Privacy Policy

This Privacy Policy explains how Edukitor ("we," "us," "our") handles information in connection with the Edukitor school information system (the "Service"), operated by Gabriel S. Sacro, based in Surigao City, Philippines.

1. Who This Applies To

Edukitor is used by schools ("Client Schools") to manage their own students, parents/guardians, teachers, and staff. In most cases, the Client School determines what information is collected and why (sometimes called the "data controller" under the Philippine Data Privacy Act of 2012, RA 10173), and Edukitor acts as the school's service provider, processing that information on the school's behalf and instruction.

If you are a parent, student, or staff member with questions about your specific data, we recommend contacting your school directly first, since they control your school-specific records. You may also reach us at admin@edukitor.com.

2. Information We Collect

Depending on your role, the Service may collect and store:

• Identity information — full name, gender, date/place of birth, contact number, email address, home address.
• School/academic information — enrollment status, grade level/section, subjects, grades, attendance records, schedules, and Learner Reference Number (LRN).
• Family/relationship information — parent/guardian names and their relationship to a student, used to link family accounts.
• Access credentials — login email and password (stored securely, never in plain text), and, where a school uses them, RFID card numbers or QR codes for attendance check-in.
• Payment-related records — tuition plan amounts, installment history, GCash reference numbers, and screenshots of GCash transactions a parent voluntarily uploads for a school cashier to manually verify. We do not collect card numbers, bank account numbers, or other sensitive financial credentials — payments happen entirely outside the Service, directly between the parent and the school.
• Communications data — a Telegram Chat ID, if a user voluntarily links their Telegram account to receive notifications, and any messages or announcements exchanged through the Service.
• Consent record — the date and time you agreed to these Terms and this Privacy Policy, and which version you agreed to, so we can show you an updated version to re-review if either changes.
• Technical information — basic device/browser information and usage logs, collected automatically to help us maintain and improve the Service.

3. Why We Collect It

Information is collected and used solely to operate the Service for its intended purpose — helping schools manage enrollment, attendance, grading, scheduling, communication, and tuition tracking for their own school community. We also use aggregate, non-identifying usage information to guide our ongoing effort to optimize and automate the Service for all users.

We do not sell personal information, and we do not use student data for advertising.

4. Minors

Many Users of the Service are students who are minors. Student accounts are created and managed by the Client School and/or a parent/guardian, not directly by the minor. A parent/guardian linking their own account to a student confirms they have the legal authority (as a parent, guardian, or authorized relation) to do so. We rely on the Client School to obtain any consent required under applicable law before enrolling a student in the Service.

5. How We Protect Information

We apply reasonable organizational, physical, and technical safeguards intended to protect information from unauthorized access, loss, or misuse — including access controls scoped to each user's role and school, and encrypted storage of credentials. However, no software system connected to the internet can be guaranteed completely secure, and we cannot promise that information will never be accessed, disclosed, altered, or destroyed as a result of a breach of any of our safeguards. By using the Service, you acknowledge and accept this inherent risk, as described further in our Terms and Conditions.

We rely on established third-party cloud hosting, database, and content-delivery infrastructure providers — which may include, among others, Cloudflare and Google Firebase — to store and process information on our behalf, under contractual obligations to protect it appropriately.

6. Data Retention

Information is generally retained for as long as the Client School maintains an active relationship with the Service, and thereafter for as long as reasonably necessary for legitimate administrative, legal, or record-keeping purposes. Philippine schools are separately required to retain certain student records (e.g., Form 137) permanently under DepEd regulations, independent of whether they continue using the Service. As explained in our Terms and Conditions, physical records kept by the school remain the authoritative backup at all times.

7. Your Rights

Subject to applicable law, including the Data Privacy Act of 2012, you may request to know what personal information we hold about you, request correction of inaccurate information, or request deletion, by contacting your Client School directly (as they control most day-to-day records) or by emailing admin@edukitor.com. We will respond within a reasonable time, may need to verify your identity and role before acting on a request, and may decline requests that conflict with a school's independent legal recordkeeping obligations.

8. Changes to This Policy

We may update this Privacy Policy from time to time as the Service evolves. We encourage users to review this page periodically. Continued use of the Service after an update constitutes acceptance of the revised Policy.

9. Contact

Questions about this Privacy Policy can be sent to admin@edukitor.com.

Edukitor is operated by Gabriel S. Sacro, Surigao City, Philippines.