School Admin — Privacy Policy
App: School Admin (package africa.biopass.school.admin) · Published by BIOPASS INVESTMENTS LTD · Last updated: 10 October 2026
School Admin is for staff of schools that use BioPass: head teachers, administrators and other authorised staff. It lets them manage students, staff, attendance and communication for their own school. This policy explains what information the app handles, why, who it is shared with, and your choices. It applies only to the School Admin app.
1. Who is responsible
Your school decides what information about its students and staff is kept and who has access; it is the controller of its records. BIOPASS INVESTMENTS LTD ("BioPass", "we") provides the app and the systems behind it on the school's behalf, and is responsible for staff sign-in, device security and the app itself.
2. Information the app handles
| Information | Where it comes from | Why |
|---|---|---|
| Your name, email or phone number, and your account rights | Your school, when it created your staff account | To sign you in and show only what your rights allow |
| Your password | You | To sign in. We store only a one-way hash, never the password itself |
| Optional quick PIN | You | To unlock the app quickly on a shared phone. Stored securely |
| Student and staff records: names, classes, photos, parent contacts, attendance, tags | The school | To let authorised staff view and manage them |
| Photos you take or choose | Your camera | To add a student's or staff member's photo. Uploaded to the school's records |
| Voice recordings | Your microphone (only for authorised staff, when you record) | To record how a name is pronounced for the school's devices |
| NFC tag contents | Your NFC reader (only when you write or read a tag) | To write a student's or staff member's identity onto a card or tag |
| Device identifier (Android ID), app version | Your phone | To recognise and authorise the phone you sign in on, and to end sessions on lost phones |
| Notification token | Firebase Cloud Messaging | To send you notifications. Removed when you sign out |
| Saved copy on your phone | The app | So the school's data you have opened still shows offline. Excluded from phone backups |
The app does not use your location, contacts or advertising identifiers, and it contains no advertising or analytics trackers.
3. How we use it
- To sign you in and give you the access your school has granted.
- To show, update and add the school's records you are allowed to manage.
- To send notifications and, when your school uses them, SMS messages to parents.
- To keep the service secure, for example limiting failed sign-ins.
We do not sell your information and we do not use it for advertising or profiling.
4. Who we share it with
- Your school: it already holds the student and staff records shown in the app.
- Google (Firebase): our service provider for storing school records, delivering notifications and running our server functions. It processes data on our behalf.
- SMS and email delivery: when the school sends a message, the recipient's number or email and the message go to the delivery service.
- Authorities, only where the law requires it.
We do not share information with advertisers or data brokers.
5. Security
All traffic between the app and our servers is encrypted (HTTPS). Passwords are stored only as hashes, sessions can be ended by your school's administrators, and repeated wrong passwords are blocked for a time. You can only reach records for your own school.
6. How long we keep it
Student and staff records are kept by the school for as long as it needs them; ask your school about retention. Your staff account stays until your school removes it. Your notification token and the copy on your phone are removed when you sign out or uninstall the app.
7. Your choices and rights
- Sign out in the app to remove your session, notification token and the saved copy from your phone.
- Camera, microphone and notifications can be switched off in your phone's settings; the related features then stop working.
- Access, correction or deletion of your account or other information: contact your school's administrator, or see how to delete your data. You also have rights under Uganda's Data Protection and Privacy Act, 2019 and, where it applies, the law of your country.
8. Children
The app is for school staff, not for children. Information about students is supplied by the school and is shown only to authorised staff.
9. Updates to the app
The app is updated through Google Play. It never downloads or installs apps itself.
10. Changes to this policy
If we change this policy we will update the date above.
11. Contact
BIOPASS INVESTMENTS LTD
Email: [email protected]
Delete your data: schooladmin.biopass.africa/delete_data
Website: biopass.africa