Privacy Policy

Effective: 6 May 2026 · Last updated: 6 May 2026

This Privacy Policy describes how Pradya Yataseang ("we", "our") collects, uses, and protects your personal information when you use the NOTYSCHOOL Family and NOTYSCHOOL Teacher mobile applications (collectively, "the Apps") and related services.

1. Information We Collect

1.1 Information You Provide

• Account info: name, email, phone number, student ID / national ID (for identity verification)
• School info: school name, grade, classroom, academic year
• Messages: content of chat conversations between parents/students and teachers
• Authentication: Google account info when using Sign in with Google

1.2 Automatically Collected

• Push token: Firebase Cloud Messaging (FCM) token for delivering notifications
• Device info: phone model, OS, app version
• Usage data: login timestamps, in-app actions (check-in, leave requests, etc.)

1.3 Face Data (Opt-in by school only)

• Only schools that opt into the Face Scan Kiosk system collect this
• Stored as face embeddings (numerical vectors), not original images — cannot be reversed back into a face
• Captured photos at check-in are used solely for verification, retained per the school's policy

2. How We Use Your Information

• Provide app features (scores, attendance, notifications)
• Enable communication between schools and families via chat and push
• Authenticate users for student data security
• Improve app performance and fix issues
• Comply with legal obligations

3. Information Sharing

We do not sell personal information. Data is shared only with:

• Your school: Teachers and admins access info needed to provide educational services
• Cloud providers:
  • Google Firebase (Authentication, Cloud Messaging) — United States
  • scapschool.com hosting — Thailand
• Government: When required by law

4. Data Retention

• Account data is retained while you use the service
• Chat messages: up to 1 year after the last conversation
• Attendance records: per the school's academic year policy
• Account deletion requests are processed within 30 days

5. Security

• All data transmission uses HTTPS/TLS encryption
• Passwords stored as hash + salt, never plain text
• JWT tokens expire in 7 days; refresh tokens in 30 days
• Face data is converted to vectors before storage; not reversible

6. Your Rights

Under Thailand's PDPA (and equivalent laws), you have the right to:

• Access and request a copy of your data
• Request correction of inaccurate data
• Request deletion of your account and data
• Withdraw consent for data processing
• Opt-out of push notifications

Contact nuiii044@gmail.com to exercise these rights.

7. Cookies & Tracking

The app does not use third-party tracking cookies. Only session tokens and operational caches are stored.

8. Children's Privacy

The app is designed for educational settings. Users under age 13 should have parental consent and use only via a parent's account.

9. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated via in-app notice and email.

10. Contact

• Developer: Pradya Yataseang
• Email: nuiii044@gmail.com
• Website: https://scapschool.com