Privacy Policy

Last updated: May 05, 2026

Quick Links: Account Deletion Manage App Data Contact Us

1. Introduction

Welcome to Oranga School, Pipra Kala. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform available at https://school.auranga.org.

We are committed to protecting your privacy and ensuring the security of your personal information. Please read this privacy policy carefully to understand our practices regarding your personal data.

2. Contact Information

Organization: Oranga School, Pipra Kala
Address: Pipra Kala, Ranki Kala, Satbarwa, Palamu, Jharkhand - 822126
Email: auranga.biz@gmail.com
Phone: +91-733768 0905

3. Information We Collect

Our school management system collects and processes the following types of personal information:

3.1 Student Information

• Full names and personal details
• Contact addresses and phone numbers
• Academic records and performance data
• Attendance records
• Photographs captured via the device camera for identification purposes
• Parent/guardian contact information

3.2 Employee Information

• Personal and professional details
• Contact information
• Employment records
• Attendance and leave records
• Salary and payment information

3.3 Device Permissions

The app requests the following device permissions. Each permission is used only for the stated purpose and only when the user actively initiates the action:

Camera (android.permission.CAMERA): Used to capture live profile photographs of students and employees during registration. The camera is accessed only when the user explicitly taps the capture button. It is never accessed in the background.
Storage (WRITE_EXTERNAL_STORAGE, Android 9 and below only): Used to save downloaded reports (e.g., fee due reports) to the device. On Android 10 and above, reports are saved to the app's Documents folder without requiring storage permission. The app does not scan, read, or access files without explicit user action.
Notifications (POST_NOTIFICATIONS, Android 13+): Used to deliver push notifications about attendance alerts, fee reminders, announcements, and other school updates. Users can opt out at any time via device notification settings.
Internet (INTERNET, ACCESS_NETWORK_STATE): Required for all app functionality including data synchronization, API communication, and delivering real-time updates.

The app does not collect personal data in the background without user interaction. No data is collected passively through any device sensor or permission.

Users have full control over when photos and documents are captured or uploaded through the app, and no data is collected without user action. All permissions can be revoked at any time from device Settings.

3.4 Technical Information

• Login credentials and authentication data
• Device FCM (Firebase Cloud Messaging) registration token
• Phone numbers registered for WhatsApp notifications
• App usage patterns and preferences
• Language preferences stored in cookies

4. How We Use Your Information

We use the collected information for the following purposes:

• Managing daily school operations and activities
• Student enrollment, attendance, and academic record keeping
• Employee management and payroll processing
• Sending push notifications for important updates
• Sending WhatsApp messages for notifications, fee receipts, fee reminders, event reminders, and announcements
• Managing complaints and inquiries
• Fee collection and financial record keeping
• Transport and examination management
• Generating student and employee identification cards
• Maintaining school calendar, routines, and schedules
• Inventory and resource management

5. Data Storage and Security

Storage Location: All data is securely stored in MySQL databases hosted on Amazon Web Services (AWS) RDS.

Security Measures:
• Role-based access control system
• JWT token-based authentication
• All data transmission between the app and our servers is secured using HTTPS (TLS encryption).
• Regular security updates and monitoring
• Access restricted to authorized personnel only

Data Retention: Data is retained only for as long as necessary to fulfill institutional, legal, and academic record requirements.

6. Third-Party Services

We share limited data with trusted third-party service providers:

Firebase (Google): Used for push notifications. Device identifiers such as FCM tokens are processed to deliver notifications. No personal content data is shared with Firebase.
WhatsApp (Meta): Used for sending transactional messages including notifications, fee receipts, fee reminders, event reminders, and announcements. Guardian/parent phone numbers are shared with WhatsApp Business API to deliver messages. Message content is end-to-end encrypted by WhatsApp.
GoDaddy Email Services: Used for sending transactional emails.
Amazon Web Services (AWS): Used for secure data storage and hosting of application data including images and records.

These providers process data only on our behalf and under strict confidentiality agreements.

These third-party services have their own privacy policies, and we encourage you to review them.

7. Children's Privacy

Our services are designed for educational institutions and involve the collection of information from minors. We are committed to protecting children's privacy and comply with applicable laws regarding the collection and use of information from children under 18 years of age, including the Children's Online Privacy Protection Act (COPPA) and equivalent local laws.

We collect and process children's data only under the authorization of the educational institution and with verifiable consent from parents or legal guardians. The app is not directed at children for independent use — it is intended to be used by school staff and parents/guardians to manage children's academic records.

Data collected about minors includes: Name, class/section, attendance, academic performance, and photographs (captured only by authorized staff). We do not collect children's personal data for advertising, profiling, or any purpose unrelated to educational administration.

Parents/guardians can review, request correction, or request deletion of their child's personal data by contacting us at auranga.biz@gmail.com.

8. Your Rights

You have the following rights regarding your personal information:

Access: Request access to your personal data
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data (subject to legal requirements)
Objection: Object to certain processing of your data
Portability: Limited data export capabilities as per institutional policies

To exercise these rights, please contact us at auranga.biz@gmail.com or call +91-733768 0905 / +60-034265 3231.

Account Deletion Request

If you wish to delete your account and all associated data, you can request account deletion by:

Option 1: Send an email to auranga.biz@gmail.com with subject line "Account Deletion Request" including your registered email/phone and user ID.

Option 2: Call us at +91-733768 0905 / +60-034265 3231 during business hours (9 AM - 5 PM MYT, Monday to Friday).

Option 3: Contact your school administrator directly to initiate the deletion request.

Data Deleted: Upon account deletion, we will remove your personal profile information, login credentials, and associated activity data. Some information may be retained for legal compliance, audit purposes, or as anonymized records for academic history (if applicable to your institution's policy).

Processing Time: Account deletion requests are typically processed within 15-30 business days.

Manage App Data (Partial Data Deletion)

You can request deletion of specific data collected through this app without deleting your entire account. This includes:

Activity History: App usage logs, login history, and session data
Transaction History: Fee payment records, expense records (where applicable)
Images and Videos: Profile photos, uploaded documents, and media files
Notification History: Push notification logs and preferences
Device Information: FCM tokens and device registration data

How to Request Partial Data Deletion:

Send an email to auranga.biz@gmail.com with subject line "Data Deletion Request" and specify:

1. Your registered email/phone and user ID
2. The specific type(s) of data you want deleted (e.g., "activity history", "uploaded images")
3. Any specific date range (if applicable)

Processing Time: Partial data deletion requests are typically processed within 7-15 business days.

Note: Some data may be retained for legal compliance, academic records, or institutional requirements even after a partial deletion request.

9. Cookies and Local Storage

Our application uses:

Cookies: To store language preferences and user settings
Local Storage: To maintain login sessions and application state
JWT Tokens: For secure authentication and session management

You can manage cookie preferences through your browser settings, though this may affect app functionality.

10. Data Sharing and Disclosure

We do not sell personal data under any circumstances.

We do not use personal data for advertising, marketing, or profiling purposes. We do not share data with third parties for advertising or tracking. Data is never used to build advertising profiles or serve targeted ads.

We may share information only in the following limited circumstances:

• With your explicit consent
• To comply with legal obligations or lawful government requests
• To protect the rights, safety, and security of students, staff, and the institution
• With authorized educational authorities as required by law
• With service providers who assist in our operations (under strict confidentiality and data processing agreements)

No data is transferred to third parties for purposes unrelated to the app's core educational management functionality.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of any significant changes by:

• Posting the new Privacy Policy on our application
• Sending notifications through the app
• Updating the "Last updated" date at the top of this policy

Continued use of our services after changes constitute acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA). Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Kuala Lumpur, Malaysia.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: auranga.biz@gmail.com
Phone: +91-733768 0905
Address: Oranga School, Pipra Kala, NO. 31, Jalan Kedondong, Ampang Hilir, 55000 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur

We will respond to your privacy-related inquiries within 5 days of receipt.