction or verified parental consent
- Not using children’s data for marketing or advertising
- Allowing parents to request data review or deletion through their school
8. Your Rights
Users (or their schools) can:
- Access or correct their data
- Request data deletion (subject to school policy)
- Disable optional features like location tracking or biometrics
Requests can be initiated by contacting the school administrator or NYM Technologies support.
9. Changes to This Privacy Policy
We may update this policy as features or regulations change. Updates will be posted on our website, and key changes will be communicated to institutions and users via email or in-app notices.
10. Contact Information
NYM Technologies Limited
Email: hello@thisisnym.com.