Privacy Policy

Last updated: September 13, 2026

1. Introduction

At Attenda, we are committed to protecting the privacy of our users, especially considering that our platform handles data related to students, teachers, and parents. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. Data We Collect

• Account Information: Name, email, phone number, school name, address.
• Student Data: Names, registration numbers, class assignments, attendance records.
• Employee Data: Names, employee IDs, contact information.
• Usage Data: Login times, feature usage, browser information.
• Communication Data: Messages sent through the platform's chat features.

3. Data Isolation

Attenda implements strict multi-tenant data isolation. Each school's data is completely separated and inaccessible to other schools on the platform. This is enforced at the database level through school_id segmentation.

4. How We Use Your Data

• To provide and maintain the attendance management service.
• To send notifications (SMS, WhatsApp, email) as configured by the school.
• To generate reports and analytics for school administrators.
• To improve our platform and user experience.
• To communicate with you about your account and service updates.

5. Data Security

• All passwords are hashed using bcrypt (password_hash).
• All database queries use PDO prepared statements to prevent SQL injection.
• CSRF protection is implemented on all forms.
• Session management includes timeout and ID regeneration.
• HTTPS is enforced in production.

6. Third-Party Services

We may use the following third-party services:

• SMS gateway providers for sending attendance alerts.
• WhatsApp Business API for message delivery.
• Google Fonts for typography.

7. Data Retention

We retain your data for as long as your subscription is active. Upon cancellation, data is retained for 30 days and then permanently deleted. You may request immediate deletion by contacting support.

8. Your Rights

• Right to access your personal data.
• Right to request correction of inaccurate data.
• Right to request deletion of your data.
• Right to export your data in a standard format.

9. Children's Privacy

Student data is managed by their school administrators and parents. We do not collect data directly from children without school/parental consent.

10. Contact

For privacy-related inquiries, contact us at privacy@attenda.online.