Privacy Policy

Welcome to ISMAC (the "Application" or "Platform"). This Privacy Policy describes how International Society for Moral & Academic Consciousness (ISMAC), Sunaina Group of Institutions, and application developer Rupesh Softech ("we", "our", or "us") collect, use, store, and disclose information obtained from students, teachers, parents, staff members, and authorized administrative personnel accessing our Educational Resource Planning (ERP) portal via the Android application and the website (https://ismacindia.org).

1. Information We Collect

To deliver essential educational and administrative services, we collect and process the following categories of information:

• Student & Parent Profile Data: Full name, admission number, roll number, academic course/branch, semester/class, date of birth, blood group, guardian names, residential address, emergency contact numbers, and email addresses.
• Academic & Attendance Records: Daily classroom attendance logs, examination timetables, grade cards, report cards, classwork, homework submissions, and faculty remarks.
• Financial & Fee Transactions: Fee payment records, invoice numbers, receipt archives, fee concession details, and transaction timestamps. (Note: Financial payment gateway transactions are handled directly through authorized secure banks; credit card or netbanking PINs are never stored on our servers).
• Staff & Teacher Administrative Records: Employee code, designation, department, qualification, punch-in/out timestamps, leave applications, and assigned subject periods.
• Device & Usage Information: Device model, operating system version, Firebase Cloud Messaging (FCM) device push tokens (for delivering notifications), and internet protocol (IP) address for session security audits.

2. Mobile Device Permissions & Usage

The Android application requests only permissions essential to its core educational features. Below is a transparent breakdown of each permission requested and its precise purpose:

3. Document & Report Downloads

The Application provides functionality to generate and download academic reports, fee payment receipts, exam schedules, syllabus documents, and CSV/PDF summaries. When a download is initiated:

• Files are saved directly to your device's standard Downloads folder.
• Files are accessible through any standard Android file manager or PDF viewer installed on your device.
• We do not scan, inspect, or modify any files on your device outside of the downloaded items created by the app.

4. Data Security & Encryption

We implement robust technical and organizational security measures to protect your personal information:

• HTTPS/TLS Encryption: All communication between the mobile application, web portal, and backend servers is encrypted using Transport Layer Security (TLS 1.2/1.3). Plaintext HTTP connections are strictly disabled.
• Password & MPIN Protection: All user passwords and 4-digit MPIN credentials are irreversibly hashed using standard Bcrypt / Argon2 algorithms before storage in the database. Plaintext passwords or MPINs are never stored.
• Role-Based Access Control (RBAC): Student, teacher, and administrative portals are compartmentalized so that individuals can only access data authorized for their specific role.
• Tenant Isolation: Data for each institution under the Sunaina Group is logically isolated to prevent cross-school data leaks.

5. Third-Party Services

We work with trusted industry providers for infrastructure and notifications:

• Google Firebase Cloud Messaging (FCM): Used to deliver push notifications to Android devices. Governed by Google's Privacy Policy (https://policies.google.com/privacy).
• No advertising SDKs (such as Google AdMob, Unity Ads, or Facebook Audience Network) are integrated into the application.

6. Children's & Student Privacy

As an educational ERP system servicing institutions ranging from primary schools to colleges, accounts for minor students are provisioned directly by the educational institution with parental or guardian consent. We do not solicit personal information directly from minors for marketing purposes. Parents and guardians can review, update, or request the correction of their ward's educational records through their authorized school administration.

7. Data Retention & Account Deletion Policy

We retain student and staff academic records for the duration required by institutional accreditation bodies, university examination boards, and applicable state educational mandates in Bihar, India.

8. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect enhancements in application features, legal mandates, or regulatory guidelines. Any amendments will be posted directly to this URL with a revised "Last Updated" date. Continued use of the application after revisions indicates acceptance of the updated terms.