Privacy Policy

1. Who we are

SchoolSphere (schoolsphere.education) is a school management and parent-communication platform. Each school using SchoolSphere is the data controller of its own community's personal data; SchoolSphere acts as the data processor operating the platform on the school's behalf.

2. Children's data & guardian consent (Qatar PDPPL)

We process children's personal data only on the instructions of the school and in accordance with Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016). Children's data is treated as data of special nature under Article 16, with enhanced security controls.

Explicit guardian consent is captured in-app before a child's data is processed: every guardian is shown a consent notice describing the data processed and its purposes, and their consent (or its withdrawal) is recorded with a timestamp and policy version. Schools can evidence this at any time via the in-app Consent Register.

3. What data is processed

Student profile (name, date of birth, class, photo), attendance and absence records, academic records (assignments, grades, exams, report cards), behaviour records, daily diary entries, health/nurse visit records, class photos and media, canteen orders, transport assignment, fee invoices and payments, and the account details (name, email) of parents and staff.

4. Purposes

Data is processed solely to deliver the school's education services: attendance, academic progress, school–home communication, health and safety, activity management, and fee administration. Personal data is never sold, and never used for advertising or profiling.

5. Guardian rights

Guardians may at any time, from Settings → Privacy & Data: view their child's consent status, download a complete machine-readable copy of their child's personal data, and withdraw consent. Requests for correction or erasure can be made to the school, which can action them in the platform. We support schools in answering any request from Qatar's National Data Privacy Office.

6. Storage, security & residency

Data is hosted on secured cloud infrastructure with encryption in transit (TLS), per-school isolation of all records, role-based access control, and audit records of consent. Hosting-region details and a signed Data Processing Agreement are provided to each school as part of onboarding — contact us for the current infrastructure and sub-processor list.

7. Retention & deletion

Records are retained while the school's contract is active and for the period the school instructs (or the law requires). On contract termination or verified deletion request, the school's data is deleted from production systems and backups on a fixed schedule.

8. Contact

Data protection enquiries: privacy@schoolsphere.education. Guardians should contact their school first — the school controls its community's data — and may also contact us directly.