Privacy Policy

1. Information We Collect

When you register and use the Drexora School Student Portal, we collect the following categories of information:

• Personal Identification: Full name, date of birth, gender, and passport photograph.
• Contact Information: Email address and phone number.
• Family Information: Parent or guardian name and contact details.
• Academic Information: Class, admission number, subject combination, academic results (C.A. scores, exam scores, term totals), class position, and teacher/principal comments.
• Account Credentials: Email address and password (passwords are hashed and managed securely by Firebase Authentication — we never store your plain-text password).
• Usage Data: Login timestamps and page interactions, collected automatically by Firebase services.

2. How We Use Your Information

We use the information we collect solely for educational and administrative purposes, including:

• Creating and managing your student portal account.
• Displaying your academic results, report cards, and class position.
• Enabling school administrators to upload and manage academic records.
• Sending school announcements and important notices.
• Providing password reset functionality via your registered email.
• Maintaining the security and integrity of the portal.

We do not use your information for advertising, profiling, or any commercial purpose. We do not sell, rent, or share your data with third parties outside of those described in this policy.

3. Who Can See Your Data

Access to your personal and academic data is strictly controlled:

• You: You can see all your own profile information, results, and announcements after logging in.
• School Administrators: Authorised Drexora School administrators can view and manage all student records, upload results, and manage accounts. Administrators are trusted school staff only.
• Other Students: Other students cannot see your data. Each student's records are protected by Firebase security rules that enforce individual access control.
• Parents/Guardians: The portal is currently student-accessed. Parents may view records through their child's account credentials provided by the school.

4. Data Storage & Security

The Drexora School Portal is built on Google Firebase, a platform that provides industry-standard security including:

• All data is stored in Google's Firebase Realtime Database and Firebase Authentication, hosted in secure Google data centres.
• All data transmissions are encrypted using HTTPS/TLS.
• Passwords are hashed by Firebase Authentication and are never stored in plain text.
• Firebase security rules ensure each student can only access their own records.
• Firebase Storage is used for profile photographs, with access controlled per-user.

5. Cookies & Local Storage

The portal uses browser local storage to remember your theme preference (light or dark mode) and to maintain your login session. We do not use advertising cookies or third-party tracking cookies.

• Session cookies: Used by Firebase Authentication to keep you logged in securely.
• Local storage: Used to remember your display theme preference.

You can clear these at any time through your browser settings, which will log you out of the portal.

6. Children's Privacy

Drexora School serves students who may be under the age of 13. We are committed to protecting the privacy of young students. In compliance with child safety standards:

• Student accounts are created by the school administration or by students with parental consent.
• We do not knowingly collect more personal information than is necessary for educational purposes.
• Parents or guardians may request to review, update, or delete their child's information by contacting us (see Section 11).
• We do not serve advertisements to any users, including minors.

7. Data Retention

We retain your data for the duration of your enrolment at Drexora School and for a reasonable period thereafter for record-keeping and compliance purposes. Specifically:

• Academic records (results, report cards) are retained permanently as part of the school's official academic history.
• Account data (profile, login credentials) may be deactivated or removed upon request after graduation or withdrawal.
• Data deletion requests can be made by contacting the school administration (see Section 11).

8. Your Rights

You have the following rights regarding your personal data:

• Right to Access: You can view your profile and academic records at any time by logging into the portal.
• Right to Correction: You may request corrections to inaccurate information by contacting your class teacher or the school administrator.
• Right to Deletion: You may request deletion of your account and associated data by contacting the school (subject to our record-keeping obligations).
• Right to Information: You may ask us at any time what data we hold about you.

To exercise any of these rights, please contact us using the details in Section 11.

9. Third-Party Services

The portal uses the following third-party services, each with their own privacy policies:

• Google Firebase (Authentication, Realtime Database, Storage) — Firebase Privacy Policy
• Google Fonts — used to load the Inter typeface for display.
• Font Awesome (via CDN) — used for icons throughout the portal.

We do not use any social media tracking pixels, advertising networks, or analytics services beyond Firebase's built-in usage analytics.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make significant changes, we will:

• Post the updated policy on this page with a new effective date.
• Notify students and administrators via a school announcement on the portal.

Your continued use of the portal after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: